Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
File: jCQMG5D38CAFP6CVMw_8-t71OZ4.mft (raw, json)
Hash identifier: ZkZ8IiYdIIhbQ+rdBT6CxD/396FMVL4UBaaCoZ57M0E=
Subject key identifier: D3:AE:65:40:62:1A:08:EB:E9:AA:6E:54:6F:0B:E5:1B:DD:19:97:2B
Authority key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
Certificate issuer: /CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Certificate serial: 019A4D3D0231278DE4920F74FBB9A552A0A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
Manifest number: 1107
Signing time: Tue 04 Nov 2025 05:00:35 +0000
Manifest this update: Tue 04 Nov 2025 05:00:35 +0000
Manifest next update: Wed 05 Nov 2025 05:00:35 +0000
Files and hashes: 1: AVv7KqsJQ7Zn0lKyZ4rdnlf-GJ4.roa (hash: NUdH+bGXaFI8uXmd6dLOR5WLJnhwd6mvan4jq3rAulE=)
2: jCQMG5D38CAFP6CVMw_8-t71OZ4.crl (hash: 7BqQ+1/+VbZC7RfglIi8T2z2tH9IdfoB0lSMfq4L6WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:02:31:27:8d:e4:92:0f:74:fb:b9:a5:52:a0:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Validity
Not Before: Nov 4 05:00:35 2025 GMT
Not After : Nov 5 05:00:35 2025 GMT
Subject: CN=d3ae6540621a08ebe9aa6e546f0be51bdd19972b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e1:0e:5a:db:3d:43:4e:19:3d:20:a7:fb:0a:
2c:8b:d6:a6:a9:75:72:1a:99:ea:b7:6b:39:ce:9a:
51:65:80:09:f7:8f:95:56:8b:1e:f0:80:1f:4c:af:
8a:25:18:4c:31:d4:ce:19:40:7f:04:d5:22:93:69:
6a:86:9b:e3:4a:6f:33:cd:73:58:86:8b:e1:17:9d:
4f:b9:2b:91:d0:78:9c:7d:95:fb:59:fc:04:95:19:
b8:f4:9e:c5:f2:f0:29:d1:24:b9:01:5e:ed:9b:08:
7e:5a:7c:25:7a:cd:82:17:e2:3e:6f:6f:7d:a3:c3:
6f:96:49:87:12:b4:76:ac:fc:fd:ba:2c:74:7d:b2:
0e:38:f5:26:07:07:12:75:65:d3:4c:af:99:4c:5d:
cc:04:28:66:a7:1b:83:aa:de:11:77:69:22:0b:63:
9b:58:31:cc:ba:61:d6:6d:9c:93:76:22:78:9c:32:
47:01:ef:4d:9b:82:65:73:4a:41:e0:8e:03:de:c9:
56:30:50:f0:d7:2c:53:26:2f:84:68:ef:37:91:ca:
1e:1c:6a:df:53:f2:73:1a:77:d9:25:db:b5:c5:29:
51:91:26:28:db:dd:67:8d:71:ad:5a:5a:2a:bc:0f:
7c:00:62:7c:85:30:e3:33:64:59:a2:40:a1:dd:be:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AE:65:40:62:1A:08:EB:E9:AA:6E:54:6F:0B:E5:1B:DD:19:97:2B
X509v3 Authority Key Identifier:
keyid:8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:e6:c8:74:9b:00:14:df:50:a7:a3:e6:9f:f0:9f:c7:22:68:
df:c8:0e:a1:26:71:da:22:19:1e:21:5a:70:eb:62:b3:be:7b:
48:3b:88:2f:8e:f2:c4:cf:a3:59:bf:b5:8d:62:89:d2:f5:1e:
ab:ee:79:eb:c7:7b:4f:22:25:3c:98:d2:6e:45:7e:25:96:8b:
66:ce:ad:8f:d4:ca:05:3a:6b:6d:e7:e6:e5:0c:a6:02:c3:49:
bb:15:45:60:a1:44:cf:36:16:26:96:bb:bc:a0:96:fc:9d:f8:
87:c3:2a:42:e1:52:99:ac:d9:f4:43:da:61:c9:0c:a6:09:c9:
0a:de:87:74:a5:36:69:85:bd:b4:ff:18:98:7c:f8:1f:86:41:
a1:f0:81:1a:47:9e:37:ac:93:81:01:ea:87:a9:87:ae:1c:75:
41:8e:64:92:bd:92:f8:0b:2d:3e:91:e4:47:30:4d:a0:a7:38:
d3:f1:62:ab:64:8b:6c:57:dd:a0:bf:f8:74:0f:03:56:21:17:
d4:4c:3b:54:44:66:9c:c5:86:f4:ab:16:95:75:f5:dc:e8:af:
f8:db:38:a4:ea:01:46:af:8d:40:dd:18:14:35:4e:97:7f:22:
15:e6:be:1a:ce:e3:10:54:9f:d3:90:7f:5e:d1:45:ca:bd:bb:
04:3b:4d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:35 2025 by rpki-client