Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
File: jTrSodmrXJtPu05eAlIe4FK4nV8.mft (raw, json)
Hash identifier: UUtV3/4CLRRR03QUeSk0BSgb66jDxWsbmsNubbGaSso=
Subject key identifier: FD:3D:F3:76:1D:B2:BF:1F:A0:3A:3F:73:9C:15:03:C5:CD:DE:6F:9B
Authority key identifier: 8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
Certificate issuer: /CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Certificate serial: 019A4DAA7F28B3AA754F15370ED3A2CF4A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 07:00:10 +0000
Manifest this update: Tue 04 Nov 2025 07:00:10 +0000
Manifest next update: Wed 05 Nov 2025 07:00:10 +0000
Files and hashes: 1: gUp9W6gdzA4HeeDeBLYOgieiGro.roa (hash: lrN/LUw9qbgMyjQd+6zHffB/Q9YQH49/9bc6+74QbTo=)
2: jTrSodmrXJtPu05eAlIe4FK4nV8.crl (hash: JXx6PfYOPxlv8OzvEwgb1ca6PZY0+wZkCEkqRsAd3no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:7f:28:b3:aa:75:4f:15:37:0e:d3:a2:cf:4a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3ad2a1d9ab5c9b4fbb4e5e02521ee052b89d5f
Validity
Not Before: Nov 4 07:00:10 2025 GMT
Not After : Nov 5 07:00:10 2025 GMT
Subject: CN=fd3df3761db2bf1fa03a3f739c1503c5cdde6f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:aa:7b:71:1f:fc:af:37:ca:60:75:10:6c:
69:f8:f6:bb:73:b6:4a:6d:11:02:0a:59:e4:74:73:
18:3e:d0:fd:40:1c:94:3e:9a:ad:ec:cd:91:95:5d:
61:76:81:19:8e:26:f2:78:2e:ee:a2:09:be:25:02:
db:34:c0:69:30:1b:4f:17:39:6a:ae:ed:38:a8:12:
92:47:5f:d4:d0:88:8c:04:8c:c7:67:3f:16:cc:ac:
37:d6:96:b4:10:ea:c9:ed:f5:f5:d2:6a:f2:cc:02:
a4:b2:ce:7b:cd:88:77:af:4f:ab:1f:1e:0a:c5:bd:
ac:7d:b3:34:7a:65:9b:85:b6:39:97:d7:c4:4c:ae:
35:68:47:4b:63:d3:6f:64:08:bd:7c:77:75:8a:a2:
c6:de:1f:97:de:4a:e7:75:c6:da:52:6e:61:69:f8:
67:df:83:28:f5:9b:78:3f:b3:5e:fe:3e:10:63:2b:
73:33:93:d7:a6:f0:a4:39:fd:5e:dc:ca:83:b0:40:
ff:4c:fb:9d:bf:79:82:47:f1:ed:90:8e:b4:c6:a0:
61:b2:96:8d:d2:52:81:48:63:ec:6c:91:42:18:21:
5f:88:28:c0:6b:70:df:f8:89:2e:8f:d7:eb:d8:27:
7e:c9:75:31:2e:c5:86:3e:d1:5a:d2:a7:ea:1f:81:
c0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3D:F3:76:1D:B2:BF:1F:A0:3A:3F:73:9C:15:03:C5:CD:DE:6F:9B
X509v3 Authority Key Identifier:
keyid:8D:3A:D2:A1:D9:AB:5C:9B:4F:BB:4E:5E:02:52:1E:E0:52:B8:9D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTrSodmrXJtPu05eAlIe4FK4nV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2bf35-54a3-4f78-b720-4a9e29615c05/1/jTrSodmrXJtPu05eAlIe4FK4nV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a5:0a:c9:68:0f:6f:f3:59:5f:6a:e4:b4:1b:71:fe:1c:45:
fc:ba:fc:54:8c:4c:a6:49:41:fb:cb:93:6c:da:8a:4e:9f:b0:
3b:e8:73:61:31:66:a3:0f:4f:9c:cd:c5:e0:29:91:f5:81:9d:
b5:ea:c6:f3:60:38:f6:06:b4:b7:47:8e:5d:bf:48:e0:db:3b:
7a:7d:4c:c4:ce:c2:a9:89:9d:3b:b6:ac:b7:a7:01:73:29:80:
e4:75:cc:aa:0d:46:8a:69:ec:87:37:89:04:88:21:21:83:09:
61:f3:3e:1a:67:a3:33:e3:cc:cd:aa:f6:e8:e0:e5:14:fb:f2:
ef:a8:dd:8b:9b:01:00:44:2a:65:4b:6d:9d:ed:74:ae:85:e9:
93:df:e6:e6:d8:d6:4f:fd:66:f7:02:ab:db:d0:2c:7c:fa:84:
82:51:05:fe:7e:0a:bf:49:ca:e9:d5:b8:07:56:33:68:c8:70:
53:61:89:fe:d8:2d:37:ac:2a:db:52:94:41:d6:32:97:dc:21:
c9:ef:5c:0f:b9:25:14:bc:91:4b:7d:ad:ee:aa:5d:ad:71:b1:
d7:45:36:3d:15:fe:83:c7:a0:f7:83:a4:1b:e7:8e:c4:d4:09:
04:00:51:34:c4:50:ca:c6:0c:f1:dd:b8:7f:b4:62:62:f3:38:
7b:ed:d9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:35 2025 by rpki-client