Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
File: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft (raw, json)
Hash identifier: r/Cq4Ls+IjbIFRur3FoAU4f9sK0WoeGqOG8n+oPEiE8=
Subject key identifier: FF:7D:2F:3C:AC:33:35:C6:76:97:74:B1:D7:0C:60:7F:A0:1B:5D:45
Authority key identifier: 8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
Certificate issuer: /CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Certificate serial: 019A71B7885B35DB2541F55DE49096DDE711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
Manifest number: 161D
Signing time: Tue 11 Nov 2025 07:00:44 +0000
Manifest this update: Tue 11 Nov 2025 07:00:44 +0000
Manifest next update: Wed 12 Nov 2025 07:00:44 +0000
Files and hashes: 1: 0UHdcMJlJhG3oZKabqSdR28w2GU.roa (hash: c4S1i8VzMNkAak+YpBSVo9bfa8POuJI9pEw8vgNIjtg=)
2: jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl (hash: n6XzxfS1QOtEX5ExmHWtCMxX8v8LsNmVwBwwltc7tCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:88:5b:35:db:25:41:f5:5d:e4:90:96:dd:e7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4437f05cde6b0041149f61c473c8ed18db4b44
Validity
Not Before: Nov 11 07:00:44 2025 GMT
Not After : Nov 12 07:00:44 2025 GMT
Subject: CN=ff7d2f3cac3335c6769774b1d70c607fa01b5d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:24:fe:de:c4:b4:39:f7:bc:48:ab:c2:fd:b4:
e6:39:2d:63:5c:3a:96:64:22:63:72:ef:41:8a:5c:
7e:94:b3:d5:29:4c:41:69:1c:f0:9b:0a:8f:57:d6:
c7:fc:bf:c6:08:8c:29:06:51:a2:ab:21:85:ac:85:
85:39:92:06:71:df:ea:3b:0b:c8:f2:66:dc:e2:ee:
da:2f:0f:8b:50:04:e9:07:e8:c1:df:ee:a2:06:d1:
c3:ed:94:5a:cb:0f:d7:12:0d:d6:03:fa:16:0b:42:
bf:c4:bf:5b:88:68:ac:ad:ff:97:4d:38:ab:74:e3:
6f:e3:6f:ec:2a:62:b5:41:5b:ef:e4:74:a7:be:be:
48:c2:43:d8:22:50:52:ac:30:5f:7b:e5:9f:1d:5d:
13:77:1b:97:5d:26:b1:f8:7b:1e:09:11:2a:9c:cc:
0b:1c:f2:03:76:d2:79:1b:19:73:5c:29:64:3d:0f:
36:01:15:ce:53:e9:7d:ef:2b:ba:eb:c2:62:c2:c3:
d0:a3:72:47:40:45:f1:c7:11:00:af:6c:7e:4c:13:
93:c8:a8:be:43:0d:b4:8c:bf:af:e4:4b:c0:a1:0f:
c5:e8:81:5b:82:d1:72:36:62:5c:c1:91:d6:be:89:
6e:87:e3:a0:03:df:3e:cd:dc:b3:98:1e:37:5f:9c:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7D:2F:3C:AC:33:35:C6:76:97:74:B1:D7:0C:60:7F:A0:1B:5D:45
X509v3 Authority Key Identifier:
keyid:8D:44:37:F0:5C:DE:6B:00:41:14:9F:61:C4:73:C8:ED:18:DB:4B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6239a0-f61b-4d44-99fd-71b9091edab0/1/jUQ38FzeawBBFJ9hxHPI7RjbS0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c5:20:2b:ac:0d:bb:d9:0c:18:d2:cf:22:01:ef:fe:4b:1b:
ae:3f:25:de:6b:5c:ba:fe:5c:da:ae:5b:46:fe:f3:f9:b2:d3:
29:a4:b3:56:2b:db:85:87:7e:54:06:e8:4f:90:f6:84:fa:3c:
3d:69:41:3d:e0:b1:06:0b:9a:c9:db:df:cb:c3:7d:cc:92:cf:
72:e0:9b:f5:74:6d:09:41:d4:10:e8:b3:77:d6:15:1a:a6:8d:
54:10:65:2f:f9:be:bb:57:a2:e4:ea:0d:f1:2b:e2:40:d4:44:
cc:69:d2:01:3b:3a:a1:b2:4f:db:7a:cc:ef:e6:52:d1:a8:a3:
67:36:e4:42:a1:19:08:d8:44:ca:00:bd:02:cd:07:0d:63:49:
01:4d:3e:60:b1:13:91:7b:e4:23:82:a2:ec:43:68:1a:9f:e3:
ff:e8:8f:8e:ab:06:0f:32:fe:be:12:03:15:ee:e8:11:16:5f:
88:0c:25:30:e2:f1:9c:db:fb:be:a2:e3:ae:d4:d0:80:2b:65:
26:c3:6f:d2:63:b2:86:06:da:74:90:8c:53:0a:16:0e:2c:f2:
e4:fe:59:1d:66:83:ea:fc:ec:c7:94:1c:ca:20:e6:0b:25:90:
56:17:de:78:b6:01:8c:33:00:52:a5:79:58:fa:1a:29:a9:3f:
cd:fb:49:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:41:46 2025 by rpki-client