Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
File: 0-jUy45ELsOKa8P6QAoqUXzuDR4.mft (raw, json)
Hash identifier: azxcpdeORA/WexycexZlmntHduIiZFLrl0iJy9HZt1U=
Subject key identifier: 7F:40:D3:B5:F8:3D:8A:3C:B1:24:DC:02:F8:05:11:E7:E1:84:18:86
Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
Certificate issuer: /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Certificate serial: 019A4D3D310D8E73F14A4D3F4754A684E57A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 05:00:47 +0000
Manifest this update: Tue 04 Nov 2025 05:00:47 +0000
Manifest next update: Wed 05 Nov 2025 05:00:47 +0000
Files and hashes: 1: 0-jUy45ELsOKa8P6QAoqUXzuDR4.crl (hash: jzZIcswfrZEsCMfOti44SxWT0rUtxpooo0d1oFpdSGc=)
2: 814d1F1Lpiv2ZmQt3nv-Q0MhR14.roa (hash: vJZyCty8aaf+QpA3OskD2b+GSFI6e+26K8I9XWLd+A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:31:0d:8e:73:f1:4a:4d:3f:47:54:a6:84:e5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Validity
Not Before: Nov 4 05:00:47 2025 GMT
Not After : Nov 5 05:00:47 2025 GMT
Subject: CN=7f40d3b5f83d8a3cb124dc02f80511e7e1841886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:38:da:f3:25:e7:11:ad:2d:f8:60:3b:5a:
94:d9:fc:d0:c5:b8:32:44:fb:e4:64:e3:77:d5:fb:
6c:43:b9:d1:be:5f:a1:0a:df:b8:d3:07:fc:ae:f3:
b6:1f:44:0a:c0:d7:a1:61:6a:7f:63:67:15:90:64:
93:cd:63:81:a2:4d:65:6e:cf:73:f1:bd:e7:15:04:
bd:d7:31:36:7c:32:4f:d4:9e:9b:7f:af:8c:61:01:
09:b6:7c:06:f7:d4:7e:c1:43:52:fe:d2:5a:46:dd:
0c:9e:d1:2b:0a:74:60:a3:bb:e8:9e:3a:a2:30:d2:
d2:47:77:71:b9:1f:03:e5:7a:d7:ce:a8:3f:0a:be:
2e:fa:b5:f7:dc:8c:dd:66:2d:b7:ae:a9:45:54:97:
48:78:78:16:24:75:09:86:67:2b:25:38:48:f9:21:
b9:20:f5:e2:55:63:79:80:93:96:7a:11:54:38:be:
36:64:72:c4:33:66:d0:29:a8:15:77:58:8b:67:43:
cb:d6:15:fe:c0:79:46:8d:5a:4c:70:0a:20:ce:2b:
7f:1f:f1:64:e8:6f:78:1a:c6:55:8a:b5:99:03:8a:
cb:9f:82:30:62:79:1f:40:80:51:d1:97:02:0f:3d:
03:57:5a:62:5a:32:95:13:df:33:15:46:e5:56:5d:
3a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:40:D3:B5:F8:3D:8A:3C:B1:24:DC:02:F8:05:11:E7:E1:84:18:86
X509v3 Authority Key Identifier:
keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:22:a7:e4:41:99:8a:33:43:78:5a:93:47:40:99:03:b8:81:
ac:fd:2b:f3:d8:f9:db:c8:78:97:23:a0:e5:4e:20:c2:6b:c8:
e9:2a:9a:ce:2e:e0:6b:1f:f3:76:54:bb:79:5b:34:15:60:c5:
61:dd:e0:74:e6:8f:90:f5:e0:6a:72:b6:33:80:bb:cc:08:c2:
e3:63:38:c4:8d:d5:d5:61:46:5a:95:f2:cc:95:9b:53:71:21:
24:b5:3f:a2:e1:f0:b5:dd:d2:84:e8:63:e0:f1:22:73:22:9c:
18:3b:bb:de:7c:9c:fa:5f:ed:34:c3:9c:6f:44:da:d2:65:33:
f3:ef:49:db:da:f9:e5:fd:38:b0:b3:d4:b8:83:ff:35:63:14:
4a:42:fe:a7:a2:b2:0d:8f:02:82:5f:90:4d:b7:e5:58:4b:e5:
a2:c4:9f:3d:3c:2a:95:c4:e0:a3:8f:15:b1:1d:75:eb:53:db:
60:a8:0f:bd:cd:26:73:fa:ba:73:f1:65:14:b1:8a:b7:d3:32:
11:d6:2f:32:88:c6:9b:1e:98:cb:b8:09:85:bf:31:ee:07:38:
b1:0e:5d:2c:77:40:bf:c7:5d:7d:17:f1:33:e2:be:bd:01:8d:
b3:be:55:97:4a:92:d0:c5:38:32:05:f5:f8:dc:b2:d5:3e:11:
1f:d9:7f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:16 2025 by rpki-client