Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier: oZh8mvgo5+YByI1QCUI5g2sh9apM+KQ8el683vymV18=
Subject key identifier: 6C:EA:53:EC:F5:ED:C8:0F:87:9A:F1:AC:80:C1:FF:BD:5A:06:1D:20
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 019A50E3972F5062C0AB0FE66794D01691F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number: 1721
Signing time: Tue 04 Nov 2025 22:01:23 +0000
Manifest this update: Tue 04 Nov 2025 22:01:23 +0000
Manifest next update: Wed 05 Nov 2025 22:01:23 +0000
Files and hashes: 1: 1gqy8jv-V_H7oweUasDl-ECUQ1I.roa (hash: w7kEB0Eg8qOWOT1pz0wZhRGBM4Y+whIgLQrg7qaGMxo=)
2: EHlGqb04iAIbXB5rqXIY0OnBfmY.roa (hash: 81m7h3zrGqKLifk2aQp93enuHjOZTif5bviOShjKwd0=)
3: JwRfQe1RRMFqmouHM8GDCbBv0qg.roa (hash: HeOaGIUlAHS+jA2tQ0PvTXar52BfbpysaRlaXP3EMw8=)
4: OrMUAZWeOYOcLPd3g5LwbkMUXk8.roa (hash: gKkiytrZ0hzX5R/Kg8dR7Gdhl0r2rLxr0t9FK+F8kjA=)
5: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: h+X+f5n1IegKhXNrte9fYdPV+X/tTug0j+cffgww6wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:97:2f:50:62:c0:ab:0f:e6:67:94:d0:16:91:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Nov 4 22:01:23 2025 GMT
Not After : Nov 5 22:01:23 2025 GMT
Subject: CN=6cea53ecf5edc80f879af1ac80c1ffbd5a061d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:57:09:40:cc:ac:6c:2f:29:28:2d:6d:62:
c7:3e:39:7a:8a:7e:6b:c6:3d:59:1b:25:fd:68:b6:
fe:6e:40:20:86:aa:65:fb:d0:b4:b1:e9:27:9d:8e:
d4:d3:66:c2:bc:45:36:ab:eb:75:c5:32:a1:0a:52:
5a:84:ed:6a:f1:26:c2:6b:fa:e8:5d:4f:ba:c5:83:
75:e5:34:4f:f1:c3:e4:b8:e9:77:3c:39:03:ce:45:
83:dc:bb:0e:58:c4:d7:e2:9a:bf:d2:7b:39:6a:99:
1f:25:dc:d4:44:83:a3:cf:20:f4:29:b4:b1:b6:f9:
21:73:0f:cd:43:66:2c:41:26:29:ee:04:f5:cf:d4:
dc:d8:fb:69:2e:6d:1b:88:eb:37:f1:77:87:59:ac:
b3:a7:ef:3a:1e:a3:ae:d0:27:53:5d:d7:44:c7:3f:
58:15:ea:1d:8b:01:bb:8d:72:97:f7:d1:ea:c1:45:
2c:9e:c6:ee:36:be:05:09:d0:b5:31:e8:50:1a:7a:
65:b8:37:f4:51:7a:b5:88:62:1e:8e:55:00:1f:d4:
c4:57:df:40:83:06:57:eb:c4:95:2c:02:34:21:90:
1d:53:ed:5a:39:9d:a0:a5:a4:45:57:36:2d:af:49:
3a:1f:a4:2b:e5:5c:18:c4:2c:f6:c1:7f:1a:4b:57:
bc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EA:53:EC:F5:ED:C8:0F:87:9A:F1:AC:80:C1:FF:BD:5A:06:1D:20
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ae:a5:bf:02:cb:1f:01:7a:ec:0f:c2:b4:7e:8d:cf:fe:57:
0b:25:2c:6c:66:71:18:d3:8e:2b:ce:72:17:2e:12:37:27:35:
21:74:3f:a9:36:e3:c2:28:95:83:11:2e:75:98:34:56:83:27:
39:ef:d1:f4:5f:67:96:42:d0:c8:ac:9d:39:b0:f0:a0:ab:e1:
5c:75:64:31:f2:c7:ab:3e:f8:b0:a3:9d:c7:5f:42:20:96:88:
90:80:31:fd:54:70:c9:b7:55:72:9e:5c:39:aa:1e:b0:4c:19:
b0:44:d4:31:24:3b:46:39:39:1b:97:b3:cd:54:68:67:01:11:
72:cc:27:b2:90:ce:74:2f:1b:a9:d1:69:43:09:5f:38:46:c8:
1c:8a:a4:f6:73:e2:2f:da:fb:97:ee:42:cb:8e:16:20:6f:1e:
4e:3d:35:f0:64:16:28:73:cd:32:ba:25:14:4a:82:57:3f:96:
27:07:83:b2:8d:da:27:65:45:b2:53:8c:e0:9a:4f:58:7f:73:
fb:3a:cd:63:eb:11:ca:86:b0:dd:6f:c4:5b:d1:ba:d7:70:45:
f1:3d:c8:7b:8e:68:07:a0:f4:49:6e:ab:a8:13:74:29:17:3d:
9c:e1:24:a2:a1:38:3a:36:9b:14:66:35:76:1d:2b:a6:68:92:
a7:d3:65:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:11:13 2025 by rpki-client