Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
File: jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft (raw, json)
Hash identifier: 7xuUQOKPrzWsrmWrQmLOa2wYOZWVChmzI02qXdU7ol0=
Subject key identifier: 83:39:06:FE:27:86:14:A5:37:A6:10:BA:2B:59:4A:5E:C6:90:E4:DD
Authority key identifier: 8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
Certificate issuer: /CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Certificate serial: 019A4D7462E0DEBF1E55D1472B7E935490C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
Manifest number: 160D
Signing time: Tue 04 Nov 2025 06:01:04 +0000
Manifest this update: Tue 04 Nov 2025 06:01:04 +0000
Manifest next update: Wed 05 Nov 2025 06:01:04 +0000
Files and hashes: 1: LEgJcT1HJwyV1gNb8G6Nv4QQcdA.roa (hash: MrTCL4S0d15bcXIlwlUs8e8j+hHw3EZvbQGkeB92Lzs=)
2: eiuuVdDHw7tCNh7-88E3raSuIfc.roa (hash: 3m5MOXmDNJezPlvUGc+JuyJPY6iXYjUfrVVj0/0iqB0=)
3: jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl (hash: xh/EOITUGY4zBQO1scUO4L881EFqT6/VMV0zk28f2UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:62:e0:de:bf:1e:55:d1:47:2b:7e:93:54:90:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea43bb38d6e0be8c289094ba4adf387d0de40a0
Validity
Not Before: Nov 4 06:01:04 2025 GMT
Not After : Nov 5 06:01:04 2025 GMT
Subject: CN=833906fe278614a537a610ba2b594a5ec690e4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:76:60:c3:1c:2f:b8:e4:91:30:6a:e2:0c:e5:
a1:b3:88:99:19:e3:09:46:ad:89:e6:28:0a:54:a2:
c0:b2:f0:a7:04:18:c9:e8:c4:8e:98:9b:a1:c7:d9:
d1:7c:aa:b9:e9:1e:2b:73:41:16:2e:5d:7c:6c:f5:
1b:1c:e9:21:04:01:38:29:c9:0b:7d:6a:c1:ed:48:
e0:1a:aa:35:dc:b3:d4:0a:73:d4:cb:b0:d5:2a:a2:
78:fb:1c:0d:55:28:89:f7:94:80:c6:d5:cc:4d:cf:
0f:73:b0:48:5b:8e:5d:6b:40:d8:70:e5:33:f0:f7:
5f:a6:1b:06:c8:86:fb:92:f5:eb:2a:45:ed:32:85:
cd:19:98:18:26:90:62:34:19:27:d8:5a:5a:72:55:
20:1c:ea:76:d6:56:62:ca:65:4d:e5:d3:43:69:fc:
30:82:14:77:d1:2f:9f:0f:80:40:55:6c:41:7e:fc:
4f:f1:49:62:48:2e:aa:34:5a:1d:ae:9c:44:36:55:
04:4b:aa:9c:95:8c:a9:f1:e4:c9:d8:f2:eb:e1:b4:
62:2c:c8:d7:08:ee:cb:d2:ef:ce:f5:00:ab:58:dd:
ba:ad:eb:4e:e0:44:b6:04:92:ce:08:33:d2:c0:e6:
67:9d:a4:da:7b:2a:6b:38:5e:6c:ca:d1:46:2b:fc:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:39:06:FE:27:86:14:A5:37:A6:10:BA:2B:59:4A:5E:C6:90:E4:DD
X509v3 Authority Key Identifier:
keyid:8E:A4:3B:B3:8D:6E:0B:E8:C2:89:09:4B:A4:AD:F3:87:D0:DE:40:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqQ7s41uC-jCiQlLpK3zh9DeQKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6f85b1-6a3c-408d-a39b-24f7f9436cec/1/jqQ7s41uC-jCiQlLpK3zh9DeQKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:15:5f:46:18:6b:f9:3a:8d:b6:3a:84:62:20:30:c5:b3:71:
c0:e6:f2:99:1b:f8:b3:99:9f:ac:ad:5c:db:15:75:af:f0:9e:
51:ee:c0:00:5e:04:16:29:15:91:89:60:d3:0d:e4:69:ba:1a:
53:40:7d:d3:8a:62:34:3c:15:b0:e2:41:86:17:de:cd:6f:21:
86:f7:78:43:ec:ac:2d:cd:58:91:e6:7c:6c:d7:c4:4a:c8:95:
01:c5:cc:96:00:01:8e:5a:b9:3b:0b:cf:c8:30:f3:b2:65:48:
85:0a:63:87:a0:6a:8b:ab:e0:aa:c5:3e:5d:5d:8d:e9:85:6d:
33:6b:62:f5:50:60:f8:3a:e2:53:58:02:80:81:a5:30:d6:12:
c0:cc:72:dd:1c:ce:5a:c8:07:8c:6f:da:a9:06:97:7c:c4:09:
b8:9c:0c:1e:70:68:7f:de:5a:a1:6b:9d:17:96:89:fc:b1:80:
57:db:3f:74:ee:a0:10:75:3a:64:43:91:d1:ef:0a:a9:10:d4:
e3:a4:bf:2c:63:3f:47:c1:12:ea:e6:17:08:de:be:c5:50:03:
19:2b:2c:31:83:27:d7:5f:d1:7a:86:e5:17:d9:f8:06:2f:df:
0b:19:dc:33:5d:56:16:7b:23:1c:b8:c2:bf:b4:81:77:55:61:
6e:6c:7a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:37 2025 by rpki-client