Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
File: j57SGI2p7K2hFJFFrvpJcm_gHpY.mft (raw, json)
Hash identifier: fRcywv7H0V/nSN1O9S5xB67LIpQTh3v4+yeVZcv2k/E=
Subject key identifier: 11:7D:0A:78:BF:78:BA:AB:20:93:5B:2F:C6:E5:F4:9A:92:DE:64:CC
Authority key identifier: 8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
Certificate issuer: /CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Certificate serial: 019A71EEEF1389C8E85CF8521DB444489D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
Manifest number: 0545
Signing time: Tue 11 Nov 2025 08:01:15 +0000
Manifest this update: Tue 11 Nov 2025 08:01:15 +0000
Manifest next update: Wed 12 Nov 2025 08:01:15 +0000
Files and hashes: 1: XfshKmg26J4GeDmQkqYBCAG3kyQ.roa (hash: WmdBSp3tOZptf78Fte4nZRzoao1ErG+KJTfgEnIY6YY=)
2: j57SGI2p7K2hFJFFrvpJcm_gHpY.crl (hash: Bt1PDCjyURx2H6lNIWS4l/18ICw130d3QgSWPgTF+I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ef:13:89:c8:e8:5c:f8:52:1d:b4:44:48:9d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Validity
Not Before: Nov 11 08:01:15 2025 GMT
Not After : Nov 12 08:01:15 2025 GMT
Subject: CN=117d0a78bf78baab20935b2fc6e5f49a92de64cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:65:8f:dc:48:b6:27:21:1a:c7:a4:12:19:
77:f3:4f:ac:2e:84:78:b3:37:2a:8b:8d:ae:18:d7:
c1:c5:ea:3e:5e:39:ca:f2:fb:c7:2f:35:e3:53:fb:
c3:30:52:bf:a2:60:9b:0a:bc:c7:66:9f:ed:8a:2f:
65:e2:af:b6:eb:6c:92:a1:ee:cd:2e:ea:e0:3c:36:
d9:eb:71:79:82:63:1a:aa:9a:9d:63:ea:ab:d3:b9:
e7:17:f4:c1:71:d1:84:40:a0:91:94:70:bd:27:b8:
96:f9:5e:5e:a2:03:57:1b:0b:c2:a5:e3:3d:f7:31:
d4:68:65:8e:6e:05:4d:dd:c2:25:3f:75:70:ae:56:
c8:90:3f:39:5c:10:e6:93:06:c8:02:50:ac:36:c0:
fd:1b:29:71:d6:5a:8e:cf:88:f0:4a:77:31:a1:d9:
16:12:67:8f:9a:77:5d:af:7a:e1:19:25:58:47:b4:
cb:24:f8:c9:f8:3f:aa:69:8f:d4:77:8a:c7:c8:7e:
20:d9:ac:41:a3:06:c0:31:e4:76:b1:78:20:7e:b5:
7a:36:21:ee:ba:d7:23:c0:8e:84:c7:ba:91:f4:14:
37:2e:58:7d:c1:c7:c4:b4:5d:22:f9:55:a0:03:b9:
aa:63:a4:54:28:b7:6a:35:79:13:2c:78:99:43:f7:
1a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7D:0A:78:BF:78:BA:AB:20:93:5B:2F:C6:E5:F4:9A:92:DE:64:CC
X509v3 Authority Key Identifier:
keyid:8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:44:3e:ff:63:17:f1:4e:c1:18:d5:d2:a5:5a:c3:ea:7a:b2:
6e:81:c4:76:48:a0:18:0a:63:f2:d3:2b:53:15:38:d7:57:ed:
af:fc:b2:d6:5f:58:bd:6f:fa:49:5d:62:60:8f:a1:34:ce:73:
fc:32:df:8f:0a:fa:cb:4a:d2:be:b1:65:d6:8b:87:bf:c7:90:
94:15:27:17:0c:68:fa:33:3c:e7:96:30:23:6b:a0:1c:bc:36:
96:5b:a7:93:07:48:48:fe:b6:05:66:d1:77:da:ea:5c:b1:24:
7b:32:da:72:da:2d:fb:e3:54:0d:d2:85:1d:e3:09:80:29:ed:
73:3c:51:d5:a0:78:7f:d9:f0:76:19:f3:05:09:15:50:12:12:
01:46:9e:89:a8:ff:8f:10:4c:93:db:44:d2:e0:a5:ac:a5:35:
72:e7:d0:85:07:28:65:cf:94:9c:de:be:d1:d6:96:3f:e5:4d:
b3:bb:7a:c4:89:63:a5:d7:31:7e:6a:c2:c9:19:87:29:79:fd:
d6:2f:87:f1:50:02:a8:5b:d5:7a:cc:b4:69:b8:d0:aa:a3:61:
47:54:00:b7:5c:15:52:5f:d5:6a:9e:83:b2:65:3c:e3:21:5c:
32:d9:af:40:76:8f:c0:8d:70:ec:3c:b2:bd:68:0b:4a:d4:34:
0a:1b:7f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:45 2025 by rpki-client