Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File: jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier: fBF7py0b/p1sGs7A+NRnE7mvGrWDjalqWJPPvcDdRO4=
Subject key identifier: CB:1D:71:BE:57:96:33:1F:7B:CE:FF:B4:E0:78:18:85:16:9B:8B:BB
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer: /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial: 019A50E2E6279DB0611F89C88EF26D0957B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 22:00:38 +0000
Manifest this update: Tue 04 Nov 2025 22:00:38 +0000
Manifest next update: Wed 05 Nov 2025 22:00:38 +0000
Files and hashes: 1: LMeAQnqXAno2ePthwCoJjGfcb2A.roa (hash: No1WA2LE8faZkFieSxcHhVUWaXGzU/xeEQ1/oG4+fLo=)
2: VTn6EUtQCO3oepKWF0k0ld0XSjA.roa (hash: Tq2gVAAnQassaUGQuCNSlznhLVZoKruMbeiYe+SNasU=)
3: duhqaZfDGitvRaokNyqOu5bk0v8.roa (hash: BL1fv/RwGJqefrtoFnvmlovZ7pP8X3nS9B+9usaWWNI=)
4: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: CoyRUfkJ/l+NRlBB2inhqis96qtx4NSrjPZmQoGNTzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:e6:27:9d:b0:61:1f:89:c8:8e:f2:6d:09:57:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
Validity
Not Before: Nov 4 22:00:38 2025 GMT
Not After : Nov 5 22:00:38 2025 GMT
Subject: CN=cb1d71be5796331f7bceffb4e0781885169b8bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:11:db:1e:85:95:81:96:36:62:11:df:d5:
6b:7b:5c:bf:3c:71:da:67:71:78:82:14:ea:e8:3c:
c0:b6:7f:dd:2b:45:c2:86:2a:81:31:8a:18:b6:25:
c7:d1:73:71:95:d2:21:2f:45:63:f5:59:cf:be:2f:
67:9a:d0:eb:bc:0b:47:3a:5e:9d:fb:7d:c6:29:4c:
dd:f5:eb:80:f3:d8:e3:ec:41:47:c9:b5:b1:0f:ab:
b3:cd:2d:bb:26:fa:34:a8:f7:56:af:a7:43:c7:27:
b4:f9:16:4d:17:f5:93:01:d5:95:c9:13:d0:3a:9c:
31:c2:e4:0a:fb:21:7a:c9:68:ff:cd:fc:b8:66:e2:
93:fd:2c:33:47:b2:40:8c:d9:11:d8:32:f4:93:13:
c2:e0:98:af:8a:80:75:97:ee:3b:ce:65:74:be:bc:
13:68:92:97:7a:b2:e8:2e:22:2c:c5:c6:c8:db:e1:
50:8b:ac:d8:7f:31:e8:72:dc:34:fe:33:5a:cd:f0:
ec:ce:7f:d3:07:cc:7f:84:e2:01:db:3a:60:4d:e6:
1c:c8:b1:40:d8:0a:32:71:1d:c2:f6:2b:c9:61:b0:
9f:c9:80:36:79:69:b7:5e:8c:d7:c6:89:b6:74:ed:
da:77:85:ff:51:c4:95:5f:85:cc:74:09:6e:3a:5a:
a5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1D:71:BE:57:96:33:1F:7B:CE:FF:B4:E0:78:18:85:16:9B:8B:BB
X509v3 Authority Key Identifier:
keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c7:bc:a3:3c:5b:84:e9:13:1a:92:b0:03:9b:e0:b7:e6:49:
48:47:b4:66:01:ab:59:13:16:50:62:b3:ba:9f:92:c4:5e:67:
d6:76:8e:cd:21:6a:9e:ba:1b:37:d6:e1:54:78:7d:bf:a7:cb:
79:43:86:03:27:29:60:32:0b:98:62:f6:1b:ad:51:2b:0e:d2:
af:15:55:b1:0a:7d:60:c7:8e:b6:b1:41:e4:b7:95:8d:54:76:
8a:1c:9c:50:4a:f1:8c:41:cb:df:57:a6:e5:09:53:c4:3d:9e:
b1:07:e3:e9:e5:3a:d3:d8:e6:07:04:bd:63:2f:5d:81:1e:ea:
d9:61:47:03:73:14:ee:37:27:1e:44:a6:6b:29:3b:35:6a:61:
d9:7d:03:6d:31:d4:3c:d4:ed:e4:01:a0:29:30:39:86:18:c5:
a6:54:e3:6b:ca:bd:48:34:bd:87:22:be:1d:b4:c6:cc:ba:60:
3c:d7:ae:5d:94:8e:a4:26:d1:90:c5:cd:66:af:5b:37:34:4d:
82:21:f5:df:55:2f:61:08:74:72:23:dc:f2:75:87:71:fd:85:
c0:6e:be:f2:3b:fe:52:4e:ad:5a:57:21:d0:90:d8:4d:b2:bf:
6a:07:5e:4b:be:e0:68:e1:9f:66:ce:89:fd:af:cb:62:d8:f5:
dc:10:02:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:50:42 2025 by rpki-client