Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
File: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json)
Hash identifier: Fec8vPY/G2/b9wQqWlL7gfNzaQuad+gUVRi8eE2P7pI=
Subject key identifier: 1A:A2:15:14:50:15:49:11:28:60:FC:7C:B3:8D:8E:1C:48:E1:A5:7F
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial: 019A4EF45EE384233A315D48EDFE4B345DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
Manifest number: 1717
Signing time: Tue 04 Nov 2025 13:00:29 +0000
Manifest this update: Tue 04 Nov 2025 13:00:29 +0000
Manifest next update: Wed 05 Nov 2025 13:00:29 +0000
Files and hashes: 1: 3rqvk9Ly9Ero57NmYxKaPl0vDoA.roa (hash: M8FySyxOTMDlpGnQamTf4gMdwU/cr4xnBa652N0ZBzE=)
2: a5qYzrR3zVIVKAC39LbmabIVB3w.roa (hash: o2q3Ya7UWxN56bJjpdJoNhtkB0KM0BVsZTXuLLBCJLo=)
3: b5s6CPLFznLsovYoy29wVzi-3Ok.roa (hash: gTEcnWNc7gGNNW8CTA/atNwTpPOjqZ/Ir9LwK3/7Z6U=)
4: gKZhRE4D1VFL6YVSvsx5XCUWzbo.roa (hash: 51uE4SN0evdj/LX3c8iK4ExCQ5J9huvoiaIN23Ew9+Y=)
5: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: hZtpcoh/LOgdJ3ksMhoUJYU3OQFkNWc8P71mODe/+2Y=)
6: xhLAJjv9_Y1t8jJtI14R7-YuW3Y.roa (hash: 0Rp0DNxPTLSllsBa+ggz8MQkfDKWpPp0o5l05ctu118=)
7: xv_rICPuGTvD6ScITP8bU4s29kI.roa (hash: eF9p3Ueapy3+1vaTSpncjWTz8xDVpoQXfQgMEWvYRQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:5e:e3:84:23:3a:31:5d:48:ed:fe:4b:34:5d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Validity
Not Before: Nov 4 13:00:29 2025 GMT
Not After : Nov 5 13:00:29 2025 GMT
Subject: CN=1aa21514501549112860fc7cb38d8e1c48e1a57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6a:6e:58:2b:6d:21:dd:b9:73:a0:26:4b:4e:
3b:57:58:df:4b:bf:ce:11:b9:0b:4b:c3:5f:e3:ae:
29:f6:96:7f:6a:b0:e5:f1:1c:95:73:76:92:eb:16:
42:a5:8c:ef:4c:e0:46:f0:0a:c6:2c:cc:83:37:a6:
bd:9b:85:c5:21:69:9d:44:a2:67:df:aa:9b:25:1a:
b8:64:21:2d:2a:a3:7b:4c:cb:04:8f:f8:56:ec:fb:
39:6f:24:cb:d5:36:3f:72:61:b7:e3:07:8c:6f:c8:
91:3a:0a:8a:4e:ed:e9:c3:54:f6:57:8a:cf:35:60:
fe:89:3a:8c:43:d6:4c:9f:a5:a1:e2:c2:e8:20:d3:
7a:28:ec:c9:cd:15:1e:9a:d5:7c:ea:55:fd:03:f7:
0c:c6:bb:f1:c5:e9:d1:6c:8b:9b:86:4b:e5:98:66:
94:ff:2c:73:50:e4:f6:47:4e:29:6c:59:bd:14:e3:
e5:d1:9d:42:20:74:e9:f9:82:fc:89:b9:b0:50:6a:
32:3a:a1:d7:57:ce:be:d6:f0:67:a1:26:96:9c:cc:
2e:75:0b:1e:c6:d7:2d:e6:4b:24:f8:6f:4a:a4:5f:
cb:97:1c:2f:3e:e4:b6:76:7a:fc:62:06:1a:91:9f:
be:28:fd:75:09:e5:02:16:63:c0:8f:38:22:9d:56:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A2:15:14:50:15:49:11:28:60:FC:7C:B3:8D:8E:1C:48:E1:A5:7F
X509v3 Authority Key Identifier:
keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e5:76:0c:33:7d:8a:71:7b:a4:56:08:ea:3d:6a:83:d2:b9:
7d:6e:f7:1b:d3:c3:c4:68:44:cc:7c:ce:b1:7b:cf:19:01:2f:
47:11:a9:40:98:e0:07:cb:1a:b8:9f:bd:90:2e:a5:77:03:76:
4f:eb:ec:7c:bf:6d:cf:2f:be:56:fe:a5:a7:0a:07:62:99:81:
49:73:34:97:54:35:d8:50:0c:fc:49:f5:e0:e1:85:4d:e5:84:
80:ce:e3:bd:f0:05:0a:80:fa:b7:69:a5:7d:89:ee:3c:e0:79:
70:9e:4c:e7:10:f6:2a:b3:08:fc:fa:b2:54:4e:24:22:e1:91:
e6:5b:49:55:ec:e1:ac:0d:c2:ef:fe:b4:0d:54:c0:b2:1e:12:
00:ec:5c:22:f4:70:0b:3d:55:59:dc:6f:7d:a2:d0:f7:40:df:
36:62:7b:7f:54:6e:21:5b:c2:0c:08:f3:72:91:42:62:f5:ae:
89:f0:d6:d5:9a:2b:75:2f:10:0e:95:d3:48:ab:c7:d1:2a:5a:
0c:9d:f9:f1:cf:98:82:94:15:5d:9c:dc:e4:47:0a:73:c0:20:
ea:e8:e2:bd:42:05:b9:d0:40:de:ef:90:a4:82:0a:62:ce:32:
61:0e:4b:45:85:75:e4:02:f0:c8:3b:02:41:1c:24:d0:41:ab:
69:22:06:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:29:25 2025 by rpki-client