Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
File: jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json)
Hash identifier: d97ipbFTY3dzKXh1M5PNyktHzF2kGaJEbvb3fIW+Ugg=
Subject key identifier: 30:17:AC:E9:38:26:63:CE:0C:56:41:1C:80:50:8C:0E:E8:76:73:48
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial: 019A21ADCB0C4FA8A1CD7D7A2784A3396E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
Manifest number: 1738
Signing time: Sun 26 Oct 2025 18:00:28 +0000
Manifest this update: Sun 26 Oct 2025 18:00:28 +0000
Manifest next update: Mon 27 Oct 2025 18:00:28 +0000
Files and hashes: 1: 4xDjMGoR5cxZD0TEt45OTNLuzZ4.roa (hash: aWtnbMWrytraTfwmFZQXH9y0uPlTO0CdQ7LWoLXK164=)
2: J8HqZbweBSBfotj9M3AMH0o24CY.roa (hash: KkFoXwUHnXFgQiJUTdylT6bFXV0tnmXRuocNWtuhH7k=)
3: aXs8DBYHqH16kFI25mAmO1bJxx4.roa (hash: d1LoCC9lmf7ZBBsN52kpeKsNgpbykeADMERL6qdd4Bg=)
4: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: dMLYJzwwn5pBIVrw7Qe+58oPJtmueZgqLtvg0SOFOXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:cb:0c:4f:a8:a1:cd:7d:7a:27:84:a3:39:6e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
Validity
Not Before: Oct 26 18:00:28 2025 GMT
Not After : Oct 27 18:00:28 2025 GMT
Subject: CN=3017ace9382663ce0c56411c80508c0ee8767348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:13:df:52:f5:9c:95:98:6c:ba:41:36:05:
7a:54:4b:8a:4d:58:74:92:4f:9a:1f:02:98:97:dc:
b2:29:50:49:73:e0:e8:35:e1:8c:24:6b:9b:2d:e7:
0d:62:b9:27:b6:0b:e9:19:99:00:8b:57:2f:95:ce:
d7:6b:8f:09:e3:b8:02:53:3e:e8:28:e2:23:5d:10:
98:c7:51:6b:7b:69:f9:41:0a:75:e3:99:2d:cf:7b:
46:fb:59:ff:ae:07:04:c7:34:9f:73:71:ac:f5:a4:
b9:9c:74:47:5d:a8:77:23:79:38:47:ad:18:6e:b3:
23:ea:4b:9c:35:fa:cf:05:dd:ae:d1:e1:ee:ff:e9:
1a:3a:f5:be:fa:d4:cf:a0:a9:6f:19:8e:43:e5:e0:
da:4b:ee:36:7d:b5:89:fb:ef:cf:92:e8:68:4f:62:
86:92:f0:be:76:9a:d9:a4:25:24:39:61:8b:49:5b:
99:51:8f:b3:d9:42:ff:aa:2e:3d:6c:46:5b:90:f9:
3e:9f:a0:30:ba:84:4a:18:74:1e:f7:23:40:0e:6a:
ec:4b:7d:da:68:55:0a:0b:ca:a8:12:f1:21:d3:74:
4c:34:39:2f:99:43:2c:c2:c5:5b:d6:ef:9b:b4:42:
c0:d6:9e:e7:18:59:9b:96:b7:69:20:b5:49:42:bf:
30:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:17:AC:E9:38:26:63:CE:0C:56:41:1C:80:50:8C:0E:E8:76:73:48
X509v3 Authority Key Identifier:
keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:f6:0d:24:4f:68:17:8d:10:63:2e:1d:f2:fb:7e:d5:0b:df:
d9:63:ac:7a:48:96:46:f3:b2:e4:de:ff:63:cd:4e:a7:59:5a:
2c:08:3d:50:2c:dc:a1:4d:6a:48:bf:18:67:9c:0a:b3:8d:8d:
53:8b:9b:c2:5f:ce:b7:eb:36:a7:35:c1:a1:b8:97:f5:e9:ff:
b1:a0:a0:32:0c:d0:6c:5e:d2:30:16:cd:3a:c0:d7:bc:94:10:
41:4e:5a:59:26:b5:d8:89:be:5c:78:2c:8f:9f:7a:64:cb:67:
18:fe:84:72:5d:7b:69:57:75:b4:a6:44:cd:9e:bf:42:ca:d0:
1c:8b:6c:5b:f3:1a:e4:d6:bc:c5:8f:de:00:1b:b6:ab:d9:af:
e2:ce:01:67:f1:86:81:e3:41:40:d5:01:fc:6d:1e:4a:4c:30:
c4:6b:6c:bb:fa:2c:b9:36:0e:4a:97:65:40:3e:91:98:d7:d8:
9f:a0:be:06:e8:57:8c:f1:ba:9f:73:64:65:cc:d7:bc:d8:18:
2c:aa:a4:81:0c:b8:4d:cc:cc:4b:63:98:f2:3c:a1:9a:9a:8b:
61:8d:d0:b4:fc:29:32:ba:e1:f4:0b:37:b7:58:43:c7:42:11:
8a:5c:16:78:c8:ec:3e:9b:96:94:1d:24:dd:4d:67:f0:65:19:
7f:80:aa:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 00:25:08 2025 by rpki-client