Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
File: JWvhdrMT4aigUPZwr1dncbZV1hE.mft (raw, json)
Hash identifier: ASSAWTB3vDv6KOVoqqRMHG/M/46oq1iavoB9jwCFPOo=
Subject key identifier: 79:45:C6:30:6B:EB:71:22:E4:91:10:5A:EC:B5:52:AB:78:84:5C:3C
Authority key identifier: 25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
Certificate issuer: /CN=256be176b313e1a8a050f670af576771b655d611
Certificate serial: 019A4E4F80EEADF171EF84BC57596120D704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 10:00:24 +0000
Manifest this update: Tue 04 Nov 2025 10:00:24 +0000
Manifest next update: Wed 05 Nov 2025 10:00:24 +0000
Files and hashes: 1: JWvhdrMT4aigUPZwr1dncbZV1hE.crl (hash: y7c9XBMD+inIGZzPUUTIadZwI5+xddU9ulp3tsMbk6U=)
2: Wvp3Sn9ZR4lVyrCoLZB5zbOtiY4.roa (hash: cJ7oC/tfZObuQa2Mj7JBLCFjsQinWzWvmcJSKHgfJM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:80:ee:ad:f1:71:ef:84:bc:57:59:61:20:d7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256be176b313e1a8a050f670af576771b655d611
Validity
Not Before: Nov 4 10:00:24 2025 GMT
Not After : Nov 5 10:00:24 2025 GMT
Subject: CN=7945c6306beb7122e491105aecb552ab78845c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:75:5e:fc:37:09:6a:c6:c8:a8:be:02:75:
50:3d:9b:80:02:3c:b8:ca:d8:56:20:55:8c:3e:92:
f0:c7:ab:17:9a:a6:92:2c:fa:c0:d7:eb:1b:ca:dc:
aa:3c:4e:6c:04:46:0e:a9:6e:d5:8b:dd:2c:ac:74:
1b:7b:7f:3d:cb:86:d7:79:69:95:78:eb:3f:ad:84:
f3:bd:f5:81:39:17:6a:74:54:ce:22:9d:27:50:2d:
d2:fe:dd:d2:38:fe:1a:63:dd:d0:23:c9:ab:bc:fb:
d7:f8:bc:a2:cd:c2:ec:7d:bd:fd:d9:89:c0:2b:f2:
c2:4e:26:f9:e0:31:be:cc:57:fb:d2:11:4f:14:5c:
d2:f1:5d:54:91:d8:12:66:9e:d0:98:f5:cb:ee:cd:
1b:1c:53:dc:5a:fc:c3:2e:e9:33:ca:ab:24:65:c8:
c8:02:84:53:da:dd:a1:04:9b:1c:e8:2f:4c:be:22:
e1:f8:11:f7:72:ca:03:b8:fa:8b:49:a7:8c:be:9f:
b3:67:4a:a4:a3:4b:50:1c:17:34:94:d1:52:1f:21:
6d:2b:b8:fb:0f:12:af:00:47:bf:0f:68:64:20:45:
cf:52:dd:f7:42:fd:f1:9f:58:fc:82:02:ef:37:35:
61:e8:9e:32:e5:bf:d0:a6:17:db:66:f7:78:a4:b4:
36:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:45:C6:30:6B:EB:71:22:E4:91:10:5A:EC:B5:52:AB:78:84:5C:3C
X509v3 Authority Key Identifier:
keyid:25:6B:E1:76:B3:13:E1:A8:A0:50:F6:70:AF:57:67:71:B6:55:D6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWvhdrMT4aigUPZwr1dncbZV1hE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/135032-ea24-4a47-8f5c-e0bac4161953/1/JWvhdrMT4aigUPZwr1dncbZV1hE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:54:c4:31:94:8b:36:20:1b:d2:53:37:95:79:28:c8:c2:c0:
a2:c9:fa:be:61:09:04:e7:1c:05:27:ff:31:49:0a:f4:96:8f:
ff:4b:fa:45:4b:a6:5b:49:70:08:55:7b:48:0d:fb:33:03:d3:
b8:92:b9:cb:fa:df:cd:a9:ad:2e:8b:4a:0d:f1:69:c2:cd:8a:
6c:c4:3e:df:d2:02:bc:ef:0c:71:d4:f7:7c:db:2f:81:ce:45:
85:de:d6:b6:b2:f8:7a:3f:f1:5f:f9:9c:31:f0:66:6a:a1:f3:
83:03:6d:93:ea:a5:b0:79:9e:15:c7:37:47:20:6d:fd:2b:2b:
2a:04:87:35:ad:0d:05:af:b3:fb:c1:86:96:1b:a8:f7:87:6f:
7a:c2:7a:4e:4c:21:d6:b6:e3:7f:e6:de:27:47:bc:42:95:1d:
80:ae:af:8f:d2:e5:09:9b:36:67:13:45:64:18:67:c9:f7:20:
4f:9a:63:8f:39:4a:75:88:fe:36:a4:77:1f:81:0b:56:a4:80:
fe:95:7b:4f:ff:17:bf:b7:62:62:66:18:c4:c1:c2:04:9d:7c:
2c:0f:8c:94:2f:e1:70:14:7b:62:3f:d6:2c:14:d0:5f:44:41:
b9:e7:c2:ee:69:60:a4:97:d9:46:85:14:f9:96:fd:72:ed:64:
a2:5c:ce:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:46 2025 by rpki-client