Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
File: j-Arfu3_w4q16rRBYXLn2I6a0eI.mft (raw, json)
Hash identifier: WN7zLn+Qh6tgtg/zs5w8fIBtL/uEMKtrrT1Bj0SNfOU=
Subject key identifier: FA:7B:D3:8A:D0:38:29:C0:DB:4A:9E:B1:FD:60:51:0A:D7:D4:22:8F
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 019A7149EFDB49F6287126C3183340114373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
Manifest number: 1107
Signing time: Tue 11 Nov 2025 05:01:02 +0000
Manifest this update: Tue 11 Nov 2025 05:01:02 +0000
Manifest next update: Wed 12 Nov 2025 05:01:02 +0000
Files and hashes: 1: 2oXhmPmJrKT6T-roBJE29dyf8hU.roa (hash: k+a97zn87AfkOaB22DmhsTeTkt/L2YZttGTGllHrraQ=)
2: 6WP5y_QknC9iDxd6UTK4gFwVsMI.roa (hash: TTYzypwej/xXrBw/bod0A6cWitM+AquDVWckZccyLEA=)
3: P8awl1-FBznnzvpNTr4DRMiIS0I.roa (hash: 7oxXLgK4HMZatOjJ+KQ+qVSvO3gc/0/goIBoaIA0uAQ=)
4: j-Arfu3_w4q16rRBYXLn2I6a0eI.crl (hash: 36TAKwPFwr+FkzWdixjocnnUHdgHjuTZHVs+4GbcJhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ef:db:49:f6:28:71:26:c3:18:33:40:11:43:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Nov 11 05:01:02 2025 GMT
Not After : Nov 12 05:01:02 2025 GMT
Subject: CN=fa7bd38ad03829c0db4a9eb1fd60510ad7d4228f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7e:50:e9:1c:f7:d4:0b:fd:1b:45:48:96:cd:
e1:cc:26:1b:9e:de:9f:5c:da:e3:6c:0e:4b:c8:ce:
68:ae:a4:8d:68:3a:7b:25:95:93:d4:4b:ba:93:e6:
d1:f9:e7:04:a3:97:27:8c:5e:7e:87:03:2f:3d:84:
26:2d:ac:cc:af:f8:aa:c3:04:ea:fe:07:ee:c4:7f:
ab:4e:b2:7a:70:57:f3:6c:68:0f:ea:6c:14:8b:fe:
98:16:12:05:02:34:f1:9c:f9:85:77:a7:92:24:44:
cd:50:d2:d2:da:67:5d:23:17:07:db:45:f7:44:39:
9b:c9:72:7b:1f:4f:8f:d0:33:e6:11:8f:62:e1:ff:
50:d9:2b:99:e2:be:e9:e6:b0:4a:b4:c3:13:c2:12:
95:11:af:a6:b6:31:e5:3c:34:86:e8:01:0b:2b:ee:
20:16:c1:38:ec:f1:5b:e1:b0:1f:c7:55:3a:9e:59:
58:56:c3:60:c9:62:ea:f6:a2:3d:d6:46:e7:6c:25:
8a:8f:6a:3a:ef:ff:19:fe:58:6f:10:cb:4d:61:2b:
12:4e:0c:2e:03:64:c8:26:fc:c3:02:dd:4f:2b:b3:
65:ba:27:ad:43:78:e6:a4:7b:3f:c9:6e:ec:e9:a7:
2a:ce:e0:e7:f7:ae:80:e9:e2:ee:f6:69:ab:7c:8f:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7B:D3:8A:D0:38:29:C0:DB:4A:9E:B1:FD:60:51:0A:D7:D4:22:8F
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:ed:1c:fc:36:b7:3f:3e:e6:38:3f:13:cd:bd:84:07:ce:01:
8b:03:fe:af:0e:74:fd:b0:eb:fd:e7:66:d8:8a:ca:d6:1b:c2:
9d:77:5d:df:96:77:0e:db:9c:b1:b1:db:b3:74:a1:eb:c1:df:
bd:61:0c:7e:86:be:bd:1d:01:07:45:7a:e7:4e:0c:4f:a7:1a:
91:02:dd:35:9b:c1:cb:7b:4c:a2:69:58:09:50:ca:43:d7:7b:
b4:79:83:24:8d:78:5a:9e:e0:7c:54:b4:74:61:5a:a0:db:69:
9a:ed:2a:b5:c2:71:bf:ed:9a:a2:99:66:ba:4f:aa:19:29:f3:
92:8b:2e:bc:ca:ff:2b:08:71:f4:cd:4e:ae:6e:36:f5:f0:d4:
2d:16:51:6f:bb:cb:de:be:43:b1:62:84:ad:ce:d2:09:4f:69:
62:1f:6c:41:03:19:8d:e0:fc:d4:5d:32:43:22:92:a0:1e:f2:
5d:b2:c1:d0:11:9c:4d:c2:4a:b6:e4:b9:bd:8c:81:da:ed:26:
41:85:bd:0c:9e:d3:3f:6a:3e:99:5b:28:76:ef:94:94:20:73:
9b:e7:18:0b:50:36:f2:10:43:3d:84:cb:dc:6f:00:03:a1:90:
1d:40:8f:92:44:16:10:58:d2:fa:2c:64:23:72:38:8c:f1:12:
dc:dc:12:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:28:14 2025 by rpki-client