Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json)
Hash identifier: R2+nitTjqd5LBAvAmCxFop9d5NO36+Wpk1d3xdNPmG8=
Subject key identifier: 7B:48:3B:A0:E6:AB:4B:14:57:61:40:69:43:65:8F:8B:CD:7C:04:D5
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 019A533EF13220D524A94A0BE35B0A44AFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
Manifest number: 1718
Signing time: Wed 05 Nov 2025 09:00:25 +0000
Manifest this update: Wed 05 Nov 2025 09:00:25 +0000
Manifest next update: Thu 06 Nov 2025 09:00:25 +0000
Files and hashes: 1: A8xcoz0CxVsQV59nDwDYQFIr0lo.roa (hash: DYANfqFgGBJIwz26B4ECCOb3ofMn4dBZTXHVwjQaWQ0=)
2: ihKky7iErFMr7G88FOVCnj74bps.roa (hash: j7P5G19jRMsSzlS7Lh1Jjj17xJpONrJFrA53mphipiw=)
3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: ys1t/PaZahVrEMdQmb9uSwbWEtjldK/7IVa/ac3pa+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:f1:32:20:d5:24:a9:4a:0b:e3:5b:0a:44:af:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Nov 5 09:00:25 2025 GMT
Not After : Nov 6 09:00:25 2025 GMT
Subject: CN=7b483ba0e6ab4b145761406943658f8bcd7c04d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:d6:5b:d2:d3:23:54:d2:c8:f0:ba:c8:22:
5d:ac:e7:08:dd:3f:1f:d6:11:a0:25:4a:ac:77:cf:
2a:a9:8c:ba:81:3f:35:56:dd:ee:0b:1f:c7:35:6c:
e3:bd:40:fc:33:7e:86:af:68:86:4f:8f:08:4c:55:
90:87:79:80:83:f6:9c:cd:85:7a:19:9f:f2:4b:5c:
74:72:58:b3:8c:34:f9:6f:41:5f:b1:45:f8:4f:40:
71:22:b6:2f:ae:b6:0f:dc:14:d3:bd:19:12:a4:51:
63:7e:05:0d:57:c5:09:c8:d6:34:7c:0b:b7:05:6e:
9b:fd:ab:9c:87:c5:60:2f:d8:b1:99:0a:b8:c5:5d:
5e:0d:3a:98:f0:e9:42:5b:1e:04:01:7f:e1:ad:e3:
96:4b:bd:cd:06:e2:6a:4e:c1:9a:c8:80:2e:cb:d5:
26:72:7f:d9:c0:dc:c0:cf:b9:9e:12:9f:70:6c:e1:
0c:e4:63:76:1f:5e:a8:12:9c:1e:26:38:d4:06:5b:
9d:65:d1:79:2d:6a:81:e4:40:34:f4:03:dd:eb:73:
a3:6c:57:c0:0e:e1:71:8f:c6:88:82:e7:fb:8f:9f:
c8:67:ee:da:c6:8d:11:f5:e1:af:b2:4a:f0:45:5b:
79:9f:1d:7b:c1:9d:b4:d2:8f:07:f2:bc:12:48:dc:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:48:3B:A0:E6:AB:4B:14:57:61:40:69:43:65:8F:8B:CD:7C:04:D5
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:af:fc:b1:71:0b:ee:ab:d2:84:f7:1f:e9:9e:71:91:4f:59:
44:4b:e2:56:f4:34:79:ea:ee:92:b4:ec:be:c3:51:50:1f:be:
04:28:bb:fa:68:29:e5:11:9d:54:cf:11:75:e5:d8:22:84:60:
de:fc:89:5e:4c:18:7f:69:b9:c0:29:82:33:88:f5:92:46:a9:
a2:06:d7:c0:3a:b4:1a:97:0e:8b:10:0e:5d:1d:b7:1e:f8:95:
d4:f3:57:26:eb:a0:22:f9:35:65:1b:b6:b7:62:26:a7:96:d3:
14:ae:b4:75:98:fd:a6:31:e8:14:72:da:3d:08:64:25:2d:cf:
3d:04:20:19:7f:21:06:94:68:3b:fa:65:bd:7a:31:cd:2e:d3:
89:7c:c8:14:c8:7e:77:a2:d9:84:e0:13:91:b6:02:77:d4:36:
36:1a:bf:e9:5c:d2:c4:be:73:b0:77:1d:f3:8d:76:34:91:33:
35:2c:b4:14:3d:4e:f2:a4:af:21:76:b6:24:ef:2f:f6:c7:5f:
7f:ac:5b:84:4e:19:b0:e9:b7:94:af:f1:4f:b0:ba:0a:ca:8c:
71:dd:b4:87:3a:b5:d0:ba:e9:1a:94:31:a2:33:a5:1e:5c:60:
65:42:a9:34:de:ed:94:d4:f3:d7:1d:d1:5b:3f:01:9b:68:6c:
04:cd:7c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:45:23 2025 by rpki-client