Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier: FNh/oNvzOoXweHBHI4sZAojUFMPqiDmOgNX1T608/e8=
Subject key identifier: 0B:65:64:90:6F:15:8C:52:F1:DE:B2:42:79:EF:B8:BD:A2:A1:9C:58
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 019A4D3CF1A2B3D7D56BCAB597BFE0CF282C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 05:00:30 +0000
Manifest this update: Tue 04 Nov 2025 05:00:30 +0000
Manifest next update: Wed 05 Nov 2025 05:00:30 +0000
Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: JPpaWLxsH6v7RzRhn2157upGRXwTIjE2RMHf+u5yDBg=)
2: RfXdB1uHqTBN6RI4Ei6Oa090sJU.roa (hash: dQnKrWhdakZ+384uTWhQC1swu7fczbqA0NfqM/pjIIQ=)
3: wtfqM181rNTZILTtZZuVyGYsV2g.roa (hash: jL1T6NkOiM+9LzgY51xQQ/S9ZQ9hPL5ZNlX1CHentpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f1:a2:b3:d7:d5:6b:ca:b5:97:bf:e0:cf:28:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Nov 4 05:00:30 2025 GMT
Not After : Nov 5 05:00:30 2025 GMT
Subject: CN=0b6564906f158c52f1deb24279efb8bda2a19c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:b7:97:30:4d:cf:c7:93:74:d4:45:8c:8a:
6b:a9:94:65:e1:72:b2:10:0a:1a:43:56:2a:4a:51:
0a:59:34:b9:d4:1f:b6:c5:aa:e1:2a:f0:8a:08:a9:
a2:f5:28:3e:23:7f:c2:f4:71:97:f5:e0:65:87:37:
7d:ec:0e:9e:78:5f:b0:fd:5e:ae:20:65:e5:1d:91:
e9:5c:cb:fd:88:fe:d7:5b:46:67:df:45:c4:ca:45:
5e:40:78:fb:85:fd:62:5f:48:70:e7:b9:8e:fd:28:
bb:cb:03:3d:4a:7a:bb:ac:29:44:af:1d:f3:54:aa:
06:e1:86:82:1a:e2:35:d6:0e:13:95:01:c8:4e:11:
de:7b:3e:aa:39:02:49:cc:5c:9b:98:73:6f:e6:bf:
07:d0:ad:c1:01:a1:01:6c:bd:82:9a:ee:63:cd:3d:
35:b3:c7:cd:3a:e7:eb:94:22:47:89:c0:7e:7a:2e:
4c:be:f6:7e:ea:a6:3a:99:05:e7:fa:04:cc:81:ae:
7c:c1:33:1a:07:5a:cb:c1:4e:1b:0d:7b:c7:d0:ef:
53:b2:9b:b6:b0:79:b6:ac:16:57:ef:30:d8:43:4b:
7c:0e:3c:42:37:44:7f:d0:b4:b3:3d:d6:8f:9f:91:
5a:8b:d1:ba:30:ef:e8:20:ab:e3:6a:f3:cb:81:60:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:65:64:90:6F:15:8C:52:F1:DE:B2:42:79:EF:B8:BD:A2:A1:9C:58
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:44:ca:68:0e:95:c6:d6:03:a2:19:04:3d:67:9a:58:30:b4:
5a:82:41:6d:22:d6:fc:52:4d:b5:bf:d5:33:be:a1:50:fc:24:
50:17:25:79:24:d5:b5:0d:bc:c3:bf:f4:dc:76:a6:da:ca:4e:
23:e7:d8:4b:3d:7f:14:43:e0:c3:cc:fb:c4:ca:fc:ac:e9:df:
a8:20:61:6c:e1:d5:9d:4a:4e:b0:63:50:62:7c:84:3e:31:3c:
e8:a5:72:90:f0:82:95:9b:02:4d:32:e0:3c:85:2a:cc:24:45:
7a:c4:98:b8:28:17:d5:30:5a:3b:ec:2b:f4:e9:cc:db:06:a4:
24:46:df:fb:ec:1e:05:88:0c:94:3b:9e:c6:7b:73:14:77:28:
21:5b:15:36:3b:24:7e:b7:95:5c:3d:82:c3:aa:41:92:16:c4:
cb:cc:bd:f2:5f:d0:31:e2:d1:9e:44:f7:31:7d:67:7b:d6:03:
4c:82:d4:b5:fe:b9:87:2d:d7:d5:c4:81:e1:2f:b6:53:85:11:
d6:94:d2:75:64:45:93:e9:3c:cd:4f:f3:a0:61:18:dc:23:7c:
1f:7e:b7:20:0c:10:df:c5:71:e5:71:f0:51:af:b0:51:80:f1:
95:92:c5:03:a7:9c:7d:47:ae:be:54:a2:6c:d1:16:f9:1e:ce:
53:93:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:50 2025 by rpki-client