Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
File: jciXK026DSBJ03yEikoh1KQ7Ljs.mft (raw, json)
Hash identifier: 3VyWUa0shxOmAq8hqZuf2zMq6xYDd2+wENx3KMWQzMw=
Subject key identifier: F6:88:F2:71:C1:81:C0:39:4E:0A:B6:E9:7A:FC:9B:DD:E8:62:C8:72
Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Certificate serial: 019A7225F79D767DB42227EBF8F4777350AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
Manifest number: 059C
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: jciXK026DSBJ03yEikoh1KQ7Ljs.crl (hash: 6N5ktB6XkIXLJHz2Kfv0ysiYsyO5LbasP030mEXlGvs=)
2: s8IxW5tuKoaeGci5PMMsvkBpqVA.roa (hash: r/ncpxBVtrl7LSWT4Ir7OLnEXZq1sFDkQ+rRRvqTryo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f7:9d:76:7d:b4:22:27:eb:f8:f4:77:73:50:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=f688f271c181c0394e0ab6e97afc9bdde862c872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:c0:76:6c:5d:17:5d:4d:f0:12:89:b4:8c:
8f:4d:25:f8:de:d0:b9:82:05:06:9f:7c:fd:21:0e:
46:41:87:7d:53:e2:d1:a4:00:22:70:49:52:44:ab:
2e:55:37:af:ea:ae:4a:2f:e9:c3:d0:81:21:26:c3:
66:0d:b5:ea:57:66:1c:7f:72:fd:b0:c7:54:e1:f0:
ec:b9:63:1c:67:ff:b6:cc:c6:5c:7e:b4:2e:84:67:
bd:01:bd:c6:da:f2:02:1c:0e:5e:c4:99:83:58:1e:
4e:4b:59:fd:d4:45:82:e3:70:94:99:cb:07:06:81:
28:40:f5:85:2a:60:9c:0d:c9:6d:f3:e5:7c:30:31:
5c:ee:f2:53:42:af:c2:91:bb:8c:3b:b7:db:36:a1:
f9:e8:51:e0:14:fd:0b:d4:ed:4c:90:a1:46:fd:ff:
29:51:ba:bc:33:c0:a7:26:63:ce:d7:06:be:26:5d:
aa:ea:06:39:d3:19:f7:58:65:d2:a8:8b:a3:be:14:
82:15:e4:68:34:79:31:a7:bd:ec:02:b5:b2:29:e9:
35:5c:76:a8:9e:c8:24:2f:f9:57:b7:34:d2:72:b8:
24:13:41:37:5c:1f:58:85:66:a4:98:7f:6c:ea:4e:
17:18:ff:ac:2a:23:58:5d:7e:a5:63:56:2e:69:83:
9c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:88:F2:71:C1:81:C0:39:4E:0A:B6:E9:7A:FC:9B:DD:E8:62:C8:72
X509v3 Authority Key Identifier:
keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d1:50:6c:c0:d7:f9:cb:3b:a9:22:e1:0c:f6:d3:ee:73:64:
00:d9:2a:e4:b7:eb:4a:67:db:d1:4d:66:5d:4c:c0:aa:2d:37:
e0:31:ec:d6:d9:71:5f:92:4a:de:9c:03:c5:8b:89:b9:38:54:
fb:bf:12:81:c0:f7:87:ab:55:b4:f6:27:37:3c:f7:4e:50:5b:
db:84:19:6c:57:97:06:ec:f7:9d:72:39:c6:11:62:f0:cc:a0:
5e:39:f8:47:3a:0e:d9:ef:25:25:e4:e5:36:ab:ee:bd:39:09:
f2:44:88:fd:9e:90:e2:19:50:2d:27:a9:cc:ea:fc:4c:b3:5a:
e7:04:e5:89:16:8f:1e:97:af:eb:17:1e:ba:be:8f:00:61:4d:
98:83:d3:27:29:d6:34:45:2b:ad:60:ee:eb:25:27:92:11:9b:
ab:4e:e3:90:a5:af:45:6f:f4:eb:e3:3b:93:34:fa:10:d5:cd:
34:76:7f:8f:05:bf:27:c8:72:65:f5:f9:bc:e0:63:62:72:70:
b7:b4:b0:b6:01:c0:2b:4d:ac:23:68:bc:08:46:3c:e1:f5:b3:
10:8d:7c:0c:52:71:99:92:5d:5f:ed:ab:2e:f6:b6:32:ab:2e:
a7:da:88:95:a5:d4:45:1b:74:11:74:f7:5f:e5:5d:9c:62:c3:
75:17:7b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:02 2025 by rpki-client