Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: 3vf/Tw05THfEvSyRekcHIEoO1LtVtbotLhtbltQZg2w=
Subject key identifier: 5A:14:13:C8:FF:D4:34:9B:73:03:42:2F:17:59:47:AB:63:01:9A:42
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 019A70A550104863AC01D26154505E119AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 02:01:13 +0000
Manifest this update: Tue 11 Nov 2025 02:01:13 +0000
Manifest next update: Wed 12 Nov 2025 02:01:13 +0000
Files and hashes: 1: 2yAjk7p-dI9kSCjYCsJZz8pos8c.roa (hash: fOiEsiSjcE44S/scd+A8XElk8QWI1IgEkT2nPRQh9k0=)
2: WgQVJKeVLT_kgntaKcqG82tQ5Ac.roa (hash: 51Ibz0/tlPs1DjPAcM3P0vri4IWZhMdelX47aEpOyXk=)
3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: xTaQet+QTzPSmuMefECx1NnZch+PZ9qhZDiU3DSXvJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:50:10:48:63:ac:01:d2:61:54:50:5e:11:9a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Nov 11 02:01:13 2025 GMT
Not After : Nov 12 02:01:13 2025 GMT
Subject: CN=5a1413c8ffd4349b7303422f175947ab63019a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:ec:fc:92:cc:2f:10:3d:e7:a9:c6:cf:73:
9b:60:01:d3:38:30:86:cf:8c:fb:9d:08:43:3b:f0:
03:0b:9d:f6:65:ee:22:57:c1:43:f1:d7:35:6b:37:
4e:2e:fa:0e:53:22:e5:89:ca:1e:74:63:03:d2:14:
57:aa:65:9a:f1:25:6d:20:ef:9a:49:d1:bf:3d:9b:
3b:55:e6:8d:3e:cc:33:3d:76:2c:93:75:0a:82:4d:
91:27:64:04:00:a2:3c:9a:7c:e8:80:3b:74:8f:8a:
05:3d:d8:91:11:4d:41:c8:01:bd:8e:d5:a8:f3:fd:
6a:c9:b0:4c:8e:3d:9b:b5:5c:f7:9a:9c:c6:db:a3:
d2:84:4f:74:54:f9:72:c7:14:44:95:18:64:5d:2e:
b3:a4:36:58:28:7b:02:af:06:b4:80:6a:7f:6f:6c:
1d:76:64:b6:ec:e4:d8:01:fb:bc:ff:77:14:56:08:
56:cd:38:19:07:b4:14:a8:bc:1e:2f:7b:da:92:c2:
83:64:66:bb:f6:fc:f9:7f:41:cd:2a:5f:1e:b8:af:
f1:de:15:4c:e0:30:57:ae:87:9e:b0:59:45:dd:5b:
55:eb:25:1a:db:31:ac:62:35:4c:ca:33:cc:f6:2e:
f0:6c:63:c3:56:07:b2:bb:76:9e:ec:84:df:b5:b5:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:14:13:C8:FF:D4:34:9B:73:03:42:2F:17:59:47:AB:63:01:9A:42
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d1:c1:55:c8:04:c5:ce:36:ae:5e:52:f0:69:29:08:ab:2f:
fa:16:cd:04:fd:ae:1b:38:6d:92:f1:7e:02:87:f7:9f:16:09:
1b:37:bc:ca:24:5d:5f:d8:44:00:b5:a1:d8:79:14:5f:dc:28:
70:9e:94:d2:d9:2f:05:28:96:8a:49:80:3a:77:67:94:ed:75:
3b:0c:93:82:30:8b:30:b2:8a:ca:d3:9e:49:a8:d8:99:d3:73:
0c:38:bf:a4:e5:84:da:41:e0:e1:ec:2c:2d:db:ef:d5:b1:b6:
66:1d:dc:30:4a:b6:51:56:91:fa:1e:e7:3e:eb:c7:d4:f5:10:
c6:17:03:b2:6d:ea:ea:c1:7d:15:5b:24:4d:89:65:05:9b:81:
cd:34:5e:72:ac:f0:53:60:e5:a5:f3:b1:b9:ca:3b:c0:86:e4:
de:21:5f:b5:fa:d4:13:48:87:75:b7:d3:51:50:77:a7:9e:f5:
c5:59:84:c0:4f:0d:4a:09:05:50:d6:49:86:9d:84:25:d9:06:
fc:83:46:cb:b2:a3:47:4f:00:d2:12:f3:66:e4:6a:dd:56:ed:
05:34:6d:b3:13:c1:72:15:4a:0d:78:49:28:98:7e:65:fd:f5:
1b:47:df:58:cc:e3:20:d0:5a:8b:6f:f7:58:a9:d4:a7:d8:c7:
f6:4c:5c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:24 2025 by rpki-client