Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
File: _jHd7yXZbISwAaKsUEewTgYKCsM.mft (raw, json)
Hash identifier: prj/Co8jyBpGj9JYusEAcoFKihTM5UjpZD+vPwygiPI=
Subject key identifier: 00:E2:66:37:BD:F2:89:DF:03:53:7F:6B:70:A6:65:57:CC:62:D7:67
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 019A7301C184511A5AF34FF6D27B78A5E0ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 13:01:26 +0000
Manifest this update: Tue 11 Nov 2025 13:01:26 +0000
Manifest next update: Wed 12 Nov 2025 13:01:26 +0000
Files and hashes: 1: 8ydVbA0sRc2KQJCu7PF_TgB9YOc.roa (hash: ldViVOYSsfn20bEs9Oqh1Yf20Me7yZtpfiOBMHbpOTM=)
2: F-qMZsrYFuWs3mqxVuy5Uc_QajI.roa (hash: 8P5DrUp/opHUhrTa0qnhwTNZG/EzRMCLBAaUpNYWajY=)
3: _jHd7yXZbISwAaKsUEewTgYKCsM.crl (hash: tp9OGSjhQfIvO2LTD5S26QRuQMcUGI0Hx9gcj/Qs13E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:c1:84:51:1a:5a:f3:4f:f6:d2:7b:78:a5:e0:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Nov 11 13:01:26 2025 GMT
Not After : Nov 12 13:01:26 2025 GMT
Subject: CN=00e26637bdf289df03537f6b70a66557cc62d767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:1d:ea:c5:06:9f:c8:4e:18:bc:95:d3:68:
dc:0f:cc:72:76:96:64:8c:b4:4f:e8:f6:c1:00:85:
4b:7d:59:a7:4c:1e:90:3c:6e:03:d2:80:6b:b8:d3:
36:68:3e:7e:92:f2:62:23:e9:59:c8:27:1c:cc:24:
5d:c5:2f:f0:b0:1b:70:09:7d:8d:09:28:44:cf:0d:
12:d7:54:05:95:e4:76:bd:64:43:d9:e0:4c:e0:93:
2c:d5:d6:3d:a3:c1:0a:70:6a:34:6b:1c:27:05:9a:
83:45:6d:7e:36:82:df:14:48:92:fb:e8:cb:f2:9b:
04:51:5a:8f:bf:c4:2b:04:73:12:76:a6:0a:77:99:
6b:3f:99:08:6e:2a:62:37:48:77:c3:c2:3c:01:ba:
90:d6:88:01:44:2d:eb:1d:42:28:0e:f9:d9:5f:62:
57:28:61:26:ea:98:ab:55:e8:03:50:e2:48:40:02:
f1:07:6c:a6:90:4c:8d:a5:ee:79:f8:42:3e:0a:e4:
99:f5:35:d2:7b:1a:c1:94:2e:8b:73:15:14:16:05:
b2:76:64:5a:20:91:10:4c:b4:e0:c8:be:cb:c3:b2:
5c:a9:7b:9a:24:a2:c1:af:d2:50:88:2e:e7:d4:31:
b9:14:26:58:f3:cb:31:40:4e:a7:7a:ee:38:cf:f3:
4b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E2:66:37:BD:F2:89:DF:03:53:7F:6B:70:A6:65:57:CC:62:D7:67
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e1:e3:dc:37:f0:77:49:f0:5d:c5:85:d9:06:8b:3c:6c:ce:
55:0b:69:1b:45:12:74:82:4f:ef:41:3c:ea:0a:3a:eb:4c:a9:
5f:cf:67:db:20:cd:8f:45:f3:2a:59:02:fb:59:d7:bf:94:8f:
22:9b:5e:26:a4:b3:36:6b:09:66:86:1b:bb:72:39:50:fe:99:
a8:3b:4e:b0:e1:01:a9:98:3b:6d:ce:7f:03:ae:21:55:9d:8a:
06:76:26:9b:a9:4b:1f:47:fe:d3:f7:01:4a:0a:7f:db:db:6b:
b5:80:91:03:3d:e2:32:6c:09:4c:13:0a:bf:f2:98:1c:60:97:
ed:24:56:db:74:c9:78:43:56:9e:2a:f5:5d:da:c4:8d:05:3a:
42:89:2e:f4:2a:bd:ff:c7:13:1a:07:76:4f:03:7b:4b:73:e0:
1e:3e:ab:90:43:50:1e:b1:68:02:02:84:29:08:ac:49:4f:05:
69:3c:da:f5:b7:ee:0c:60:b1:14:55:53:51:c6:08:df:e7:f6:
d9:5e:f4:4d:3d:c4:35:87:b8:ac:51:93:f3:52:58:bb:a4:4a:
31:b2:a6:d6:87:3d:c8:c9:dd:b9:54:74:51:f0:80:3f:00:7b:
b2:3d:5e:ed:e9:f2:6c:ef:44:d8:ea:32:7c:5f:6c:04:d7:9a:
e9:11:02:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:11 2025 by rpki-client