Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
File: JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft (raw, json)
Hash identifier: uV86AZuYizazgqZB/IoQHovvgoM0KygjoipU98ctmZI=
Subject key identifier: 8F:60:8B:9E:C3:DC:C5:17:7B:A5:D0:5A:CE:96:43:76:60:FF:64:C1
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 019A4EF4E27C5A6655751F717DF606DE5662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 13:01:02 +0000
Manifest this update: Tue 04 Nov 2025 13:01:02 +0000
Manifest next update: Wed 05 Nov 2025 13:01:02 +0000
Files and hashes: 1: A60RBGadDjKdPHVlJg0uqTD974Q.roa (hash: 4fXWgPDCvs0uk8MBVH/S+SmZyRTmunHNR49bT2RcI7c=)
2: JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl (hash: uTEja/pByRNF/dN3X3j7olLETM5UqiJ/kWYv6ESDtp0=)
3: ai_RgbT0zKstqqt2SbvFvSaAldI.roa (hash: +RxVDzpwxX0PVjGcCVeFRTO/OITdBFvoCwZmWeh/ZW4=)
4: tVPF_FMNIzvy1aLQDH9JsXjnUzc.roa (hash: NZpf0UeNwGFLjgoytkNM8IGey5uL4sin2yYuLpIaeRY=)
5: wDIhn2R8gp8Ak2ZXBIhikAaJW-g.roa (hash: OepYAELbBzS8mDh4vcbHfRlHazKGsQKZdJc2NWmplLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:e2:7c:5a:66:55:75:1f:71:7d:f6:06:de:56:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Nov 4 13:01:02 2025 GMT
Not After : Nov 5 13:01:02 2025 GMT
Subject: CN=8f608b9ec3dcc5177ba5d05ace96437660ff64c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:21:07:de:bf:6a:25:0e:76:cc:e1:09:b1:
a3:83:98:6d:97:fc:1f:13:d7:d9:d0:dc:5c:b7:51:
40:7b:c0:ae:39:53:e3:5d:58:86:dd:fb:70:5e:12:
b2:66:11:6b:4b:4f:c9:6f:d1:86:79:90:a3:12:18:
da:e4:f5:50:64:eb:60:9d:8f:90:2d:0a:d0:76:ed:
05:47:73:90:e1:81:28:9e:d0:18:1c:d9:60:bb:90:
c3:92:87:e6:c3:28:01:fa:dc:89:5a:6c:d2:21:62:
f3:12:a1:5c:ea:dd:38:95:9d:eb:06:6a:40:64:2f:
fe:c7:72:56:89:e7:e4:a2:17:42:0c:38:42:7b:76:
84:6d:48:ce:09:f9:b2:b5:d2:27:45:c4:d3:a9:43:
df:f8:c3:64:c2:67:6f:f7:23:a6:2e:07:ad:33:43:
a8:27:bf:43:cf:4d:e5:94:19:61:1c:84:be:48:f5:
e7:76:ea:2e:6b:54:39:c0:d5:f1:ea:32:0f:b4:39:
d4:d8:78:83:9f:19:c8:0a:46:34:a1:c5:36:6e:fd:
28:6b:bb:b0:e3:9e:c5:85:6b:ab:0f:04:fd:36:43:
7b:b8:27:cd:15:31:97:ef:27:b6:35:42:bb:26:91:
b6:f4:bb:64:d5:f7:dd:36:ff:c1:a8:70:66:4a:22:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:60:8B:9E:C3:DC:C5:17:7B:A5:D0:5A:CE:96:43:76:60:FF:64:C1
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:c0:c2:e2:01:49:45:38:be:54:19:4b:d2:e0:3b:2d:a8:10:
12:0b:fa:82:29:7a:27:e9:c3:65:d1:0d:e9:c7:5c:64:fa:27:
be:77:5c:bd:a7:12:74:aa:fd:6b:2e:e6:9c:e5:30:7d:e2:a7:
3e:67:6f:8d:77:06:2d:12:51:ba:6f:7a:d2:9a:9f:08:bb:0f:
11:7b:9e:8d:78:66:92:de:80:f3:6c:8e:e1:38:45:47:21:02:
79:5c:d0:4d:76:e3:f8:3c:29:b4:e8:ec:48:f1:f9:98:eb:36:
f5:f3:50:cc:9a:08:16:8d:06:83:6a:56:e4:de:59:dc:4c:94:
aa:0c:c6:4a:a1:50:18:4c:ac:1f:d1:30:3c:3f:0f:58:cd:a2:
fa:6b:72:17:f9:c2:d3:c0:28:ff:4a:f2:87:1f:49:8c:3d:c1:
20:5b:87:f1:04:11:0b:a4:74:46:a3:16:5e:bc:43:08:99:fd:
b3:dd:cc:d6:21:0a:7c:b0:9d:da:d0:64:ae:1a:8f:d7:a8:c4:
2c:20:b2:39:c9:47:29:6a:03:4c:14:72:c7:25:b9:29:49:bc:
57:94:64:e2:d1:2e:9c:58:72:bf:ae:0b:0b:36:e6:f0:1b:be:
5e:af:41:d0:b9:a3:74:1b:8c:87:a5:46:0d:79:44:19:fb:9b:
e3:7f:b4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:09 2025 by rpki-client