Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
File: j5D2t16RPyeC7VSetyFyxZzEevE.mft (raw, json)
Hash identifier: kayLMJASqNVLbQLtKYpUnlnARwckNffciaGCNI6ijw8=
Subject key identifier: 2D:D4:E0:E9:F0:31:8D:E8:B7:8B:B7:48:36:81:2B:AA:5E:AA:E4:C7
Authority key identifier: 8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
Certificate issuer: /CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Certificate serial: 019A71EEA1CFD8BC4F0A611A858B684E99FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 08:00:55 +0000
Manifest this update: Tue 11 Nov 2025 08:00:55 +0000
Manifest next update: Wed 12 Nov 2025 08:00:55 +0000
Files and hashes: 1: iyPNjwJabCXXK6p6-uFNI9tlBmA.roa (hash: gNpFReUeQCJp2ONtKUvB3iNXDc2qvV1lA6rnPgigdyw=)
2: j5D2t16RPyeC7VSetyFyxZzEevE.crl (hash: yA2W4OAdJ63K0PMcoJ4M00qcv+JpAdSYV9RFERIn8k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a1:cf:d8:bc:4f:0a:61:1a:85:8b:68:4e:99:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f90f6b75e913f2782ed549eb72172c59cc47af1
Validity
Not Before: Nov 11 08:00:55 2025 GMT
Not After : Nov 12 08:00:55 2025 GMT
Subject: CN=2dd4e0e9f0318de8b78bb74836812baa5eaae4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3a:a9:d6:e5:9e:1a:d6:fa:47:e6:56:a8:93:
89:75:29:77:b8:81:d3:46:97:94:46:ff:dd:73:19:
e2:08:7e:cb:c5:a3:38:1a:50:90:49:7a:ad:a2:b5:
a9:df:2e:6d:13:33:6c:1b:1b:51:74:31:9b:93:15:
bc:91:d5:5a:4c:f0:4d:12:d2:24:6f:6b:f9:d6:2f:
1c:fe:11:8c:05:c9:79:89:2d:1d:ae:7d:b1:29:a1:
20:89:5f:39:f3:1b:72:84:cb:c0:a5:5d:49:c7:be:
11:75:4c:cb:02:d9:c5:35:16:dc:61:78:75:7f:36:
1e:5a:eb:c5:c6:7a:a3:84:ae:34:18:31:66:58:c9:
66:60:09:96:82:f8:3a:1b:89:3c:19:6a:8a:bf:3b:
08:45:83:fb:fe:a8:16:02:2f:ad:9a:1b:34:a2:33:
42:4f:c0:51:b3:8a:73:20:57:64:e0:a3:b3:72:73:
20:69:0a:83:21:c2:ca:65:00:81:64:8f:92:e4:22:
5e:23:0a:76:00:64:e5:2a:3f:b1:b2:6c:dd:8d:75:
79:4c:c6:61:af:c2:46:d0:b7:26:09:44:f7:c8:97:
7e:fa:a3:51:3d:17:c7:6b:3b:d8:4c:3d:21:ef:61:
e3:21:cc:1e:23:6c:b8:ec:e2:fd:84:ad:25:77:f1:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D4:E0:E9:F0:31:8D:E8:B7:8B:B7:48:36:81:2B:AA:5E:AA:E4:C7
X509v3 Authority Key Identifier:
keyid:8F:90:F6:B7:5E:91:3F:27:82:ED:54:9E:B7:21:72:C5:9C:C4:7A:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5D2t16RPyeC7VSetyFyxZzEevE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3d3c3b-1a95-4b50-8974-c1d0acb7819a/1/j5D2t16RPyeC7VSetyFyxZzEevE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0e:b5:41:dc:0d:ca:03:76:9c:df:b4:2b:68:76:de:30:5a:
21:df:9a:ad:ed:11:a0:0a:b4:16:3a:52:d5:14:8a:fb:cf:3e:
64:9c:ec:94:15:45:07:53:94:2c:7a:71:cd:84:bb:fb:6e:d5:
70:ca:bc:ea:87:ae:ed:fa:58:c4:f1:5d:62:2d:e7:1d:8f:80:
40:ab:2e:e3:54:12:f9:ea:49:9a:9d:ff:d3:a5:58:a4:1f:e4:
62:22:0e:51:fa:33:a1:57:13:42:bd:1b:a9:17:28:db:01:2b:
38:b4:89:dd:47:03:11:d8:dc:7f:27:99:37:53:f7:14:b8:93:
38:35:cc:17:bc:a5:db:85:7f:f7:bc:24:1c:a2:99:52:6f:c1:
d1:15:e5:40:66:29:fc:ad:90:e2:ed:0d:ad:7b:e9:17:00:6f:
e7:87:01:39:cd:d9:d5:0d:af:b0:83:af:9c:90:7f:9f:0f:47:
e8:0f:1a:ab:ff:19:84:7f:74:fe:e3:d5:e1:6c:6b:53:cd:60:
84:8b:f4:2a:96:2c:40:31:7f:20:90:f0:63:5d:06:ac:57:85:
2c:81:98:74:15:6f:0c:eb:f1:2c:fa:eb:ea:40:84:58:5d:4b:
dd:6a:4c:8f:e0:f4:98:31:b2:9a:8c:dd:24:d6:46:db:dc:fc:
4a:54:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:33 2025 by rpki-client