Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
File: jSgZicO25Y_clTTufrPiYNHYd0k.mft (raw, json)
Hash identifier: kvDLxhe3RSGLs0kxg6QPzGy2h4paMsxGAS6w0yjTETo=
Subject key identifier: 4D:E4:34:BC:F3:42:EB:6D:8E:F4:6D:17:6E:06:7B:ED:1B:3A:24:90
Authority key identifier: 8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
Certificate issuer: /CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Certificate serial: 019A1E3F0D3FA71FFE9978B6AEA6E40CBAA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
Manifest number: 1461
Signing time: Sun 26 Oct 2025 02:00:39 +0000
Manifest this update: Sun 26 Oct 2025 02:00:39 +0000
Manifest next update: Mon 27 Oct 2025 02:00:39 +0000
Files and hashes: 1: B0VOGqgWvciGn9lsPPPNtDMM_cE.roa (hash: H0LM3F0MCvrmnF+41NjCVulojTYy2eQ3Qd3O1jXQklA=)
2: CC2hAsaTX94OsKPmChtfbXTcFNE.roa (hash: l5IYiZcm9PSDWMsJtwhQfhiyJDNyjG8wrsa+ZBwNb+0=)
3: IKFKCW5Jsufqo1w6BMJo3NVNRtU.roa (hash: rOrP7u2w0rkDr+dN4bu5dl5k+6reLBo13wIVMJJiIoo=)
4: jSgZicO25Y_clTTufrPiYNHYd0k.crl (hash: nYb/S8Uqo7I74/XLbq8yA3wjRKEz7F8aoePqCAn2zPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3f:0d:3f:a7:1f:fe:99:78:b6:ae:a6:e4:0c:ba:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d281989c3b6e58fdc9534ee7eb3e260d1d87749
Validity
Not Before: Oct 26 02:00:39 2025 GMT
Not After : Oct 27 02:00:39 2025 GMT
Subject: CN=4de434bcf342eb6d8ef46d176e067bed1b3a2490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:e7:cc:d1:e2:63:17:49:8e:04:2a:97:59:
92:50:7b:52:b2:7e:f9:2d:e6:6b:c5:c3:32:42:b5:
4b:5b:7f:7f:0a:f6:55:92:60:e1:23:56:be:e3:84:
b0:83:f0:1e:6a:f4:9c:07:c4:e0:7d:76:c9:f8:a8:
a2:53:50:46:b9:85:6d:8f:f1:c7:62:c4:2a:e6:b6:
54:11:46:a4:5b:9e:be:ca:f0:8b:58:c8:85:e8:d4:
4f:91:1d:21:cd:fa:31:71:54:75:e0:29:08:be:a8:
ff:64:2d:92:7b:12:9e:8f:0a:2d:5b:8a:a8:0c:e8:
6a:25:3c:76:fe:48:1b:55:25:14:ce:76:f3:68:70:
81:eb:d5:c4:cb:e2:fc:74:4a:ea:a1:8a:ec:0f:2f:
a0:47:b1:13:7c:39:1f:8d:26:e9:a7:41:19:c4:c8:
06:d4:4f:96:23:89:41:24:a7:96:1c:44:0b:31:71:
27:19:ac:f2:db:f1:6c:20:3c:d1:a6:c2:70:72:db:
04:f9:02:0b:ad:1b:2e:4b:14:a3:35:31:b6:0b:ec:
4b:dd:42:10:da:2f:04:51:fb:27:cf:c3:a0:6f:4a:
37:2e:3c:de:99:b7:fe:8e:88:4b:6c:e4:80:24:d8:
e8:93:d6:d8:31:81:ff:0d:e0:29:03:75:da:c3:c4:
d2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E4:34:BC:F3:42:EB:6D:8E:F4:6D:17:6E:06:7B:ED:1B:3A:24:90
X509v3 Authority Key Identifier:
keyid:8D:28:19:89:C3:B6:E5:8F:DC:95:34:EE:7E:B3:E2:60:D1:D8:77:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSgZicO25Y_clTTufrPiYNHYd0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3bae86-a8fc-43e6-801a-bca80e47c573/1/jSgZicO25Y_clTTufrPiYNHYd0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d9:e0:d8:56:13:ad:ee:3f:dd:7f:6c:b5:6c:fc:ac:43:d2:
14:14:94:e7:b5:55:8b:92:c8:37:fc:cb:86:c9:73:e5:2c:41:
e0:10:5c:3d:7d:44:b3:92:5f:f6:5e:a0:ad:5c:4a:fd:ae:24:
3a:23:79:9e:f5:92:61:8f:6c:8a:2a:ff:81:57:a0:b2:ba:51:
71:4e:71:e0:ba:a3:ed:4d:ce:7f:69:f2:ca:08:b1:43:f8:13:
cd:2a:73:f1:2d:c6:1a:74:79:b6:f6:dd:7f:1b:c3:33:e6:c2:
ae:b1:45:91:24:74:ce:27:69:67:64:20:f6:9e:47:78:12:cb:
2b:97:07:dc:aa:3a:20:f6:91:ea:b3:61:b5:38:8b:db:f7:0b:
e6:9b:9b:a5:ad:f2:ef:9b:7e:23:6e:18:06:ea:72:9c:19:32:
5b:ac:f3:c3:3f:d5:c1:97:6f:57:95:d5:17:70:57:c7:18:6c:
e2:1c:ff:d7:78:6f:a7:07:81:08:94:4b:46:1f:68:42:84:b0:
6b:00:90:5f:6a:fd:97:29:31:42:1d:c5:b6:73:a5:ca:e9:a7:
37:2f:fe:54:b8:1f:f8:c4:48:40:f4:7b:77:4f:a2:08:10:72:
dd:24:ac:10:7d:84:ab:f2:76:cc:c4:78:4f:83:df:7b:63:e1:
36:92:f2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:09:45 2025 by rpki-client