Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
File: jHr3naXytomGyDVkYKQ_pC0386Y.mft (raw, json)
Hash identifier: 7xr+mKG0Hcf2e/rSqFVjkQZqSxJyUf9wb5ZbP7RRTfI=
Subject key identifier: 9D:25:63:0B:E7:75:7C:DB:5B:F1:CD:6E:E8:C8:A5:DB:27:80:41:10
Authority key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
Certificate issuer: /CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Certificate serial: 019A4F2AFD271A4C6800675498BCDCAC3899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:08 +0000
Manifest this update: Tue 04 Nov 2025 14:00:08 +0000
Manifest next update: Wed 05 Nov 2025 14:00:08 +0000
Files and hashes: 1: Y6x4X7ml7gBX__XgDy6M9m8y_fM.roa (hash: euuUJ2B09SVhI3IDat0XeMWmWw0q0J+4EoTaRS+kLdQ=)
2: jHr3naXytomGyDVkYKQ_pC0386Y.crl (hash: xk+yIftRcwGRk5qEGu6QEs/2TAePb/zZwkgRnKnj/0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2a:fd:27:1a:4c:68:00:67:54:98:bc:dc:ac:38:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Validity
Not Before: Nov 4 14:00:08 2025 GMT
Not After : Nov 5 14:00:08 2025 GMT
Subject: CN=9d25630be7757cdb5bf1cd6ee8c8a5db27804110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:7c:3e:a2:f5:16:42:32:9b:e5:b3:66:c8:
7b:b2:30:c6:43:4e:d3:99:24:e8:e8:cc:e2:61:b1:
cc:75:5e:60:e6:ef:63:d7:98:0f:dd:12:47:00:29:
fe:3d:0b:d2:3a:b6:6c:b8:65:06:58:f5:b9:40:07:
05:37:b9:f4:f5:5f:fd:75:2c:04:ce:67:14:a6:32:
21:f7:48:d6:7b:13:fd:ed:4d:74:23:19:b8:be:49:
3c:e6:af:aa:d8:64:f5:e1:da:79:98:8c:a7:7c:38:
d6:45:8d:ab:c9:0d:02:8b:f7:d5:2c:e9:e3:75:89:
34:bd:13:e1:6d:99:53:ff:d3:de:54:3b:6d:07:0d:
99:5f:1a:16:1c:05:a5:d6:7b:f9:8e:11:cb:70:d6:
96:d6:c6:ec:c7:d8:7a:b5:b4:40:22:d3:02:46:45:
d6:71:9d:fb:4e:48:a0:91:57:e1:73:fc:75:b6:d0:
2a:82:cd:e9:b1:c3:7b:df:e3:1e:4e:a3:ca:1b:7b:
f2:00:b1:83:f2:96:2b:c3:34:3f:07:8f:5a:30:0a:
53:86:c1:e2:bf:cb:14:31:3b:1a:99:80:fb:9e:00:
c2:80:f1:b9:17:d1:f2:25:68:92:8f:16:cb:97:d3:
2a:0b:ff:c3:c6:bf:49:3d:0e:ca:55:5a:6d:86:e5:
35:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:25:63:0B:E7:75:7C:DB:5B:F1:CD:6E:E8:C8:A5:DB:27:80:41:10
X509v3 Authority Key Identifier:
keyid:8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c6:65:75:c7:43:6b:c3:28:74:54:9d:71:08:d9:99:f1:ea:
c8:c6:0a:57:b3:66:2c:c0:17:c0:05:e2:d4:e1:81:89:26:eb:
23:27:ed:77:4e:3d:d1:57:ae:82:19:42:fa:6c:72:7e:d6:49:
10:6b:54:b5:cb:89:22:b2:76:93:27:97:81:3a:90:87:c5:65:
25:a3:6a:cc:54:07:41:17:a5:02:d4:12:b8:e1:29:06:b8:27:
c6:35:6a:96:a7:2b:7c:c2:83:ff:8e:d1:55:19:93:17:cd:bf:
00:c7:21:bc:c6:2b:f2:e2:ff:6b:cd:54:1c:49:54:06:4f:31:
ab:af:56:f7:7e:1f:2a:49:d5:e4:da:56:2b:fc:93:f0:6d:6b:
b5:f5:0c:43:67:8c:de:0f:fd:2f:73:aa:da:41:ec:39:f0:52:
2f:a6:2d:e5:65:64:0b:49:05:1e:b5:8c:01:1a:fe:2c:05:24:
dd:2d:35:72:f6:e8:b3:04:7d:b7:90:3f:bb:4f:1a:66:e3:8a:
d3:a1:51:c8:97:31:57:c2:1e:28:07:22:ec:b9:04:48:ab:cf:
84:e9:db:3f:96:3a:2e:16:be:59:37:e2:ba:85:23:87:82:97:
5d:5a:2f:92:93:e1:9f:a5:7e:25:d5:58:61:ef:5a:15:16:9b:
a4:f4:b3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:31 2025 by rpki-client