Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
File: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft (raw, json)
Hash identifier: 4OpUT5PW2YaTczX8v7jDCs6TVlt0NwD9oqh1nu7X90k=
Subject key identifier: A2:63:FB:10:B6:FB:DD:98:55:4A:5F:31:E8:E6:1C:71:9A:12:7B:E2
Authority key identifier: 8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
Certificate issuer: /CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Certificate serial: 019A7225EAAAAAB57626BB2E5ECDA00FFEF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: 7jEmnnvVVJelmr8qrjn50rWFOcw.roa (hash: EchIPXfoij0iDBazd31BWfFW6DqbRboeZNJcaicEn4E=)
2: aRZdBae0vWh1J6sn44sYIdyVlG8.roa (hash: w9fqOKBIoaM9G2/C9dOdVNyy6b2w4OHx2wQuYWhSANs=)
3: jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl (hash: GmQYPpJzOPPyp78RiKKi/F9VPCp5rvRou8cE3yXULIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ea:aa:aa:b5:76:26:bb:2e:5e:cd:a0:0f:fe:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd52439cac2719b64e85b26ff0ea8468d57960e
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=a263fb10b6fbdd98554a5f31e8e61c719a127be2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:fb:fe:33:74:e6:7a:b6:a4:df:b9:2a:8d:
d8:14:3a:6a:45:bf:ca:ef:39:61:2a:2e:1b:e8:b8:
a5:b6:bf:b4:8e:fb:1e:62:a8:90:0b:90:44:85:f9:
b4:ec:49:10:b4:7f:25:a6:ec:9d:f0:7d:89:cb:18:
cf:7e:39:e1:9f:f3:84:ab:4d:f2:c8:a5:89:6b:04:
0b:b5:9c:6b:bb:24:52:60:0f:33:88:5c:ca:2a:f1:
08:48:02:2b:b3:c2:1b:45:f5:dd:f5:f6:59:46:a7:
f7:d9:47:7b:ea:59:2c:cd:13:fb:1e:77:85:e1:74:
5f:8e:b3:f5:36:ea:8c:dc:82:7f:10:ab:23:d8:80:
4e:ce:bd:f2:2b:be:94:07:7f:76:7d:3f:e6:d0:84:
d3:7b:71:c3:25:2c:9f:8b:09:e1:5f:0b:e7:64:72:
9f:45:69:e2:60:f4:99:a5:0e:f9:1c:cc:e2:b1:ba:
01:bb:a8:62:8b:11:e4:a4:35:92:d8:e4:3b:e6:67:
0a:61:d4:19:5a:2e:0d:b7:0b:21:87:84:e7:67:79:
39:b2:f2:c3:c3:2e:13:0a:c6:77:d3:f5:e9:92:93:
ac:ff:58:a0:27:32:cd:bd:86:00:95:67:10:c4:7e:
58:17:97:4b:5c:6b:e3:c6:68:7f:16:1e:4c:a3:02:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:63:FB:10:B6:FB:DD:98:55:4A:5F:31:E8:E6:1C:71:9A:12:7B:E2
X509v3 Authority Key Identifier:
keyid:8C:D5:24:39:CA:C2:71:9B:64:E8:5B:26:FF:0E:A8:46:8D:57:96:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cd3711-7084-4b15-bc25-3e4a026df000/1/jNUkOcrCcZtk6Fsm_w6oRo1Xlg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c2:dc:ab:00:f1:4a:09:3f:6d:e0:f5:cb:a4:93:71:2c:16:
ab:99:1d:17:aa:8e:83:21:da:ed:37:d8:ce:8d:14:ec:86:f1:
8f:92:53:ff:f2:e3:94:28:3c:a2:f4:30:0b:59:4a:fd:5b:55:
d5:5f:67:64:f1:51:96:85:fa:58:9e:4b:87:d6:b2:47:77:4c:
05:9a:68:98:d1:36:54:2e:44:53:c0:25:bd:15:c1:39:ae:bf:
4e:84:74:ff:18:2c:01:bf:87:62:67:ea:b6:9c:32:a1:a8:46:
17:81:5e:0b:35:fd:32:f4:0b:c9:ff:72:0d:31:0b:fe:e5:34:
0d:eb:56:11:e2:91:8e:7c:0c:bb:f3:36:7b:99:65:bc:26:f6:
e3:6d:8d:fa:7a:32:d1:c3:ed:24:41:4b:36:8e:28:8c:24:b9:
c4:2e:7d:4d:2b:92:8e:3c:e5:ac:b5:d2:c3:e8:90:31:7c:e0:
4a:4d:2c:3b:bf:7a:05:ad:2c:4c:ce:24:03:7d:6e:92:94:da:
15:af:00:c5:91:b6:bb:80:32:7a:25:36:23:7e:ba:ee:66:36:
e0:47:c1:f2:19:01:ba:81:5e:8e:e0:21:ba:df:e9:7a:f9:37:
61:ea:b2:c9:c1:c8:33:8f:4f:53:b1:8d:e0:d9:e0:c2:a6:a7:
4a:c1:84:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:49 2025 by rpki-client