Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
File: jcRYczXCkP-PKzdN8kq-IzO87V4.mft (raw, json)
Hash identifier: wSvuXVCHUsWhRMuQYKD2tDsc5GtC4VjbfCxBOzacib0=
Subject key identifier: D8:B1:5D:FF:35:10:16:D9:A2:64:E3:73:A8:38:8D:17:61:B9:6C:3C
Authority key identifier: 8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
Certificate issuer: /CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Certificate serial: 019A4D73AED839FB7D91CCC6A7830F207F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
Manifest number: 07F6
Signing time: Tue 04 Nov 2025 06:00:18 +0000
Manifest this update: Tue 04 Nov 2025 06:00:18 +0000
Manifest next update: Wed 05 Nov 2025 06:00:18 +0000
Files and hashes: 1: 1JbOtzxYDWM2qenUOTdlSY3fd5Q.roa (hash: 29iS50bByv5wLzXr4K0Csf8RD3fhTCBvX8TAVNzMbwo=)
2: GF6qwIhn7BKx8zVT1r1ZzDDltcs.roa (hash: oGf8wMfqUF8JdbLvtQMA0kJ00Y8rIVvgSBkLwNEB5B4=)
3: QN0VQCuu6Ab4ghDCzRAtiDK4bpU.roa (hash: fQG7ZPM5zlZX7+zBrxZiv3xKwkw7FH8PXLjSY5ZQtDI=)
4: jcRYczXCkP-PKzdN8kq-IzO87V4.crl (hash: bCKuYM1+kr7d3Ga3nQsMEe7sgJwKiAY5u6U8Aq/VduQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ae:d8:39:fb:7d:91:cc:c6:a7:83:0f:20:7f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc4587335c290ff8f2b374df24abe2333bced5e
Validity
Not Before: Nov 4 06:00:18 2025 GMT
Not After : Nov 5 06:00:18 2025 GMT
Subject: CN=d8b15dff351016d9a264e373a8388d1761b96c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:e0:81:f4:c9:c3:6c:13:62:c7:62:ef:ca:
cb:84:ca:c6:6c:a9:2d:dd:eb:3a:1a:45:af:d3:80:
47:bf:4a:23:de:78:e3:88:e2:26:7c:4a:04:da:fa:
1c:fc:d0:a5:a3:f9:fd:3e:fa:c2:b0:f1:f6:06:bc:
c3:7f:0f:9d:d0:13:6a:20:a3:90:e8:fc:7e:aa:99:
bb:91:8c:be:2f:57:ad:4b:be:38:f0:26:49:6a:10:
ed:f7:eb:28:df:c8:fb:31:cc:7a:44:43:f9:84:6f:
7e:e2:92:da:18:fd:58:e0:95:33:3d:62:ed:ea:ae:
85:b2:72:6b:4e:03:23:96:d9:a5:9c:e3:63:47:14:
55:4a:61:15:44:7c:e9:92:5a:6b:4d:d8:4b:2f:77:
0d:6a:4b:da:00:5b:68:bf:0a:fb:67:3c:4c:d8:8e:
98:39:da:6d:d6:06:9c:54:6c:59:c2:4a:6b:96:ae:
16:dc:a1:e0:ed:2b:79:c6:79:0f:5d:77:92:b9:b6:
be:59:2b:34:82:36:7f:e8:35:f3:13:7a:b7:84:50:
bd:a0:9f:20:87:54:0e:48:06:9b:01:7c:b0:ae:e9:
16:15:16:19:11:9d:a9:0c:5e:16:bb:2f:5f:7a:b9:
40:97:c8:6b:43:11:82:c0:6f:c3:7c:15:c4:7a:b1:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B1:5D:FF:35:10:16:D9:A2:64:E3:73:A8:38:8D:17:61:B9:6C:3C
X509v3 Authority Key Identifier:
keyid:8D:C4:58:73:35:C2:90:FF:8F:2B:37:4D:F2:4A:BE:23:33:BC:ED:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcRYczXCkP-PKzdN8kq-IzO87V4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a48017-59d4-4095-beef-d606d9925ab7/1/jcRYczXCkP-PKzdN8kq-IzO87V4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c0:5f:7d:b1:ac:d9:6f:6d:e2:30:d5:e6:b1:38:93:26:90:
bd:31:e6:ac:bb:4a:ac:6b:32:a7:26:2a:19:2a:f8:1b:fb:2a:
85:cd:4d:2e:04:f2:df:a6:f6:01:ca:a4:d5:b3:eb:e1:da:f9:
fd:b2:c8:d5:87:45:fe:d5:c7:ee:78:14:09:aa:54:43:b1:d8:
91:15:35:67:a5:59:a6:62:52:07:77:36:9c:10:41:71:60:3a:
92:53:50:5e:cd:fe:a5:56:6b:a5:45:d9:c6:87:73:cb:ff:d9:
92:47:8b:40:df:5e:74:f3:bb:72:55:19:b8:d8:bc:05:50:7d:
3c:9b:6c:62:65:07:c7:d8:69:8d:02:31:b2:3d:f5:3b:36:27:
82:67:1a:9c:4b:00:b9:91:d9:03:9b:f9:44:e4:01:f6:6f:06:
33:63:a7:8e:26:a8:a2:12:ed:bf:03:7b:5b:04:34:a7:28:f9:
1d:f5:71:66:5e:12:82:46:a5:4e:01:d3:b3:42:b4:47:36:80:
7e:da:5f:32:c8:79:71:c6:c4:41:8e:a9:6e:0b:b8:46:13:b6:
56:a5:f4:a2:7c:82:7c:4d:be:61:a3:c7:c8:30:1c:c3:f3:1d:
a5:5b:f7:86:5e:85:59:4f:df:87:5d:e7:66:99:99:c6:7e:f3:
e8:52:03:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:54 2025 by rpki-client