Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
File: rJ4u_NwhOsWxsIedkioXi4UPRR8.mft (raw, json)
Hash identifier: lm7OqR5hnX7wzUnaFA3PAUQugVQTpjRlxk3+wIUGtvE=
Subject key identifier: F5:A8:9A:8F:4C:15:4C:89:E2:3D:4D:C0:DE:25:5D:16:D4:6C:CD:D4
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 019A4E86307B755AB63462218EC5448C38F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
Manifest number: 14CA
Signing time: Tue 04 Nov 2025 11:00:08 +0000
Manifest this update: Tue 04 Nov 2025 11:00:08 +0000
Manifest next update: Wed 05 Nov 2025 11:00:08 +0000
Files and hashes: 1: 2U5A9tBCqnUvMT1Z72ylKjdlWos.roa (hash: 6v+qu4r96g6wyDjQr5ZuHMdSm+7rbKbxTfJLRSIKjI8=)
2: TdGZ39TbjdjBBTMxGvQBWdhQRo4.roa (hash: lhJrYNrPIHrE1+fMgjz6bgAULgw1D/KiucF41qw2/QE=)
3: rJ4u_NwhOsWxsIedkioXi4UPRR8.crl (hash: YncgCajl1sEIxcWnumDC7rqA/VG8wZiISCpjerooDoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:30:7b:75:5a:b6:34:62:21:8e:c5:44:8c:38:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Nov 4 11:00:08 2025 GMT
Not After : Nov 5 11:00:08 2025 GMT
Subject: CN=f5a89a8f4c154c89e23d4dc0de255d16d46ccdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ca:49:56:da:40:4e:62:44:17:f5:1b:3b:4d:
81:b6:69:33:0c:b1:eb:cd:8d:db:80:c1:35:2a:9b:
5c:6d:72:51:d4:dd:2f:1d:39:5c:07:0f:33:ae:a0:
92:d8:e5:09:2c:16:0b:b0:6e:68:00:cc:6a:48:24:
60:cd:ae:f5:cf:c2:9d:65:eb:80:37:b3:c1:1c:c5:
38:33:c4:7d:3d:19:f7:52:3b:38:82:3b:6e:06:6e:
bb:b6:b0:59:f9:b6:aa:fc:6a:a2:ca:ef:03:20:dc:
cf:4c:c2:fe:fd:e3:91:76:d4:14:b5:04:a5:c9:bd:
fe:37:ab:8f:df:6f:94:bb:29:46:8e:b2:87:15:87:
f8:7f:8f:d1:ee:f7:dd:f0:66:91:e3:bf:ea:3d:75:
19:e9:e3:4d:c1:f4:26:86:96:b8:4d:d3:a4:36:a1:
86:39:9f:6d:8d:c4:d7:56:85:11:1e:08:20:d6:8a:
b6:43:e4:75:f1:c1:f2:04:10:2a:ee:0d:0b:ac:ac:
ac:6c:46:92:5f:db:f5:68:81:9a:c7:11:41:d6:f5:
74:3d:60:7c:8c:33:5a:20:41:3a:fc:60:1e:48:b0:
b5:0f:74:a8:e2:88:a8:2d:14:26:ca:72:a5:88:6a:
28:f6:d4:a5:50:38:b3:0f:2e:0c:44:bc:cb:e4:43:
06:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A8:9A:8F:4C:15:4C:89:E2:3D:4D:C0:DE:25:5D:16:D4:6C:CD:D4
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e8:e9:17:d3:b5:04:c2:46:c1:2a:74:ae:f0:2c:5c:6f:a4:
2d:c4:e6:1c:43:20:e6:da:8d:af:ae:59:20:4c:7b:9f:c7:44:
a6:78:bb:8f:ba:a1:7d:17:c0:87:98:e4:27:cc:18:eb:76:64:
96:4b:57:6e:cc:1d:21:df:47:c5:2d:10:b4:35:00:11:e6:43:
05:41:76:3a:a9:3c:7c:10:cd:e0:97:6d:2d:ec:7b:12:8b:57:
7a:f2:3b:b6:64:43:51:70:ba:c8:84:7b:3d:da:eb:3b:8e:af:
49:00:d3:c4:0b:b5:47:8c:b1:fa:1c:e9:d7:d8:34:a1:5c:fa:
76:2c:3d:f9:e2:5f:84:6c:29:92:65:7a:b7:9d:0a:7e:2d:8c:
59:e1:2f:95:42:3e:d0:d7:7d:72:31:4f:8a:0c:24:5e:dc:3d:
ec:96:ed:c3:62:56:42:22:99:01:39:2d:86:b6:9a:f3:b7:79:
0b:8b:3a:9f:18:da:0a:c1:2d:c8:73:2a:69:cf:ee:c6:ec:e1:
a7:05:0e:d0:14:86:26:5f:c0:5a:88:74:8b:48:d4:b3:3b:a6:
91:18:36:b1:5c:b8:58:a1:3d:34:4f:14:2f:b2:5a:97:54:67:
cd:a3:76:be:2a:74:5d:87:6f:35:ef:29:14:35:d4:e5:53:92:
4d:52:64:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:15:55 2025 by rpki-client