Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
File: jHtuGDyNUsxGBbqLXa3cZjJik-w.mft (raw, json)
Hash identifier: NyrzNafLevN2Of3cEzE/oZacnTsjcJsD1JNiMkYhdOE=
Subject key identifier: A3:F2:F3:60:C2:02:D1:0E:F3:51:29:EC:A9:81:B0:6E:AA:F8:4C:0F
Authority key identifier: 8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC
Certificate issuer: /CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
Certificate serial: 019A300F43DA5EDBC3871F87A336616BB380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
Manifest number: 1679
Signing time: Wed 29 Oct 2025 13:01:38 +0000
Manifest this update: Wed 29 Oct 2025 13:01:38 +0000
Manifest next update: Thu 30 Oct 2025 13:01:38 +0000
Files and hashes: 1: hi5ZHldjJLIMs_WwcUjXAobxn_E.roa (hash: K7O/p6BErwsTAP5GquRxOQd6mPGtBXsqXpbnYVE78oE=)
2: jHtuGDyNUsxGBbqLXa3cZjJik-w.crl (hash: zOY9UVog0UdW+3JS+FdJ/cCwtZ+QAFUjAndJI/OzTtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:0f:43:da:5e:db:c3:87:1f:87:a3:36:61:6b:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
Validity
Not Before: Oct 29 13:01:38 2025 GMT
Not After : Oct 30 13:01:38 2025 GMT
Subject: CN=a3f2f360c202d10ef35129eca981b06eaaf84c0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d0:7b:af:23:9f:6f:1b:4a:0f:c3:a4:8c:48:
ab:7f:de:c6:49:5a:09:d1:da:f2:29:0a:2e:04:f0:
d2:16:c1:e6:5d:8c:ce:15:3f:6c:0d:77:bc:fb:2d:
5a:ac:90:71:79:e0:47:b3:f0:5c:f9:f8:6f:9f:7d:
6d:f7:c0:c7:cd:1d:f8:8d:ad:a8:19:fc:24:53:a2:
3b:6e:a1:0b:04:0c:1a:41:af:25:8d:7a:2b:5b:57:
70:f1:16:3a:ed:f9:bd:9d:1c:e1:04:aa:59:20:64:
8e:dc:2a:84:2c:ad:2e:ac:62:c5:c3:24:18:f9:90:
ad:47:28:45:e3:a2:93:a3:d0:1d:21:42:4f:53:4f:
4a:b7:67:8b:14:0b:0c:77:aa:f5:ca:3f:53:6a:8e:
cf:cf:38:2f:83:69:29:7e:4a:9c:e3:86:b0:7a:af:
7a:c6:93:49:7d:1d:46:40:27:89:5e:ed:32:ca:3f:
78:88:be:53:bd:c1:68:71:83:88:a9:e5:9e:9f:45:
b5:ff:b4:28:15:eb:59:8c:cf:2a:69:df:28:37:be:
24:0c:42:8b:c0:b6:b9:10:a4:2d:8c:c2:3d:7f:15:
e5:d6:91:b6:1b:6b:c3:8b:81:4a:3f:ef:f3:42:65:
96:7a:66:6a:60:e9:f6:16:b5:84:47:30:f0:b4:62:
e8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F2:F3:60:C2:02:D1:0E:F3:51:29:EC:A9:81:B0:6E:AA:F8:4C:0F
X509v3 Authority Key Identifier:
keyid:8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:14:7d:0c:ae:46:6c:cf:f2:ac:64:d1:45:aa:63:26:94:1c:
58:4d:c8:58:c0:bc:99:87:2f:c3:62:e2:73:02:8e:c2:49:73:
dc:e5:ff:a7:d7:8a:18:d1:07:0c:74:48:09:9b:95:2a:8c:1e:
3b:11:4a:ed:46:97:1b:c1:87:ff:2a:04:aa:22:e4:40:44:b6:
04:19:9b:4f:c5:56:2b:bc:24:b4:e6:10:c5:c5:56:bb:89:66:
ce:e1:f9:d7:bf:ee:58:7e:8e:4e:ec:dc:ba:24:58:91:65:06:
35:b6:a9:3b:66:a2:4b:8f:2c:c0:83:78:11:df:48:2c:5f:8b:
47:34:4e:55:b5:18:42:df:2e:31:f5:ca:05:a7:0f:01:1e:38:
90:9d:c5:1f:ed:2c:7e:f0:00:53:cb:06:66:3a:87:2a:02:c7:
02:94:54:17:f4:32:32:45:80:be:82:17:d7:00:c0:2d:bf:fa:
53:30:a6:79:b7:ec:60:dd:45:66:78:d1:7d:10:c7:7d:34:52:
c2:c7:bf:2a:ba:a3:78:9b:21:0e:ed:39:51:af:8d:f8:53:51:
13:c6:b4:8e:a9:89:8b:0a:9f:ed:97:26:f7:06:20:29:ef:76:
7a:7f:14:3e:a2:b1:ee:1d:40:cf:94:e2:64:66:32:98:9b:52:
24:85:7e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 16:36:15 2025 by rpki-client