Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: tfytFH0YVeyZsVYj5m+8A01vGSVmjH2tRuPL8VRsAok=
Subject key identifier: 07:75:39:0C:F2:41:02:86:10:9D:FC:96:63:FF:8F:56:0D:7B:1B:22
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 019A240A561FA9445BE1805B121449F4A1F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 1006
Signing time: Mon 27 Oct 2025 05:00:48 +0000
Manifest this update: Mon 27 Oct 2025 05:00:48 +0000
Manifest next update: Tue 28 Oct 2025 05:00:48 +0000
Files and hashes: 1: bmmsoMxYv54D3Mc8ZLTs5VomINo.roa (hash: kqjLBEFpjOoFx6G/izyFkQ1F3RKWyrbgiXrW4EShNUE=)
2: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: G5gAhi3fP11b77RN7Qf1l3T+Zhgs4Eej4qX7iM7XP/8=)
3: snNBqH-54jS2dGd9kUA2wImuV_A.roa (hash: +KuCAVSEZ2fMvcpoRb3reL7YI4QgXbzX9w7SZK+eaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:56:1f:a9:44:5b:e1:80:5b:12:14:49:f4:a1:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Oct 27 05:00:48 2025 GMT
Not After : Oct 28 05:00:48 2025 GMT
Subject: CN=0775390cf2410286109dfc9663ff8f560d7b1b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a8:36:6a:70:5c:c6:9e:10:cb:89:15:76:f8:
e7:66:29:ac:ca:10:23:2c:2f:2b:12:47:4e:fd:11:
16:9a:29:6a:fb:bd:cc:e9:f8:6c:32:e7:95:34:82:
8f:1c:17:50:da:cf:89:ee:93:49:3a:8f:77:ea:44:
cd:ab:b7:80:56:68:74:f3:41:1d:70:ce:d2:39:73:
c8:e6:13:e8:f0:7d:d5:0b:b9:22:80:c6:66:28:03:
37:bb:c3:cc:3e:5d:f9:88:af:75:b6:44:f0:cd:c3:
b5:9f:11:9f:a9:1f:0c:b8:34:4e:2f:d0:15:3c:8e:
7e:28:35:ee:d1:73:08:e7:f7:8b:7b:86:bd:ba:5b:
1b:1f:53:4c:d0:f1:06:ea:3c:6d:2b:7d:ac:78:51:
f9:b3:5b:eb:fb:b1:6f:5b:fa:6f:6f:39:29:0e:ed:
1d:2d:e4:c8:1e:28:b5:9d:33:95:d2:4c:27:fc:f5:
e6:fb:4e:a7:7a:49:7f:ca:ae:07:06:88:f6:a2:68:
e2:01:b6:d6:47:64:84:89:9a:d3:79:66:5f:82:89:
29:0f:9c:38:83:09:96:e4:a2:7c:fc:79:f3:2a:3e:
15:e5:8b:54:89:94:78:b0:38:b0:5f:24:5a:92:46:
4a:dd:ae:b6:48:a8:bc:3c:7a:c8:c5:3f:21:4b:11:
4a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:75:39:0C:F2:41:02:86:10:9D:FC:96:63:FF:8F:56:0D:7B:1B:22
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:18:58:e6:7a:85:46:d0:36:01:b1:58:4a:b6:09:6e:3d:af:
24:9a:e0:09:13:f8:05:c5:52:59:49:79:62:b3:47:0c:fe:e1:
ca:ba:d3:6b:ee:7e:23:c5:a3:1d:ec:c6:1c:6d:1d:f1:07:72:
5c:27:56:6c:eb:c2:bc:65:d9:67:63:65:de:b7:c8:58:70:65:
90:f7:93:b6:3e:da:66:37:24:85:fb:c4:95:bc:8a:cd:b6:1d:
5a:30:be:b7:5f:99:10:88:32:ab:24:db:1b:32:42:b4:2b:5e:
7f:bf:a8:53:0e:e0:07:20:52:8c:97:df:52:2d:48:c2:f2:2b:
fd:80:c2:06:40:40:04:67:10:6e:24:18:22:04:23:30:60:81:
12:2f:0c:f2:af:18:8a:b4:57:59:17:07:37:e0:79:3b:e2:48:
13:d9:95:72:6b:0b:f8:30:8c:e1:8e:f6:48:d4:b2:e7:1c:08:
2f:21:d5:d7:fe:1b:1a:07:2c:91:cf:2c:dd:86:e0:e9:15:3f:
c2:d5:7f:ba:6e:9f:77:e2:3f:81:57:ce:48:22:a3:8c:b2:c2:
c8:4b:5d:1c:92:30:0f:1f:ee:14:c6:32:d7:6e:7a:f1:4b:90:
fb:57:cd:b9:a3:a2:a5:47:22:cb:52:07:4b:96:5a:1f:34:fd:
0e:e5:23:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:10:56 2025 by rpki-client