Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier: HDjcIEhg9vcSyGoYFqN9g04CH0ks7aCKgBagMKEZj2A=
Subject key identifier: 46:2E:C0:F7:89:C0:E5:6E:FF:88:73:AE:D0:F6:CB:04:01:97:37:E1
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial: 019A503E229B765A4BA4333F1133BC139AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number: 144D
Signing time: Tue 04 Nov 2025 19:00:40 +0000
Manifest this update: Tue 04 Nov 2025 19:00:40 +0000
Manifest next update: Wed 05 Nov 2025 19:00:40 +0000
Files and hashes: 1: CGfUbuDeRkllwMZF7DTrKk3yLcE.roa (hash: l5jsvO9CwwUl92v3ODW6ImGh3DZFw7mx9nyyajWFi54=)
2: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: CJ02DmbuDrOZuB9n99MqlOl200Et9zATUw8F3BMby8c=)
3: mW-GeUTpPcmN505mq7SBylbmL1k.roa (hash: EwfFRwG/wTzHhkN3Xr0yb1fHBsnFoko8PwS4OTwxOW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:22:9b:76:5a:4b:a4:33:3f:11:33:bc:13:9a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Validity
Not Before: Nov 4 19:00:40 2025 GMT
Not After : Nov 5 19:00:40 2025 GMT
Subject: CN=462ec0f789c0e56eff8873aed0f6cb04019737e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:c1:36:ff:fe:23:45:61:4e:88:bb:06:ba:
23:78:47:be:ab:58:68:5a:bf:34:ae:f5:b5:9a:eb:
91:67:52:a2:fd:b4:f0:37:df:64:cb:70:ae:61:13:
7c:e0:01:8a:b4:ea:6a:50:e6:96:ce:a6:76:32:3d:
f2:7f:fc:5b:41:4f:98:af:5a:4f:e8:16:18:d5:75:
20:52:a2:9d:e5:96:32:95:a7:52:d0:aa:ba:29:5d:
84:02:f5:af:f1:4e:2e:38:32:58:3a:7f:dc:4f:52:
ee:79:91:43:b8:5f:99:48:b5:0d:f3:49:8f:32:6b:
c6:ff:2a:49:b6:a6:5e:2a:52:7f:2a:e1:1a:4a:48:
aa:ee:a1:7e:87:b9:b8:df:27:ab:d1:52:c8:64:50:
db:2e:c9:78:58:1d:ee:5d:70:33:54:0f:08:8e:17:
8e:b8:0a:f8:a5:c3:91:eb:4e:88:6a:c7:b5:1e:34:
71:71:86:d0:50:48:64:d7:cc:8f:89:bc:4e:5e:63:
f7:66:31:e8:ba:4e:a1:21:5d:0d:d7:90:53:c2:0b:
d8:39:cd:ca:e9:cf:76:03:b0:67:8a:24:c2:cc:ce:
40:e0:0b:1b:d6:de:0d:2b:31:55:1a:f8:b6:43:1b:
9e:93:c2:63:a1:a9:99:d8:3f:4e:35:7d:c1:c9:6e:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2E:C0:F7:89:C0:E5:6E:FF:88:73:AE:D0:F6:CB:04:01:97:37:E1
X509v3 Authority Key Identifier:
keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a7:10:4d:4d:a4:12:09:69:33:d3:9d:a9:5b:ff:31:5c:18:
0c:83:c1:bf:98:2d:1a:79:11:86:ea:b8:8a:8a:53:71:8e:6b:
8f:6f:d4:dc:15:be:db:19:ba:0c:54:83:71:69:ec:96:60:2b:
e3:6f:8d:32:04:d1:23:9b:40:1d:69:87:69:e6:46:cf:ce:3e:
24:4a:1d:8b:cf:ce:8c:2b:dd:bf:15:94:a9:71:88:d4:2d:ff:
f0:11:e8:8d:5a:77:9c:1e:54:1b:77:1d:d7:33:6b:39:59:c3:
a0:3f:83:5d:bf:c1:bd:56:e0:a1:6f:7a:31:13:d5:2c:ab:c4:
ba:01:6f:e9:12:6c:65:b4:d1:ab:b0:71:4a:76:ef:c8:65:9c:
fe:13:b1:c9:fb:2e:67:74:db:ef:81:25:8c:9b:ae:ef:12:b0:
10:d8:91:b2:fe:58:98:90:24:67:18:ef:40:f7:25:a6:97:f8:
f1:3a:66:30:a9:94:98:91:34:47:ea:2f:6f:91:d4:0b:db:57:
5b:6d:8b:17:eb:32:a0:7c:c2:fb:dd:4e:13:74:5b:43:d9:04:
c1:b1:bf:5c:4a:17:d2:a6:40:f2:45:25:7e:3b:c2:83:d3:05:
ad:1d:29:d7:80:40:b0:15:62:ea:61:aa:5d:4b:b9:fd:34:38:
79:93:76:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:57:36 2025 by rpki-client