Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
File: j20qybaMMnEffof95SNFhPW89PI.mft (raw, json)
Hash identifier: aPAzNOZmxi3rEDFWC7kifiVBHYdbpE3Y7+cRtenLt24=
Subject key identifier: C7:16:1C:1D:A6:32:36:7D:E7:E5:CE:05:84:B6:4B:59:21:E5:3E:40
Authority key identifier: 8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
Certificate issuer: /CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Certificate serial: 019A71B7F79549D8EF308B406F55832A6FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:13 +0000
Manifest this update: Tue 11 Nov 2025 07:01:13 +0000
Manifest next update: Wed 12 Nov 2025 07:01:13 +0000
Files and hashes: 1: dTkxMcCeXxHSlbzmXrq1h_yjEwQ.roa (hash: 6lLAKycVqxafwfSe9RpEl78tE7gClRO25WKnwVEGabY=)
2: j20qybaMMnEffof95SNFhPW89PI.crl (hash: jEwWsBm9J/Z10Xht5qFlHA21qyjVL3JkqPtGIJi8lq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:f7:95:49:d8:ef:30:8b:40:6f:55:83:2a:6f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6d2ac9b68c32711f7e87fde5234584f5bcf4f2
Validity
Not Before: Nov 11 07:01:13 2025 GMT
Not After : Nov 12 07:01:13 2025 GMT
Subject: CN=c7161c1da632367de7e5ce0584b64b5921e53e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:6c:1d:2b:ee:e1:7a:24:03:ee:3f:86:57:
52:04:bb:fd:ca:92:f6:73:7f:80:74:b5:52:c2:f9:
43:3c:6f:da:59:cc:74:2f:f3:a2:ec:f3:04:c0:cd:
ca:9a:05:3b:86:04:1c:a6:fc:9b:8c:61:da:bd:13:
5a:4d:7d:a1:ce:bb:a9:49:c3:b0:75:72:d8:91:e3:
84:21:20:b6:a8:7f:c3:19:93:c1:ed:18:95:b9:31:
20:ff:02:f4:1b:e5:7f:c7:5a:f9:a3:93:b1:74:69:
c6:7c:d6:bd:f8:f5:6a:34:4b:68:de:42:3f:ae:56:
02:8a:b1:c4:f2:1a:d4:71:9d:23:96:96:32:65:96:
d2:47:d9:39:04:8d:5f:1d:05:08:ed:75:ec:14:43:
64:a7:a5:f4:ca:76:29:38:72:38:30:ec:34:c8:2a:
8b:29:87:30:b5:22:db:ea:81:78:b7:2e:d5:ef:a1:
f5:60:4d:c1:66:35:19:63:fc:59:28:1b:b4:0e:b7:
e0:40:5e:8b:c8:70:96:1c:fa:8b:ce:34:3d:da:6f:
fa:88:c3:a7:15:e7:71:fe:6b:f9:ba:10:86:6b:96:
ac:c6:9c:f4:29:9c:04:a0:d1:9b:14:47:d6:77:b2:
56:9d:eb:74:ec:cf:bc:a8:b3:3d:a2:e5:6c:8c:f8:
c2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:16:1C:1D:A6:32:36:7D:E7:E5:CE:05:84:B6:4B:59:21:E5:3E:40
X509v3 Authority Key Identifier:
keyid:8F:6D:2A:C9:B6:8C:32:71:1F:7E:87:FD:E5:23:45:84:F5:BC:F4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j20qybaMMnEffof95SNFhPW89PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/e78ee1-0a2a-46c9-9769-f94f084b1ee7/1/j20qybaMMnEffof95SNFhPW89PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3b:de:16:fc:ad:a9:3a:25:4e:2e:8b:a4:f1:d6:91:76:be:
0a:22:98:77:db:11:76:e4:0d:8b:18:22:f6:65:cd:9d:f9:79:
15:9d:67:30:cc:72:8b:da:9d:a9:a9:67:e7:e2:09:d9:97:d5:
10:3d:0c:3c:32:ff:c8:c1:6f:9a:a8:98:e9:cf:c9:fa:9f:60:
3c:93:20:d6:6e:8a:da:7c:56:0e:bc:42:de:aa:f5:bf:57:30:
9a:12:aa:b4:7f:e7:a2:0a:67:d2:e7:07:15:f4:5e:7b:72:c0:
14:79:40:f7:18:a6:3a:24:84:29:52:fc:72:5c:75:0d:6c:f4:
d6:33:03:0c:4c:7d:3a:5d:d9:1e:87:28:f0:95:ba:cb:98:f7:
b0:06:68:56:fc:8a:e5:ec:57:ec:f2:ab:25:2c:da:bb:09:bd:
a7:7d:a1:38:3c:a6:df:15:f5:c6:71:60:92:37:8f:8e:02:8b:
d7:bb:27:34:55:17:b6:a5:62:da:70:9e:a7:24:eb:09:ab:42:
d8:72:87:53:57:6a:80:09:74:2c:e6:39:73:d4:cc:fc:a2:a0:
c0:14:01:ee:6b:26:7f:38:1e:d0:8a:b9:02:e1:5e:4f:40:b7:
8a:0d:e7:91:19:11:de:3c:1b:7e:c0:e2:6d:e0:2b:74:6a:46:
a4:37:b8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:44 2025 by rpki-client