Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
File: Jr3a4E28sfgvVbB4MHuksIS5lLs.mft (raw, json)
Hash identifier: kLTpySh95YiRJEnHW98VR6hiYZh1xrqmMRqYgYE3kP4=
Subject key identifier: 23:FA:69:80:94:40:BF:20:70:CE:2A:51:72:7E:3E:60:19:30:A9:4C
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 019A4F625424F6D98BEC3017E73CFC3079AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 15:00:35 +0000
Manifest this update: Tue 04 Nov 2025 15:00:35 +0000
Manifest next update: Wed 05 Nov 2025 15:00:35 +0000
Files and hashes: 1: 6s_6R9Qg6B0BWMzsSYadcyCPTNI.roa (hash: 0TX6RB/i/PYM+jHhKWcDxzPxSqvqvW8BUSQ5qekuotk=)
2: Jr3a4E28sfgvVbB4MHuksIS5lLs.crl (hash: secVwD+V8OVNqcTp268l/47KBNeLxjN/IXd0WZJlAjg=)
3: On6P0oyCVsJaxIEE3GftNC4qztw.roa (hash: MHdX24gf5gM9PdREHRYQX0s+qP7Sh6jKR9PNtNbtiPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:54:24:f6:d9:8b:ec:30:17:e7:3c:fc:30:79:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: Nov 4 15:00:35 2025 GMT
Not After : Nov 5 15:00:35 2025 GMT
Subject: CN=23fa69809440bf2070ce2a51727e3e601930a94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:63:d6:21:04:97:74:23:6b:67:35:15:19:
1a:bf:4b:8c:02:ba:56:c4:73:e0:b8:fe:41:64:f8:
32:4f:ec:55:97:99:26:88:8e:86:b7:c8:77:de:27:
c8:b1:9a:f6:f0:00:ce:c4:d2:60:bb:64:f6:74:07:
10:34:8f:6b:99:77:e8:b6:c0:46:46:56:d1:cc:14:
73:72:0e:fe:f5:05:95:ee:4b:d5:ce:50:98:8f:9e:
5e:ef:9d:e2:8c:50:07:6f:85:d6:60:17:f3:5f:c0:
fe:ff:41:22:d3:6e:f6:8d:45:c8:f4:e6:63:b9:c1:
72:8c:0d:2c:eb:8e:69:b3:92:10:7c:6b:bd:51:73:
5c:9e:8f:41:c8:a8:72:4d:82:65:6c:f8:82:70:0b:
7e:88:bc:f9:4f:77:f8:be:b6:15:35:30:45:e4:b2:
60:c5:30:52:4d:7f:e8:03:e8:6d:4d:dc:05:2c:16:
57:01:6e:51:76:8a:57:d1:39:d7:79:bc:c7:84:9d:
5d:33:d7:1e:97:e9:7a:07:ef:44:98:de:b4:4b:8f:
80:f1:cd:10:99:d3:99:cc:2c:8d:f8:9f:7e:cd:29:
df:65:72:a5:72:78:55:52:a3:da:17:7c:b2:e8:3b:
89:cc:cf:4f:fa:e4:02:0a:15:89:05:e8:05:f6:5c:
b9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FA:69:80:94:40:BF:20:70:CE:2A:51:72:7E:3E:60:19:30:A9:4C
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c2:d1:dd:bd:19:a3:68:5c:d0:90:6a:cf:e1:8b:90:64:83:
a8:c8:0b:22:6b:22:21:25:d7:0b:4a:ca:68:d0:90:1a:6f:8b:
99:34:2f:c7:87:64:f7:83:2b:f1:65:29:e4:d9:bd:0c:6a:5f:
ef:99:1f:2e:0b:92:00:aa:62:5d:6e:6d:52:fd:3d:36:b0:dc:
75:2c:cf:e3:5d:68:8a:80:04:ee:7c:93:e2:e8:ba:e8:9c:c4:
a0:b8:a1:52:77:d7:6f:18:96:80:a2:42:39:57:dc:50:a5:d5:
3d:db:cb:4a:e7:7f:e5:99:ae:02:0d:d6:bf:a2:2a:1d:17:dd:
a8:89:86:72:8d:61:c2:57:e9:7c:7a:09:d3:18:5a:cc:6d:86:
92:98:c9:e3:05:d0:8a:59:a9:de:76:b8:fe:8b:41:33:d5:40:
df:a0:63:e9:62:06:8a:f8:71:62:02:e2:1b:e2:fc:bf:f9:8d:
fc:84:b9:05:87:ae:9e:a8:d1:9c:57:8b:c6:6c:84:55:bb:1f:
29:ad:95:e7:22:2b:12:d4:f2:2e:e7:ad:8d:a6:89:86:e1:fa:
51:68:0e:17:0c:68:39:97:b6:8c:ab:c6:08:09:0a:f2:19:97:
2a:11:fc:5a:54:c8:c8:9a:4a:35:7c:dc:6f:18:ec:d8:29:28:
46:56:2d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:17:02 2025 by rpki-client