Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
File: j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft (raw, json)
Hash identifier: tHJYA0Xm9IQAJM3frABUnszn+qxTlnq2jjDcEnb2qnk=
Subject key identifier: 0D:38:6C:BC:D4:B3:AB:D0:DA:92:4E:06:BB:8B:81:F3:75:7F:73:6F
Authority key identifier: 8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
Certificate issuer: /CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Certificate serial: 019A72CA4A3770E0165A84D28E5411F43199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 12:00:51 +0000
Manifest this update: Tue 11 Nov 2025 12:00:51 +0000
Manifest next update: Wed 12 Nov 2025 12:00:51 +0000
Files and hashes: 1: 10WRObO3tmaDpYMoBfmVIGzlnrU.roa (hash: n66l+JhsIf8xYrrxl7QWiJVsW0qqjRpUm2OsP46Hyms=)
2: j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl (hash: JUVxajTT5WmNUe8Vl+X9hLdLJP6VzTlJ2/7ugxqy+1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:4a:37:70:e0:16:5a:84:d2:8e:54:11:f4:31:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Validity
Not Before: Nov 11 12:00:51 2025 GMT
Not After : Nov 12 12:00:51 2025 GMT
Subject: CN=0d386cbcd4b3abd0da924e06bb8b81f3757f736f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d4:97:df:da:f2:7f:8d:38:a4:86:23:55:49:
c2:a9:79:14:88:a8:2b:86:d8:f5:75:f0:f8:2a:1c:
f6:63:ea:f0:e4:3a:a2:a1:e6:7e:c8:6b:45:1d:ff:
77:07:7c:31:d0:79:48:40:d0:b2:36:b1:48:10:7d:
b0:22:bc:73:60:c5:80:7e:da:65:ac:37:2e:9b:f1:
2a:e8:c5:9e:25:1c:d0:50:05:fa:cf:5e:05:61:21:
3c:31:93:d0:19:1a:c4:ec:7b:f7:22:d0:66:49:8e:
d6:59:47:1f:81:92:d1:cd:86:cb:cf:1f:81:fb:1e:
d4:0f:a7:9d:af:a5:72:28:41:eb:ab:49:3d:45:6e:
d5:20:13:8a:15:9a:26:f1:df:f5:a6:1e:2b:91:70:
39:5a:f1:40:8f:9e:6b:c3:99:c3:90:a8:d8:df:6b:
0d:25:f3:1d:5c:32:ee:34:fa:bf:10:2c:a3:ba:9c:
43:75:2f:8f:f8:5f:51:c4:c3:fa:aa:5d:71:22:f4:
02:80:6d:77:28:e8:aa:06:dc:f0:96:49:d1:98:93:
37:55:2e:0d:66:9e:08:08:a0:b3:ff:c9:75:e5:8c:
82:62:7c:b8:53:a8:4a:0f:f0:6e:e8:04:51:74:13:
14:31:8a:ed:0a:b4:cd:54:56:e2:2c:6c:5f:e3:67:
35:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:38:6C:BC:D4:B3:AB:D0:DA:92:4E:06:BB:8B:81:F3:75:7F:73:6F
X509v3 Authority Key Identifier:
keyid:8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fd:72:5b:2f:10:e3:1e:10:79:07:04:86:33:b1:f2:88:b5:
4b:e5:ff:6d:68:b5:c0:d5:0b:ae:a0:69:cd:69:96:45:44:af:
a4:7d:00:d6:45:5a:8e:a2:4a:1f:e7:19:0e:44:ed:10:23:5a:
d5:be:2e:87:c9:cb:f9:a8:48:5d:7f:89:0d:52:53:e6:4c:9a:
52:32:e6:44:d3:e9:e3:79:f8:35:48:2c:50:d9:58:2e:27:d5:
44:24:12:19:7d:bd:1f:83:cc:a1:df:e8:da:0f:33:ef:c4:ac:
da:07:ed:04:dc:b7:6b:a2:34:d8:ed:06:86:10:c5:18:e7:1c:
3d:6f:e8:22:32:a8:ff:55:6e:8d:78:fe:07:55:e6:14:61:c8:
34:6d:06:ef:da:ba:74:d5:9b:78:f2:e9:8f:a7:5b:99:d0:9c:
25:25:51:8e:b1:6c:53:4a:69:54:aa:b8:14:f1:97:26:c2:ab:
20:89:d5:c1:e9:10:2d:78:d2:ce:94:28:6f:9f:df:0b:d1:9e:
90:11:ae:d1:d1:19:cc:c1:b3:de:d5:e6:78:1e:2b:3f:37:b1:
de:d9:8d:0b:25:03:a6:13:42:aa:e4:d1:49:53:9a:ae:90:3a:
6d:32:bf:a0:e9:ca:2f:42:d2:db:5f:2c:c1:1f:4e:6f:75:74:
b6:f3:ad:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:42 2025 by rpki-client