Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
File: jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json)
Hash identifier: /FfyDNmSNRTNdqQpZ+S3bqZDufo1dyvR7BBMyshosRk=
Subject key identifier: B6:7E:CC:6F:EC:73:5B:B4:14:28:82:0E:5D:4F:97:6A:1A:D3:EA:C8
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Certificate issuer: /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial: 019A51F5B5010497977F16E5A8514715FB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
Manifest number: 016C
Signing time: Wed 05 Nov 2025 03:00:48 +0000
Manifest this update: Wed 05 Nov 2025 03:00:48 +0000
Manifest next update: Thu 06 Nov 2025 03:00:48 +0000
Files and hashes: 1: CfeQnBnwZnkX1exlA_8E_9J0HQY.roa (hash: zgoZGw80fZLZ+LHAElH5ez4Hyw5+xxVl0f9aIIP8B/0=)
2: RsBRFW0brdHssKPUQSOMEanQNL8.roa (hash: kh/CbUN8p8XDXB2+pjKcCH50DNAToul6qsyjyLvsIbg=)
3: ZxM4wURmy8vS679u-WqAm5TpqRo.roa (hash: rBXB7y06bQsdKzgtd1Z8p6o286XkP+fDEEAT1wMN/OI=)
4: acQ6lYQTZtPRww8nQnrYG_NCvIc.roa (hash: iGzqEuditXbBC1KhmCdk/H/HOvF/nSKYsyWwNpzoQME=)
5: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: UXNrtdC3WhPcb3/aiCD7kHGLk71X0zQ6FSRV0sRAL0U=)
6: uIJIuuAnt6td9AqkKzjwQT857_0.roa (hash: A6x0e2CvG+/bTGJF3SyM7Q0bPdqE0EXH0TDiPVe/x1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:b5:01:04:97:97:7f:16:e5:a8:51:47:15:fb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Validity
Not Before: Nov 5 03:00:48 2025 GMT
Not After : Nov 6 03:00:48 2025 GMT
Subject: CN=b67ecc6fec735bb41428820e5d4f976a1ad3eac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ca:f9:4e:56:a3:52:d3:25:c9:bd:f0:82:35:
69:6b:eb:4f:53:bf:b8:d3:31:ce:bc:10:bc:6b:b5:
6c:e6:5a:ff:5c:5e:68:1b:a4:d2:f0:e6:b0:ae:4d:
f5:cc:83:d6:81:b9:1a:7e:26:11:27:8a:ce:03:cb:
4d:80:20:dd:54:0e:00:d6:f2:cd:00:99:37:8b:d3:
e9:7e:24:a3:bb:05:bd:ca:0b:6e:5a:21:e7:09:cd:
f1:0f:91:79:20:57:bb:03:23:64:be:58:71:f1:55:
ee:5d:c9:15:08:db:c4:b0:4d:0c:b4:7d:e7:c6:a4:
22:f9:74:1f:79:20:51:c0:6d:ea:e0:9f:db:b8:0f:
0d:57:a9:e1:5a:93:32:49:85:b4:85:ef:15:13:2e:
98:59:0c:dd:27:28:10:08:37:c2:ad:cf:90:90:67:
37:35:37:76:9c:33:34:a9:c0:4b:6d:6f:2a:21:2c:
41:b1:f9:f1:4e:ea:e2:d3:a2:ec:96:1d:51:ef:78:
36:d7:f6:1f:b8:95:c4:a6:32:50:27:68:35:77:d3:
77:bf:b9:7e:a0:02:cf:7c:68:91:f1:aa:7a:72:0e:
a2:21:bd:c7:72:08:5e:24:12:c3:7f:d5:39:de:55:
c6:a4:c7:de:16:dd:9e:3f:0d:9b:d1:ff:f4:45:68:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7E:CC:6F:EC:73:5B:B4:14:28:82:0E:5D:4F:97:6A:1A:D3:EA:C8
X509v3 Authority Key Identifier:
keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:b9:96:d5:2c:df:0a:6c:67:7f:3d:b7:58:32:af:7d:fe:84:
67:af:b0:ad:a7:4f:28:3d:b4:18:a4:36:5f:81:c4:94:7d:0f:
3b:73:bd:b8:3d:ec:8b:26:77:57:60:a4:13:8a:51:ff:90:c4:
60:4e:e4:0f:87:4f:bf:2b:4d:77:43:83:a9:37:87:fc:12:07:
68:64:e3:38:f4:15:3d:27:bc:85:b8:18:7d:3b:bf:9f:3c:f5:
99:50:0b:44:0c:86:85:b0:bc:cc:78:1e:79:6f:74:b6:f3:8a:
9e:cd:1f:42:2f:ac:74:bc:91:d1:da:91:bd:30:0c:43:76:93:
e3:35:10:04:96:c3:f0:96:60:b5:f2:c5:9a:62:c8:21:5d:f2:
97:aa:5d:ce:2f:64:46:3a:cf:88:c3:1e:4e:b7:2b:93:0a:fb:
de:a0:58:ab:69:02:09:79:58:a6:99:bc:41:25:1d:d6:8a:a6:
c7:65:e6:a6:ee:ce:60:e7:12:1a:60:81:ef:ee:66:0d:68:a3:
34:1b:bb:b5:1e:28:57:39:c6:ec:cc:75:12:b9:9b:e7:76:c2:
08:74:60:07:60:fb:2a:f5:ed:df:58:f6:e7:d9:7e:0e:21:fb:
f7:7b:0c:7c:34:53:ea:58:47:ae:57:ce:a8:eb:9a:e6:60:f1:
dd:8b:a2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:14:03 2025 by rpki-client