Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File: jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier: q2m3R0A6y1JnEnjcz2DfNvePm5EutKKdLZRr7LptTTg=
Subject key identifier: 4D:E9:95:6E:A1:C9:0D:31:05:4C:A3:F5:72:51:BE:56:4A:59:96:36
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer: /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial: 019A52D16BCF339AF0F6640E0BB6B0B4AA54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 07:00:47 +0000
Manifest this update: Wed 05 Nov 2025 07:00:47 +0000
Manifest next update: Thu 06 Nov 2025 07:00:47 +0000
Files and hashes: 1: LMeAQnqXAno2ePthwCoJjGfcb2A.roa (hash: No1WA2LE8faZkFieSxcHhVUWaXGzU/xeEQ1/oG4+fLo=)
2: VTn6EUtQCO3oepKWF0k0ld0XSjA.roa (hash: Tq2gVAAnQassaUGQuCNSlznhLVZoKruMbeiYe+SNasU=)
3: duhqaZfDGitvRaokNyqOu5bk0v8.roa (hash: BL1fv/RwGJqefrtoFnvmlovZ7pP8X3nS9B+9usaWWNI=)
4: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: WD9ADJRR0fZl4kbPjJXkjLC459AuWgZzTyUTybgThW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:6b:cf:33:9a:f0:f6:64:0e:0b:b6:b0:b4:aa:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
Validity
Not Before: Nov 5 07:00:47 2025 GMT
Not After : Nov 6 07:00:47 2025 GMT
Subject: CN=4de9956ea1c90d31054ca3f57251be564a599636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:43:6d:c9:79:5b:a8:3e:5e:e5:75:b0:22:
8b:68:6a:b9:0a:92:16:ab:49:30:72:88:a8:b8:03:
ae:09:0e:75:d7:ad:0e:76:7b:6e:22:12:fe:1b:3f:
0e:2b:e7:8c:bc:cf:d6:8f:08:91:5c:6b:7f:3d:31:
a1:6c:91:b4:bd:7f:7d:21:ea:87:ad:b5:6d:65:d0:
15:41:71:fa:44:11:25:e3:c0:5c:7c:99:4a:38:ec:
3b:8d:5c:55:31:fe:bf:b1:65:fe:19:4f:8b:6f:b5:
09:3e:48:1b:f6:02:2c:1d:5a:1e:9f:f7:4a:59:11:
a4:39:8e:2e:76:95:b7:0a:41:b6:5b:65:8f:c4:ea:
cd:e1:c1:7a:00:3b:87:dd:be:9a:26:6f:7f:d7:68:
ec:29:00:27:c2:75:52:b9:11:37:d3:88:0b:03:97:
ab:51:08:db:54:d6:ab:6a:5a:ce:72:2b:05:09:6c:
15:28:07:1c:03:93:6a:8b:27:91:41:7d:02:34:e5:
03:15:0a:67:9a:4b:88:b7:61:63:7b:17:ae:48:26:
bf:2b:0c:ae:38:b6:47:36:60:61:0f:45:f6:7b:67:
8a:7e:50:ea:fb:87:28:b7:6b:6d:ab:99:28:e6:0b:
8c:d9:85:ba:89:ca:32:5f:cf:43:d2:5a:44:8f:3e:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E9:95:6E:A1:C9:0D:31:05:4C:A3:F5:72:51:BE:56:4A:59:96:36
X509v3 Authority Key Identifier:
keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3f:df:4c:52:9d:38:62:9f:15:64:a9:a6:39:2d:bd:fc:f4:
af:91:49:ad:9d:33:67:2e:b9:1c:0d:0f:49:a1:e7:ac:46:e7:
3f:8a:c9:4d:b2:a6:b6:b9:fe:f9:49:84:ca:b7:73:ee:dc:8f:
51:a8:a8:db:e5:74:b7:fb:21:c2:c0:c9:e1:3b:1b:f8:fe:26:
f8:d9:bd:11:51:2d:af:00:1e:1a:5b:8c:9b:d7:0b:a7:7c:ef:
c6:f5:5a:39:ff:cf:6e:a7:f6:93:cf:bf:2a:c8:f5:1d:a4:03:
a1:8d:26:5a:b0:12:3f:d1:fd:50:34:ea:fe:b5:87:1e:62:97:
39:10:23:b3:58:26:82:ca:f9:50:c6:c9:7d:66:3d:1e:4b:3d:
5f:ef:9f:9b:c7:b6:85:10:8e:ee:a0:63:72:51:25:c3:4d:fc:
17:6c:5e:8f:89:b3:23:b8:86:4c:6c:75:48:92:a1:9a:77:22:
92:1f:9c:98:a3:99:3f:04:07:d6:ef:fb:dd:0c:93:f3:86:56:
07:4f:47:f6:a0:b0:4d:b0:43:0b:0b:24:7b:b4:0d:bc:a5:e7:
fc:f8:8c:da:f0:d1:e2:6c:28:21:fc:f9:46:67:00:61:cc:df:
1d:08:7e:77:35:ce:b5:7c:b0:47:97:e2:36:1e:55:f5:61:0e:
26:3d:08:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:36:30 2025 by rpki-client