Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
File: jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft (raw, json)
Hash identifier: 2rRF3ZDnz3rBtt6v/unJ7zKOV9X7Ylmcm2gnaAcQdOI=
Subject key identifier: B5:8C:5C:91:41:55:24:27:72:6C:23:84:A5:50:27:74:A2:FE:05:04
Authority key identifier: 8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
Certificate issuer: /CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Certificate serial: 019A72940E3E1667CC73C51AAA1E37A20A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
Manifest number: 0DDE
Signing time: Tue 11 Nov 2025 11:01:36 +0000
Manifest this update: Tue 11 Nov 2025 11:01:36 +0000
Manifest next update: Wed 12 Nov 2025 11:01:36 +0000
Files and hashes: 1: dElkIF-mcLyqREvxtPtBS6fW6DA.roa (hash: iNiAWSZuKBpZfK505SM5gcHkqyqDJqDnkohUerQ9rYc=)
2: jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl (hash: tAf/BZ9IKnryDpwSrWhpPN1TyIh1EzdC0d5TQFMRQBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:0e:3e:16:67:cc:73:c5:1a:aa:1e:37:a2:0a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c81648afc34ce191437516cddc4bf0dcdf47e3b
Validity
Not Before: Nov 11 11:01:36 2025 GMT
Not After : Nov 12 11:01:36 2025 GMT
Subject: CN=b58c5c9141552427726c2384a5502774a2fe0504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9d:e2:b9:db:33:75:15:c6:53:07:68:23:8a:
b5:77:ad:18:71:eb:4e:d1:df:43:3d:11:7f:a6:66:
50:63:20:40:c0:69:b3:ee:eb:0b:b8:5e:e5:18:51:
67:3e:9a:8f:ce:9d:c2:8e:48:a4:48:98:85:5e:c5:
93:8d:01:c6:0e:36:84:19:b2:7d:60:c2:29:0a:d1:
7d:5d:f8:b1:28:01:8c:ca:15:fd:c1:7b:84:6d:d8:
64:5a:79:a8:52:96:df:a7:b8:e9:65:8e:7d:6a:74:
a8:e9:f2:f7:6a:d4:70:14:09:c0:6b:bd:9c:d6:b9:
5d:46:9a:91:45:62:41:c5:24:e0:2b:71:71:87:b0:
12:b8:f2:7d:3b:0a:dd:0b:96:5f:c5:21:64:94:0a:
46:02:4d:86:ba:d6:2a:12:c6:d3:d6:93:f3:d5:28:
d9:06:c3:ec:bc:0c:ed:c7:9e:53:57:57:2f:d2:e6:
c7:c6:ec:94:15:95:cb:c6:c2:7f:f2:0b:4f:24:8d:
4e:f3:87:ac:a7:62:6e:c5:af:dd:b2:0f:c7:62:ee:
43:5a:9f:fb:12:53:12:2a:72:92:c5:15:f6:18:c7:
ac:01:1e:cf:17:97:c6:59:c8:53:29:df:dc:1c:39:
d1:f8:59:e8:f0:6e:ef:d2:1a:2d:4c:35:0a:d8:d0:
84:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8C:5C:91:41:55:24:27:72:6C:23:84:A5:50:27:74:A2:FE:05:04
X509v3 Authority Key Identifier:
keyid:8C:81:64:8A:FC:34:CE:19:14:37:51:6C:DD:C4:BF:0D:CD:F4:7E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIFkivw0zhkUN1Fs3cS_Dc30fjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/e85ad2-d2f1-481d-bfdf-bda534e6f643/1/jIFkivw0zhkUN1Fs3cS_Dc30fjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:6f:0b:89:6b:47:18:84:d5:79:d5:a5:1f:9b:f3:bf:8d:30:
90:6c:5d:0c:05:78:68:a0:5d:a8:df:73:3f:80:d2:a2:c9:62:
c3:70:51:e4:99:08:83:54:72:62:5a:7b:92:da:85:33:32:c8:
58:c0:e7:22:e0:61:82:92:9c:80:64:96:bb:10:7e:cf:a4:61:
f8:3f:48:6b:5c:46:df:73:f2:9b:ba:f4:a7:36:74:39:4d:17:
ce:a9:83:7f:41:12:1d:33:01:99:59:52:09:31:d7:9d:ee:a4:
3f:7e:c0:b1:f3:e5:3a:d5:4a:7e:d6:9d:00:75:1b:1d:96:3f:
1c:b2:d8:aa:6d:3a:f2:31:1b:78:cc:4c:e9:10:d0:3e:69:64:
84:20:97:a4:24:2f:cb:3d:e1:77:fd:1b:23:e5:5d:da:08:a9:
b3:f2:62:f2:71:89:5f:d5:a8:3e:b2:ab:26:16:ba:a9:69:ef:
e2:dc:9d:9c:ce:1e:eb:bc:ec:c7:60:5c:f6:c3:71:4f:5f:34:
ea:84:cd:bc:aa:77:ca:32:d8:25:d8:e1:47:73:03:b1:9d:84:
d9:40:85:8a:9e:20:94:6c:6f:75:af:a4:b8:21:15:81:e2:92:
49:aa:1c:a6:5a:f7:04:18:73:4f:9a:eb:d1:2a:1a:75:32:13:
15:c6:15:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:52 2025 by rpki-client