Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
File: jn3H8pi7d0pybtxDPPawOZQUi1Q.mft (raw, json)
Hash identifier: MvAB89NfR0/zwONZn250Ni2tVAjFpghMYpEu9ipKQ/0=
Subject key identifier: CB:A0:13:C1:23:38:9B:F8:21:2D:CF:76:16:E8:E9:51:50:31:E8:46
Authority key identifier: 8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
Certificate issuer: /CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Certificate serial: 019A725C6C4FFC71E24E46F4884494653755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 10:00:50 +0000
Manifest this update: Tue 11 Nov 2025 10:00:50 +0000
Manifest next update: Wed 12 Nov 2025 10:00:50 +0000
Files and hashes: 1: FA2rdoTSXTpaNGTDT0aW6V9L25M.roa (hash: kkZFYMyw4KlTxS4PayeQH7gSgukCRNxFXWHYmYwHPJM=)
2: jn3H8pi7d0pybtxDPPawOZQUi1Q.crl (hash: 2xSSPT1A5xpCeNeyeI6xTQ7C5lzmXu96eEHHorOTPcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:6c:4f:fc:71:e2:4e:46:f4:88:44:94:65:37:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7dc7f298bb774a726edc433cf6b03994148b54
Validity
Not Before: Nov 11 10:00:50 2025 GMT
Not After : Nov 12 10:00:50 2025 GMT
Subject: CN=cba013c123389bf8212dcf7616e8e9515031e846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:1c:54:93:f2:19:62:5b:c6:8f:05:9a:0e:
cf:59:3a:56:51:c6:5f:48:d8:7d:c1:b1:f6:75:53:
39:13:90:d8:e8:a3:70:60:5e:33:53:5a:92:78:14:
23:7b:1e:74:c9:95:c5:5b:ff:de:03:2e:f0:8f:d0:
bf:52:11:da:0f:1c:f8:46:2c:b9:69:ec:aa:b9:67:
8f:82:c0:e1:8c:e3:45:22:d0:c9:9f:c8:a7:34:a5:
fa:cf:46:11:e7:1c:10:cf:6b:a6:ee:79:c5:64:7c:
9e:58:e9:b3:94:f0:0b:ba:06:ee:65:6e:35:93:79:
f2:a7:ec:8b:01:08:58:0e:c5:2e:8d:06:60:4b:80:
1e:1b:80:ee:15:a7:6c:41:5e:82:5b:57:7f:87:4e:
d9:93:fb:27:16:dc:c4:dc:ca:2a:04:4e:b7:70:8a:
04:d8:26:2a:ac:5a:38:96:02:fd:cd:f2:10:40:49:
b9:2d:c9:0e:cb:b0:81:c9:bd:07:e8:d9:d5:84:52:
72:f0:0a:36:47:7c:e1:84:9e:4c:4e:5b:ab:85:50:
ad:fa:93:c1:19:12:d8:00:d9:b9:88:b0:24:9a:c7:
39:c5:5f:2e:93:de:e9:52:3d:d7:fc:54:75:6c:aa:
4e:1d:cb:0d:84:c2:88:84:d2:9b:21:bd:ed:c6:fc:
6d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A0:13:C1:23:38:9B:F8:21:2D:CF:76:16:E8:E9:51:50:31:E8:46
X509v3 Authority Key Identifier:
keyid:8E:7D:C7:F2:98:BB:77:4A:72:6E:DC:43:3C:F6:B0:39:94:14:8B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn3H8pi7d0pybtxDPPawOZQUi1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/20ee43-0462-4822-845f-9c76a4bdb523/1/jn3H8pi7d0pybtxDPPawOZQUi1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:78:8a:79:50:10:c0:7f:45:71:60:05:9a:f0:cd:93:3a:43:
b9:93:9b:02:30:79:8c:3c:35:d9:dc:f5:ef:c7:14:89:b7:0a:
32:01:8f:b3:5a:ae:5a:7c:a1:7d:b7:b7:8b:7b:bd:9e:10:9d:
aa:6a:6a:da:36:6f:fd:41:c4:62:40:09:09:b8:e2:22:8a:3e:
d7:83:40:18:1d:cc:ec:3f:e0:81:cb:bf:76:48:12:25:c6:1b:
f8:30:dd:8b:c4:ae:20:87:4d:2a:83:3b:a6:a0:f8:b8:17:67:
e5:af:b3:45:fa:7b:65:d7:a4:03:68:38:26:68:ab:a5:28:b8:
6c:41:bc:b6:06:7c:23:3b:3c:81:f7:49:47:c1:ae:f6:28:28:
7a:59:45:eb:19:ec:d0:5e:4b:e2:f3:76:55:a7:6e:1a:4b:92:
84:78:53:07:01:4b:4b:e6:ca:98:16:49:d8:f9:13:f8:43:8d:
4e:c1:5f:0b:b3:62:ea:0d:8f:ae:12:96:af:3c:7e:d1:f6:f8:
a7:83:c2:21:2e:9a:22:9d:75:3f:8a:8a:ae:ae:31:f6:c8:3c:
a0:db:75:4a:10:7f:62:17:6c:de:f5:1f:c3:a6:c9:70:b8:dd:
95:70:5b:3d:a9:de:c7:85:19:72:a2:0e:f2:9d:b8:2b:c6:81:
d8:90:fd:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:13 2025 by rpki-client