Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
File: jTDnckXCFacL5O9X0DvR2NTbWJg.mft (raw, json)
Hash identifier: zXdd8V1wygxZMWRtEidZpZYlRFl4k69sbVBHeKZ+xWQ=
Subject key identifier: 1B:85:D0:B0:4E:21:43:D1:3F:B1:2D:F5:29:85:1D:50:E5:04:AD:F3
Authority key identifier: 8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
Certificate issuer: /CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Certificate serial: 019A729340CD2204C3C1B23FB6F9EAD96D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
Manifest number: 023F
Signing time: Tue 11 Nov 2025 11:00:44 +0000
Manifest this update: Tue 11 Nov 2025 11:00:44 +0000
Manifest next update: Wed 12 Nov 2025 11:00:44 +0000
Files and hashes: 1: eLQvZXPU_77wrIDfdDfIdsIHFlE.roa (hash: Dn8Gnar3CSZGrhitajHivb75okRn8yMh58M9uLTkwsk=)
2: jTDnckXCFacL5O9X0DvR2NTbWJg.crl (hash: uGRE6BysZXkd2xSodySStD6DPtnIuZbcUz0irH97XcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:40:cd:22:04:c3:c1:b2:3f:b6:f9:ea:d9:6d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30e77245c215a70be4ef57d03bd1d8d4db5898
Validity
Not Before: Nov 11 11:00:44 2025 GMT
Not After : Nov 12 11:00:44 2025 GMT
Subject: CN=1b85d0b04e2143d13fb12df529851d50e504adf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:83:87:03:94:e6:2a:3c:42:be:85:3e:69:49:
fd:b9:e9:2b:4b:2c:3e:1f:e0:35:5d:19:50:07:97:
7f:a7:ab:50:45:e4:c0:6e:46:8a:13:24:90:e7:7d:
a7:d0:69:b6:d9:6e:98:d7:45:ce:e3:df:03:9a:76:
5b:ac:57:fb:2b:f4:6e:54:1b:98:f3:16:a6:ed:3d:
a5:b8:af:df:f6:ee:bd:c0:98:b9:b6:cc:e2:6d:54:
ae:cd:a8:33:60:67:d2:ed:e2:d3:c8:84:24:42:45:
18:20:a9:8c:be:16:02:10:63:b3:ee:4d:22:dd:8b:
dc:be:20:67:a6:b7:49:87:f3:fa:e5:74:75:a1:f6:
47:5b:1b:d3:ab:98:16:1c:00:80:5e:dd:b6:ae:02:
92:a6:e2:98:be:22:0b:1f:c8:9f:5b:0d:9d:94:9d:
eb:4f:f2:82:64:32:99:74:ac:aa:15:78:ef:3c:c6:
b9:7e:f9:b7:76:ef:c5:d3:aa:f5:c0:8c:89:60:1f:
7e:c2:4a:97:41:6b:de:7a:2c:a6:b4:72:a3:84:7e:
41:da:47:ca:74:4f:9a:c2:b4:37:02:9b:78:74:3f:
ac:07:7a:54:48:70:03:35:ec:ca:f4:79:cc:af:d1:
92:9b:fc:26:33:57:80:91:f3:7d:12:6e:40:7f:2e:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:85:D0:B0:4E:21:43:D1:3F:B1:2D:F5:29:85:1D:50:E5:04:AD:F3
X509v3 Authority Key Identifier:
keyid:8D:30:E7:72:45:C2:15:A7:0B:E4:EF:57:D0:3B:D1:D8:D4:DB:58:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTDnckXCFacL5O9X0DvR2NTbWJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/606827-b710-4ced-b81b-5f3cf9f3b619/1/jTDnckXCFacL5O9X0DvR2NTbWJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ac:fd:30:76:5c:39:0f:d0:fb:e0:a8:f4:43:90:f8:d5:d7:
e8:9d:5e:7d:87:5a:fc:c9:82:76:e4:bf:b1:a1:b3:78:6d:36:
64:2f:f9:3d:1c:b4:37:0f:5e:2f:0a:42:e3:e1:e5:2c:9a:eb:
e9:c4:cb:10:a4:2f:a5:27:a1:fd:66:37:a0:a2:c2:d2:91:fd:
68:55:69:54:7a:9f:93:15:01:ea:8c:30:66:e4:67:4d:75:ef:
86:e7:ac:bf:54:6f:51:40:34:8a:c5:95:a4:a4:e8:b2:73:16:
cb:e5:4b:6a:79:d6:58:00:aa:16:b0:be:2b:e3:72:56:f3:64:
3d:af:46:73:5f:9b:83:0a:2d:12:18:5a:18:b5:80:2e:99:34:
96:5e:17:ba:a7:e4:71:fd:26:af:c9:93:2a:db:8e:75:68:dd:
99:e4:f6:03:0f:2b:4e:0b:75:3b:d6:64:26:09:19:ab:5b:fa:
d4:ea:6e:ae:56:6a:fc:48:f3:88:25:c3:df:d6:ae:5a:35:81:
76:81:b6:d5:f5:76:3d:3b:a0:3b:66:b8:5f:f3:4a:68:84:a6:
f0:6f:2b:9d:a2:1a:ba:3d:78:94:ef:69:27:73:32:e7:a2:e6:
48:e2:1b:f0:88:2e:24:ec:80:bb:d0:61:d8:4d:72:27:ac:11:
2b:1d:4b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:18 2025 by rpki-client