Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
File: jHcBPkiKCccJtjIkbZQF2kWMVTg.mft (raw, json)
Hash identifier: sv5lcxQS1nEZLA/XgRU15wkWzqJrIKgW4Ck145L2jFM=
Subject key identifier: 05:1F:DE:28:83:A2:AE:6A:9C:4F:9C:10:D2:74:2D:9F:86:F8:4E:FE
Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538
Certificate serial: 019A71EE8F61D0C31E2E0D7C57897E7D505C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 08:00:50 +0000
Manifest this update: Tue 11 Nov 2025 08:00:50 +0000
Manifest next update: Wed 12 Nov 2025 08:00:50 +0000
Files and hashes: 1: 1vKogvAJ7aYG5PR2yXnQrWioZSo.roa (hash: 7AslTVaGAxs89CrI0ewnWcmXXnAy3y2uVc1NOrkGAHw=)
2: IGFAJ7tvsxoewBIz-CIaT5Rb9KA.roa (hash: b9kbJBvM0NpcufGFz0NyZFZ9HPycn+QMvqEDUNgTAzI=)
3: ivVRenlAkxSye3NC_DyoAxqoj6M.roa (hash: tMvkuqfZVs7G8eRqzF/eWUmt5tCQ8iMBN+34AAtvEYo=)
4: jHcBPkiKCccJtjIkbZQF2kWMVTg.crl (hash: pPZU6Tvdvcy3l8D2GeJxKplXF4U5lRvXw943uIvL4iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8f:61:d0:c3:1e:2e:0d:7c:57:89:7e:7d:50:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c77013e488a09c709b632246d9405da458c5538
Validity
Not Before: Nov 11 08:00:50 2025 GMT
Not After : Nov 12 08:00:50 2025 GMT
Subject: CN=051fde2883a2ae6a9c4f9c10d2742d9f86f84efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:f8:e1:2a:75:b7:55:d6:a4:ac:6b:9a:a1:
25:28:2c:90:52:05:7a:0c:1a:91:74:cf:12:d3:56:
f0:ba:11:25:4c:23:20:23:66:b0:8f:60:23:0d:fe:
e5:15:92:5d:f0:b6:a2:e7:c5:9f:56:54:1d:8c:51:
ae:dd:49:24:59:29:d9:e2:8a:6c:fb:a7:8f:49:3a:
a0:20:92:d6:5f:43:f6:f2:bc:97:d0:3c:5a:51:d7:
7e:14:14:f2:34:73:7b:90:de:f0:d9:ff:78:0d:dc:
ad:70:ed:b9:10:91:a9:96:ff:68:a2:b8:70:5a:3b:
d1:31:8f:c9:d8:4d:2a:16:69:a6:89:1f:e0:82:42:
96:0d:f1:d9:d9:22:1e:94:1d:d4:8c:db:a7:39:52:
0c:bf:f4:af:a3:24:44:6f:e0:8f:f2:ba:15:23:d5:
8c:73:ef:82:6a:39:a0:17:47:33:15:75:ca:34:c7:
20:d0:cf:a2:fc:5d:a7:65:f3:12:5b:32:a0:4a:cd:
9c:94:e3:93:99:a3:13:f9:12:ad:10:c3:2a:1e:4f:
9a:cf:c3:31:ac:23:b9:1f:39:b3:11:e8:be:5c:27:
d4:82:fd:c1:55:87:7f:dd:8c:a4:7d:3d:2a:25:b4:
2b:2a:fa:35:5c:20:d5:0b:ca:97:97:9e:73:3e:6e:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:1F:DE:28:83:A2:AE:6A:9C:4F:9C:10:D2:74:2D:9F:86:F8:4E:FE
X509v3 Authority Key Identifier:
keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fe:9a:fe:de:ca:8a:32:cd:49:97:cf:f2:1c:e2:87:e3:70:
40:59:8c:61:db:1b:91:cc:5c:e3:ba:a6:6f:70:e9:d1:81:1d:
60:5f:bc:5e:d9:ca:8e:ec:d9:11:51:ec:b6:b8:3b:be:88:a0:
1e:9f:21:95:ab:fd:ac:41:bc:51:b6:f7:8e:8c:28:96:c3:0c:
5b:e0:a2:67:8a:ae:3f:87:5d:75:fb:db:5f:eb:e5:5b:71:46:
06:eb:10:52:6a:70:85:20:34:da:44:a7:95:44:be:09:62:fb:
1b:db:9d:20:4b:fe:2b:ee:97:bc:aa:0e:cb:bb:0b:e9:55:5a:
17:09:05:84:b9:38:69:98:b8:03:e5:54:e4:18:99:70:94:79:
2a:ab:6a:f7:90:6d:dd:18:bb:e6:8e:ca:35:5a:36:a4:ba:25:
4a:e4:9f:fe:4d:c6:68:90:c3:2b:75:eb:c9:57:87:9a:dd:b0:
9e:59:52:54:59:e2:bc:80:3b:d0:2c:75:23:16:df:9d:31:07:
bf:cb:60:20:87:33:d0:d6:f2:60:15:f4:9c:90:9c:4f:76:81:
da:b0:c0:0b:21:1d:91:6c:04:5d:d6:02:93:8b:e3:b2:38:d5:
9c:9a:00:8c:82:40:fd:a2:82:db:6c:45:33:78:33:ea:e6:b2:
f5:d5:33:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:44 2025 by rpki-client