Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: 92H7sUkG0XjVUPyw2mWtiZkkt2wttuKh9TmdgGmO6MU=
Subject key identifier: A1:D5:C5:69:B1:40:36:A4:31:FE:75:54:3A:A3:1C:FB:D4:63:48:CE
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 019A4FCFD567ACA1A453DB0F74B06BB0007E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 17:00:11 +0000
Manifest this update: Tue 04 Nov 2025 17:00:11 +0000
Manifest next update: Wed 05 Nov 2025 17:00:11 +0000
Files and hashes: 1: IhekhU6m6siADVsydLLUojGt3d4.roa (hash: Ie3OUaBFXbHVHoRv6fa60x6E6g/3rnXK7E53n8a6clg=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: goV+EzZJIM/8WlfdDuxuIywmDEad9iaLeFk0yUMNcWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:d5:67:ac:a1:a4:53:db:0f:74:b0:6b:b0:00:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Nov 4 17:00:11 2025 GMT
Not After : Nov 5 17:00:11 2025 GMT
Subject: CN=a1d5c569b14036a431fe75543aa31cfbd46348ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:b0:87:ce:1d:bc:e9:7b:e2:18:9c:32:0b:
b2:dd:56:07:14:23:98:51:39:ee:2e:68:b2:86:2b:
05:40:4f:e2:f6:b5:ff:e6:6b:10:03:69:d1:9b:4b:
6c:2c:ee:4f:7e:cd:64:29:3b:d2:b6:1c:d7:51:1a:
d2:2b:45:7c:e5:1f:50:3b:26:cd:a5:65:e0:9d:92:
1c:90:7d:de:5e:6c:6d:4c:59:54:c0:f6:21:42:24:
46:d2:3f:36:17:c9:e2:e6:15:12:37:6d:07:a7:b3:
74:a3:fc:0c:b9:1b:80:ce:27:3e:a7:29:af:70:80:
85:84:2e:4f:54:40:26:67:a6:d2:08:da:40:04:c4:
45:82:bf:bd:07:43:50:b0:88:11:4e:20:94:f2:d9:
fc:fb:99:ec:e1:96:0e:67:94:fa:fa:7d:df:69:8f:
f6:21:8d:2b:3f:a3:f4:3c:14:21:b1:59:a5:1f:03:
9d:ca:af:0f:59:90:02:fb:66:2f:5d:14:ec:80:97:
3d:77:3b:71:c7:d1:07:80:70:63:45:09:09:d6:65:
7d:4a:d6:9b:74:d9:72:8a:7b:6e:f9:c7:db:42:5a:
cf:84:60:e5:e6:85:b6:a3:ae:51:d8:cb:a6:ef:54:
bf:7e:b8:c8:25:ec:25:98:4f:f5:95:2d:40:49:b0:
72:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D5:C5:69:B1:40:36:A4:31:FE:75:54:3A:A3:1C:FB:D4:63:48:CE
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a2:65:71:8e:29:aa:32:07:8d:20:7e:5b:f4:1a:32:46:af:
05:65:4d:92:4c:fe:6b:3a:db:7d:ca:d3:3a:79:f9:67:ee:bc:
89:1c:df:9a:25:23:99:ec:b1:9d:4d:51:fa:f2:14:2b:9a:06:
19:ff:d3:23:c0:d1:b1:6b:91:cf:3a:cb:56:e5:40:44:47:64:
b5:45:f4:cd:c1:6e:8a:64:61:32:79:6a:fd:cb:99:d2:f0:64:
5c:c3:b2:af:77:f0:86:a8:74:bb:48:c5:38:b1:18:75:59:3a:
09:4e:f9:e2:97:33:c1:68:cf:03:df:d0:0a:02:5b:b1:1c:35:
d8:a7:f3:ba:9f:0a:15:3c:e1:75:30:f1:0f:4e:68:d9:79:2c:
b1:b2:57:79:cb:b4:97:f5:4c:fb:88:6e:69:7d:c7:43:88:c4:
e2:76:21:2b:f6:22:48:b2:73:8f:40:52:35:3b:0c:d5:1a:62:
5e:67:61:6e:4c:25:bf:ca:16:f7:e0:14:19:c7:de:ac:d0:e3:
cb:65:1f:74:90:4d:9f:9e:d0:06:56:df:f8:5c:3a:8e:a3:50:
26:72:10:bb:82:b7:68:df:78:71:1d:b4:89:ec:49:1b:5e:1c:
12:89:1b:9d:58:4c:48:66:f1:05:8b:7f:31:1f:5a:92:d3:8d:
95:7a:02:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:10:57 2025 by rpki-client