Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File: jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier: ux+frFUJSNAFtdG6efQn7jZ1G2fLii6cuI6iEDUj1G8=
Subject key identifier: 1D:42:C8:70:47:99:7E:0D:05:78:45:FC:94:AC:C8:08:D9:7E:F9:0A
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer: /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial: 019A52D229BD7B7B464ABCC60C1C83BAFCC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 07:01:36 +0000
Manifest this update: Wed 05 Nov 2025 07:01:36 +0000
Manifest next update: Thu 06 Nov 2025 07:01:36 +0000
Files and hashes: 1: 1IvUdF6sc26gQi1PrEF2at2Gu_w.roa (hash: v/QlU4UHuYWzg7iCrnrdYQGm1IMje67B6F+Jo7o9yAA=)
2: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: 7RyqaWuceVfgSqExaLGZlQOCqaAO5aKKvagqFqSDxdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:29:bd:7b:7b:46:4a:bc:c6:0c:1c:83:ba:fc:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Validity
Not Before: Nov 5 07:01:36 2025 GMT
Not After : Nov 6 07:01:36 2025 GMT
Subject: CN=1d42c87047997e0d057845fc94acc808d97ef90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:eb:cd:ae:2d:43:00:8c:98:b7:42:ac:5a:84:
80:b3:90:a8:bd:47:f7:6c:0f:94:ee:83:86:4b:c5:
eb:53:77:6b:6d:15:1c:92:48:14:21:e1:7f:57:57:
78:1b:34:7b:ba:1d:c1:c7:10:5b:df:8a:ab:c9:c3:
10:b0:f6:98:6c:f1:8a:71:92:ab:c3:ae:4b:d4:d8:
d4:72:09:12:d9:28:f6:d7:44:53:7c:28:01:b5:bd:
ee:09:13:35:db:5a:3f:13:68:b3:df:97:41:5a:c8:
9f:9e:2e:bb:56:f3:ad:9e:8f:b8:a4:76:28:b7:b5:
38:c0:32:4d:8a:96:a2:b3:aa:2d:96:a2:0a:d4:6f:
b5:e2:0b:bc:99:3e:ab:59:0a:fa:34:2d:38:ba:3f:
8c:c8:7d:d0:55:f8:8b:f5:c4:49:da:a2:7d:1e:4f:
3f:df:ba:17:25:ad:5d:94:10:49:56:19:7e:54:b7:
cc:a2:63:dd:4b:96:85:ca:10:1b:88:f3:e9:2f:fd:
be:44:98:a7:41:84:0e:fc:6a:73:c5:46:23:3e:8a:
96:dc:52:94:a3:e1:5b:59:c7:df:d1:7c:85:d4:22:
dd:d9:ad:5f:23:d9:bb:74:b9:52:bc:2e:60:99:be:
cf:f9:95:78:8e:dc:96:8e:02:39:14:0b:0e:aa:0b:
c0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:42:C8:70:47:99:7E:0D:05:78:45:FC:94:AC:C8:08:D9:7E:F9:0A
X509v3 Authority Key Identifier:
keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c0:e5:ca:70:b5:6f:ab:1d:0f:2d:16:0d:1b:72:c2:4c:fc:
70:4b:f1:cf:d0:53:9d:5c:7b:40:94:84:33:f3:3e:0e:d0:62:
b0:df:cf:bb:cb:0a:e2:4f:ef:26:6e:e1:08:44:9b:1a:fe:fd:
24:7a:cc:cf:06:0d:97:f2:ca:f5:da:b4:c8:08:36:e5:4f:a8:
a9:5c:a5:09:a9:88:c5:3e:c1:ca:3c:69:60:f4:d3:f5:2f:e9:
5d:7b:6e:7f:11:14:8b:24:2f:bc:4e:35:b3:1b:58:06:89:b8:
ed:c4:81:f8:37:d2:9b:38:66:a9:e1:92:7e:1e:13:62:69:3f:
e4:c7:b0:15:a2:31:72:77:61:c4:c8:7c:7b:19:e6:24:f1:2a:
bc:07:99:1f:f0:4a:9d:a0:7e:b6:2b:9f:60:23:e4:55:ac:3d:
f7:9a:6f:76:89:5c:64:84:87:b6:84:90:1d:87:04:b7:85:6e:
61:13:a7:14:28:ae:b5:b1:0a:0b:39:1b:1e:7d:45:3d:ca:55:
00:72:ee:03:26:08:52:5f:ee:82:fd:9f:6d:12:49:db:c4:4d:
6f:25:13:cd:43:ec:af:2a:62:95:a1:8c:0c:3a:04:ca:8e:a7:
dd:6b:09:09:3d:a6:bd:ed:d2:06:2e:58:54:b1:66:ac:e5:78:
58:03:7a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:27:27 2025 by rpki-client