Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
File: jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft (raw, json)
Hash identifier: yLbEqplbWR4G4DI+TVQbwAC7ZaNCp7U5TsNnxfyckug=
Subject key identifier: 40:AE:7D:38:65:2C:58:3C:D8:0B:7A:1C:BC:1A:B2:C0:60:E1:4F:88
Authority key identifier: 8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C
Certificate issuer: /CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
Certificate serial: 019A4C612AC4169F0E4037431F6A7DE3614F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
Manifest number: 09DD
Signing time: Tue 04 Nov 2025 01:00:27 +0000
Manifest this update: Tue 04 Nov 2025 01:00:27 +0000
Manifest next update: Wed 05 Nov 2025 01:00:27 +0000
Files and hashes: 1: ZqkZ-ptbKplSamN_ahWuL-lHnJ8.roa (hash: irGPnE0iOTBsb5GQGAY7EsHYbFxfevPkFPknKA/OeLU=)
2: jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl (hash: y+HQAH/IDgpcYu7mzbVYid9/TShdgEhUhCRh5wz29N4=)
3: m3ntsGfgdnDGCMt-rflzxFG_JnA.roa (hash: q9gBjMOYNP/zGmo2wuYydWBWqzVkvYiKaSBdRO8K4Uw=)
4: x_kEH2zJHHewCxquQN5i7Z2Jnvs.roa (hash: I2PK/LRtL0RyVycXgEUMToWLxsYstXAQXdiOl9wEuF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:2a:c4:16:9f:0e:40:37:43:1f:6a:7d:e3:61:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef66691ad3a41652f5bd8596230b3ac743d2a2c
Validity
Not Before: Nov 4 01:00:27 2025 GMT
Not After : Nov 5 01:00:27 2025 GMT
Subject: CN=40ae7d38652c583cd80b7a1cbc1ab2c060e14f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:ff:91:7e:88:c7:0b:e8:9a:b8:1e:b8:f5:
56:71:db:38:4c:7b:23:7c:7b:69:d8:6d:ea:73:22:
ba:e8:b5:f2:d8:83:01:08:15:a5:17:5c:5c:12:3e:
be:15:af:f9:d4:68:a7:84:da:5c:ef:ba:89:96:18:
b3:da:77:41:d7:83:a2:df:d3:f4:e6:db:c9:7d:ca:
7a:eb:7d:36:e2:1d:3e:f8:0f:d6:19:3e:82:ea:6d:
bf:59:d2:69:db:22:00:79:53:b9:8a:a8:4b:ce:ab:
a3:a0:22:6d:ff:a7:9f:c1:bc:63:fe:18:14:c3:56:
a4:bd:ac:7d:05:9b:4f:bb:16:7b:61:18:19:85:d1:
eb:bc:35:5f:d0:78:50:ec:d4:71:56:c3:6c:d4:c0:
48:01:80:51:c0:fe:90:d3:7c:bf:1c:7e:34:fe:49:
7a:74:7b:2b:c3:51:fd:ea:28:cb:e1:96:df:62:63:
e9:83:01:11:7c:50:99:61:68:f5:fa:a6:3d:1f:a2:
99:0a:0e:38:ed:0e:11:d6:18:22:7b:ef:2f:99:66:
3e:d1:66:35:d9:cc:9c:e5:fe:4e:9d:6e:6e:f1:25:
09:1a:4b:87:95:51:3b:c6:c5:83:e3:f2:60:1e:a2:
6d:a3:d3:fa:97:59:f8:5c:2b:da:90:e4:8d:dd:9f:
60:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AE:7D:38:65:2C:58:3C:D8:0B:7A:1C:BC:1A:B2:C0:60:E1:4F:88
X509v3 Authority Key Identifier:
keyid:8E:F6:66:91:AD:3A:41:65:2F:5B:D8:59:62:30:B3:AC:74:3D:2A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZmka06QWUvW9hZYjCzrHQ9Kiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/fc87fa-cbfa-4f3c-88d3-ba922bb1ebb4/1/jvZmka06QWUvW9hZYjCzrHQ9Kiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:5b:35:af:d7:92:9e:d8:44:7a:40:58:d5:35:cc:af:c9:ef:
dd:7e:a9:1d:5e:00:ec:69:fe:a4:8f:74:2e:fc:88:97:64:7a:
16:63:c7:18:c3:f3:a3:2e:82:fe:d0:02:a3:41:f1:ff:c6:ce:
3f:e3:c0:f3:73:a0:9d:fe:54:ec:ba:3d:d9:60:a9:fd:bd:6f:
96:0b:dc:aa:6b:da:29:fc:fa:f3:77:53:64:68:05:e9:a0:70:
51:6b:de:d8:17:f0:ef:94:0a:3a:4f:5b:19:3c:cc:61:79:c5:
7a:0a:5d:fb:b1:67:8e:7f:3b:92:cd:06:63:86:a0:0e:be:d9:
35:95:5c:ff:2b:eb:ba:0a:83:26:d8:e4:91:de:d1:15:78:11:
e7:07:42:17:21:ec:60:7a:e4:66:03:79:f8:60:77:5b:82:7e:
77:0f:8e:14:b2:0b:24:e4:c7:ac:b0:52:ed:e7:fc:cf:12:8f:
88:30:97:72:65:e5:bc:40:82:42:5b:69:22:b4:31:f6:06:ad:
13:4e:7d:a4:6e:11:cf:93:1a:7b:37:94:01:eb:0e:44:26:9c:
20:08:b6:8a:ed:3d:e0:fe:ef:a6:87:0a:ed:22:a6:45:09:a5:
36:f0:88:12:a6:36:64:34:b9:f9:99:1a:85:7f:a8:a9:cd:71:
02:79:5b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:16 2025 by rpki-client