Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
File: jb7S38YJhwkqB6Dty0arFMv3QxI.mft (raw, json)
Hash identifier: z1NgmienATPf/DmvOeZWHbvjXsSXjSw54xqutXBPDww=
Subject key identifier: E1:B4:C5:DC:D5:ED:44:38:E0:31:1C:51:6E:21:83:2E:40:60:46:48
Authority key identifier: 8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
Certificate issuer: /CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Certificate serial: 019A251C7459A7A6DCF3F363E566CEC44C54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
Manifest number: 1252
Signing time: Mon 27 Oct 2025 10:00:13 +0000
Manifest this update: Mon 27 Oct 2025 10:00:13 +0000
Manifest next update: Tue 28 Oct 2025 10:00:13 +0000
Files and hashes: 1: TJNsPm3cbta4SQWCq5-FtGHmun4.roa (hash: /493UDv5vGkPWe3z6b3+uF0MkKOjrmJEUEa2xUPVozs=)
2: ZZHa3B2vDiatqWBi2tEDKV0gImw.roa (hash: umPrB29FpLkve01nKipglkcLKOaJtGMVXwoyXB3BjP4=)
3: jb7S38YJhwkqB6Dty0arFMv3QxI.crl (hash: jkAM9AYw0SCcLk22CU19MzqJcxBJisdKXky6xMKB8Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:74:59:a7:a6:dc:f3:f3:63:e5:66:ce:c4:4c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dbed2dfc60987092a07a0edcb46ab14cbf74312
Validity
Not Before: Oct 27 10:00:13 2025 GMT
Not After : Oct 28 10:00:13 2025 GMT
Subject: CN=e1b4c5dcd5ed4438e0311c516e21832e40604648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:24:72:9c:a4:71:07:0f:0a:21:04:23:cf:7a:
cd:c2:e8:fb:13:ce:f0:f6:d3:c6:43:d5:85:ab:0a:
98:8c:29:3e:d9:d2:40:8f:3a:22:f9:ab:7e:75:e3:
74:80:a7:9f:fb:0e:b3:48:fc:f8:e5:0c:bf:7c:04:
1d:8f:29:8d:05:f1:6d:51:4f:a9:38:c8:dd:6d:5d:
e8:3e:f0:f5:89:92:f8:99:10:f8:ca:c2:fa:3f:94:
c9:0f:d5:f3:a7:a3:90:06:7a:6e:9b:38:25:94:19:
f0:92:cf:30:ad:19:48:77:55:61:53:df:d8:f0:08:
a5:e3:8d:9a:e6:65:4e:cc:e8:91:63:b4:16:3f:0f:
19:15:b2:08:b2:d2:41:8a:e7:c4:59:76:57:75:e9:
33:3e:35:2b:c3:14:a5:42:50:d0:e5:17:f4:aa:15:
1c:d3:56:8b:30:a1:3f:5c:6c:24:9c:f1:fb:06:8e:
75:c5:8c:64:aa:8f:f8:dc:40:de:41:2d:10:f7:12:
06:c7:77:4e:eb:f5:3c:05:9e:97:69:f1:4c:11:5c:
b9:84:21:07:fb:f4:fa:de:0c:35:80:6d:23:78:93:
2b:74:9f:57:53:77:a5:d6:95:ae:23:dc:92:53:4d:
ab:5b:99:4d:5e:f1:57:ca:d4:bb:e7:0a:43:4f:15:
bf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B4:C5:DC:D5:ED:44:38:E0:31:1C:51:6E:21:83:2E:40:60:46:48
X509v3 Authority Key Identifier:
keyid:8D:BE:D2:DF:C6:09:87:09:2A:07:A0:ED:CB:46:AB:14:CB:F7:43:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jb7S38YJhwkqB6Dty0arFMv3QxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/0cc712-a665-48d7-b3d4-f0f8b0775523/1/jb7S38YJhwkqB6Dty0arFMv3QxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:58:80:2f:e0:45:ba:a1:16:11:09:cc:de:4d:37:e7:41:54:
0a:bf:4d:07:eb:16:bc:f5:ab:be:77:c9:30:9b:52:5c:ca:0b:
80:ba:6c:93:6a:04:38:86:b5:b8:34:3f:ba:eb:dc:2a:94:bf:
cb:e5:ef:df:d5:8e:dd:2e:b4:41:60:52:52:f2:35:4b:6d:be:
7d:36:71:f3:14:d3:74:69:1b:a7:65:6b:16:4e:c4:0a:8c:39:
89:18:ff:73:1a:34:a3:ac:32:b4:03:94:9e:ff:05:2b:f4:35:
f1:a6:57:40:c2:41:09:b0:92:c0:2a:af:9c:92:a9:be:f2:cc:
e2:8b:36:c8:8e:6e:17:4e:bc:cf:3d:b2:e6:8f:f4:06:5b:88:
98:4b:f8:f9:05:4f:cc:61:8d:3d:56:c9:a2:81:35:08:45:d2:
02:db:af:b7:12:b8:35:67:9d:b3:10:79:f2:7a:cf:c3:0e:1c:
a6:6d:8e:22:d6:19:89:8b:f2:50:2d:37:bf:11:88:40:93:21:
6c:28:31:cc:e7:b7:f7:8e:e9:d9:7e:9e:29:68:70:4c:15:1f:
59:73:d7:65:86:4d:f7:87:7e:26:e2:a9:fd:b8:3f:12:50:45:
a3:96:89:7b:be:24:23:bf:3b:fc:44:5e:19:45:46:a5:e1:68:
31:2a:14:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:38 2025 by rpki-client