Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File: j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier: iyfn+b6X87zDrdl0VcADN3kaT+Q5gSdfS6Xqy+y3zm0=
Subject key identifier: 99:1F:81:EF:5D:C3:9E:36:B3:5E:3F:E3:81:BE:72:C0:BA:5E:D1:EE
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer: /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial: 019A51BE7E833421DB801B59D2DAC9F4A2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 02:00:29 +0000
Manifest this update: Wed 05 Nov 2025 02:00:29 +0000
Manifest next update: Thu 06 Nov 2025 02:00:29 +0000
Files and hashes: 1: Y7eKY9L9f9B1QlpP7Px14Uk4KN0.roa (hash: Ti8fjG26nfzvszXNq8D1c3nuNhyRNxvinzWzoAh4fqQ=)
2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: yA5jqnRZcWcUFSjBG0QkBlNNjZlB3T8YgjpH77VHnBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:7e:83:34:21:db:80:1b:59:d2:da:c9:f4:a2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Validity
Not Before: Nov 5 02:00:29 2025 GMT
Not After : Nov 6 02:00:29 2025 GMT
Subject: CN=991f81ef5dc39e36b35e3fe381be72c0ba5ed1ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:2e:6c:d2:0f:65:1e:21:6b:88:12:54:ea:
13:61:d3:e4:80:e1:48:0d:a4:30:7a:87:3c:b8:93:
ab:0b:91:22:81:7c:aa:96:ff:bb:52:50:4d:02:72:
32:d1:ed:d4:47:52:2d:a9:3c:10:b8:0c:08:8e:ac:
6f:c5:90:77:38:00:c9:04:74:13:3a:43:3e:07:53:
19:8a:e0:7b:43:8e:5e:ea:ed:8a:cb:2d:63:14:60:
bf:24:30:a0:5e:9a:83:4b:49:3f:b3:03:e2:b8:35:
b3:28:0b:80:86:bd:88:11:16:7e:c2:de:06:47:69:
f8:ef:20:69:64:4d:46:57:0f:c6:e8:5a:40:12:d2:
24:44:9c:ad:2d:ba:01:fc:03:b9:35:bd:35:f4:9c:
e3:73:df:3d:0e:4c:d3:8b:e6:64:16:b1:71:04:69:
de:ba:44:81:cd:ee:f2:50:47:8d:8f:39:88:12:8c:
16:fb:cb:9c:e4:cf:d7:58:f3:61:96:eb:ad:79:18:
cb:bf:2c:10:e6:93:da:49:6d:1e:38:36:04:64:37:
17:d9:c4:42:d7:28:e1:bc:cb:23:9d:71:7e:5f:a3:
5b:b7:89:88:2c:7b:73:f1:f3:6d:01:84:9b:1d:f6:
f2:7d:20:aa:eb:8a:29:04:fc:23:1c:bf:06:05:14:
9a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:1F:81:EF:5D:C3:9E:36:B3:5E:3F:E3:81:BE:72:C0:BA:5E:D1:EE
X509v3 Authority Key Identifier:
keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e0:82:52:75:90:d8:b9:95:b2:b7:ea:be:8e:5d:4f:2c:27:
c9:de:9e:1f:14:95:ee:b2:3e:68:f0:12:98:16:d3:c2:e6:26:
c3:21:0b:b7:0a:af:73:b1:b1:96:45:ad:ab:a4:f4:13:23:3e:
a5:50:c3:bc:a5:b5:a3:90:50:0c:b0:c9:7b:7d:78:ef:42:e2:
49:2e:41:33:89:24:bc:77:f2:db:48:1b:16:d8:ae:6a:56:2d:
2f:21:78:3a:05:0b:66:8a:84:b8:e0:3c:4c:15:c2:fc:f8:69:
58:91:da:d4:49:9a:83:1c:e8:d5:12:42:34:32:e9:f0:aa:9f:
3c:fc:04:58:5d:34:40:09:4f:0c:22:a5:d2:6d:37:17:20:c7:
c5:38:fe:05:7d:51:38:fa:86:13:57:f8:bf:7c:8c:fc:14:71:
36:37:6b:34:fc:58:5b:15:eb:b9:69:a2:d0:0f:f6:c6:88:58:
a6:5d:2e:51:63:96:a1:e3:8a:4f:b0:92:be:d3:a7:d0:bd:5b:
9a:81:ef:28:97:33:39:98:78:8e:c8:db:3f:7a:c4:87:32:11:
f6:1b:4c:c0:b6:2b:f8:7e:91:45:64:76:fa:68:ea:67:de:f0:
4a:03:ce:41:85:72:72:7a:3c:4a:47:5b:d0:3d:4b:f6:e0:ee:
39:c1:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:20:45 2025 by rpki-client