Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
File: x-jZWfHJVkoz8o_kSrYUuPYrABs.mft (raw, json)
Hash identifier: AWDQNve+6vwJ22wzUb4gT0BqHhTzWYDd3ixRUnC+Sow=
Subject key identifier: 07:85:DF:3B:79:EB:DE:4B:6F:83:1F:9D:46:BD:D9:36:AB:A9:F3:22
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial: 019A4DE157AEBD22B6C1CA60B532EAA93ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 08:00:04 +0000
Manifest this update: Tue 04 Nov 2025 08:00:04 +0000
Manifest next update: Wed 05 Nov 2025 08:00:04 +0000
Files and hashes: 1: 0dZuTVI8Td6vXZ_M7JHFy8X1O5c.roa (hash: F7QdZ0RB8p70yz/o07QNKl2zYYJpUZcQmbMtrrlchjc=)
2: HvzEip9yu7BJ9xjiNMrZ1suP-8Y.roa (hash: CQzBI8KlBsVb85wsnxBXgdOAhqwS8nG5XBQFZs7IhV4=)
3: S-Yjb4eozy3TXfv2IRjmsYO3X3c.roa (hash: 5Sdpus0Ffzh+VbOC9y8nRnaSgxwGysE5TC3V4JwdK/g=)
4: x-jZWfHJVkoz8o_kSrYUuPYrABs.crl (hash: ray2udUCNwv5zJeWVYY463olwjFt+b3OqOulFlkoM5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:57:ae:bd:22:b6:c1:ca:60:b5:32:ea:a9:3e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Validity
Not Before: Nov 4 08:00:04 2025 GMT
Not After : Nov 5 08:00:04 2025 GMT
Subject: CN=0785df3b79ebde4b6f831f9d46bdd936aba9f322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0d:74:ed:fa:d6:5d:a1:00:8d:b7:56:b7:de:
f0:6d:29:c9:d0:7b:af:d8:6a:07:93:b0:d4:fa:2f:
31:74:4a:aa:28:a3:7c:0a:c1:0a:b2:6b:27:96:02:
8a:87:65:2c:48:36:78:e5:5d:bf:38:85:04:d7:f3:
a4:aa:94:a8:61:77:08:39:24:32:7d:10:6a:03:3f:
b8:c9:74:c0:30:eb:45:de:19:ed:cc:c2:70:cd:b5:
8c:c1:9f:c8:cf:81:b4:1f:3a:b6:9d:70:fa:5f:42:
23:72:5b:46:e3:b9:52:ed:ba:6a:6e:8d:cb:2e:f3:
ef:a9:cc:9a:d6:9a:3b:74:d5:71:ba:e9:4a:29:13:
ee:c2:e9:5d:f1:5d:09:4d:1f:57:91:8d:5c:ed:8b:
b8:ed:a2:d1:59:5f:ca:4d:73:5c:b9:58:27:4f:c7:
aa:5d:44:00:80:67:d9:9a:c6:43:a9:e6:58:5b:2f:
b8:03:0f:6c:8f:04:db:67:6d:3d:05:84:09:9d:76:
b1:4e:66:66:8e:83:19:00:d2:68:14:74:7b:7e:d3:
1b:60:eb:28:4e:47:10:36:7c:09:f6:02:40:12:9f:
9d:40:39:ae:e1:f2:ed:cd:8b:a9:0f:1b:27:49:8f:
56:1d:5e:df:ef:03:d8:b2:2a:8d:54:6f:b8:8c:d1:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:85:DF:3B:79:EB:DE:4B:6F:83:1F:9D:46:BD:D9:36:AB:A9:F3:22
X509v3 Authority Key Identifier:
keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:bf:bf:2e:cc:9b:ef:9c:32:dc:13:1a:91:fa:69:d7:b9:fa:
40:86:f6:04:66:0c:88:33:6e:ce:75:71:9e:8b:d0:28:10:3e:
96:b4:16:ef:64:f3:6a:d2:13:95:a8:39:fa:43:bf:6b:0b:40:
f1:3d:5d:0c:d9:48:97:54:41:b1:2a:bd:bd:f8:2e:16:05:a4:
71:32:2a:a3:1f:04:c6:0f:5b:26:cb:e2:b3:36:2d:62:dc:e5:
9f:48:c1:d6:d6:95:12:e4:45:ef:38:8c:ca:7a:19:29:6e:58:
5b:19:a4:c8:a5:40:07:d6:9f:20:53:9c:27:dc:64:bc:6e:00:
70:33:a6:ca:1f:2a:15:cb:1c:70:bf:15:12:ed:63:43:07:60:
4a:21:49:ff:5b:86:24:55:8f:91:6b:6c:5d:3a:85:10:3d:2e:
f4:d4:22:5c:e0:8d:0f:6a:82:04:d2:e1:99:31:c2:91:bf:ee:
12:6f:b6:bb:a0:94:0d:b3:95:5f:ad:94:7c:db:71:53:40:aa:
35:43:cf:35:12:7c:db:4b:ad:e0:88:2c:29:27:2e:81:34:6b:
3f:91:40:f3:d4:09:af:9a:1f:84:59:32:b6:cf:80:8a:02:ec:
4e:7d:78:bf:48:f3:65:73:8c:d4:64:f4:8d:a0:1b:3d:37:73:
16:65:89:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:42 2025 by rpki-client