Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
File: jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft (raw, json)
Hash identifier: 18LB/mZcmVJpwHfv1p/2AO0rZf3Uh6LBtm9Xl/Daxlw=
Subject key identifier: 73:A8:86:75:E9:71:E0:46:D8:15:AC:C1:9F:FE:54:80:08:E6:59:AF
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 019A5D1E9BB5A0E5A025FB3A81DF362B454C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
Manifest number: 1718
Signing time: Fri 07 Nov 2025 07:01:18 +0000
Manifest this update: Fri 07 Nov 2025 07:01:18 +0000
Manifest next update: Sat 08 Nov 2025 07:01:18 +0000
Files and hashes: 1: dHwX8PQaURSRhzT9O267zp2eAAU.roa (hash: pQKJANjM+1Peo4ZdiwJW4yKvtPIT0ly/kwXsgNJ+gjU=)
2: jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl (hash: +4Z1lxo29tN9dc/7D1xlWlatVpyqFcaDASadhWDkX4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5d:1e:9b:b5:a0:e5:a0:25:fb:3a:81:df:36:2b:45:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: Nov 7 07:01:18 2025 GMT
Not After : Nov 8 07:01:18 2025 GMT
Subject: CN=73a88675e971e046d815acc19ffe548008e659af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:55:f5:2e:d1:79:0d:f1:96:92:f2:e4:fc:
98:47:67:42:21:55:fb:cd:de:24:22:fc:2e:23:ed:
e2:8b:bd:98:c7:17:87:9a:49:88:b7:7c:f2:8d:4f:
a3:00:23:40:41:74:0f:11:79:f3:48:58:f8:a0:67:
a7:ee:dd:1a:a9:e4:32:72:95:cb:d6:21:51:4d:f2:
11:20:7a:54:4f:14:2a:64:c7:aa:72:f3:5f:d9:97:
93:c6:2a:6f:e4:2f:ff:ca:00:0a:ba:4c:eb:7e:a7:
9e:12:e6:6d:6a:17:ed:70:0a:ff:6a:6f:5e:26:a5:
7f:e1:80:38:ef:90:a3:57:ca:b5:67:ba:77:19:86:
03:dc:7a:e3:80:74:b1:47:e4:07:a5:01:6c:e9:b2:
a4:97:97:98:ea:ab:ee:db:0f:9b:1a:bb:c5:f5:a2:
fd:ef:a8:c3:1e:00:df:53:dd:d5:1a:2e:20:3e:08:
ae:93:f7:5b:45:46:c2:06:b7:d7:a0:9c:f7:db:06:
ee:d4:ac:aa:18:7d:2d:d4:c9:9b:03:fb:3a:dd:2e:
60:bf:bf:10:50:7b:c8:ab:bb:39:8f:99:46:bd:2d:
ab:61:3d:16:fa:02:7a:a1:40:fe:df:73:bc:70:74:
36:c9:f2:a1:f4:ae:e9:47:77:a3:ac:d2:7e:5d:a3:
95:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A8:86:75:E9:71:E0:46:D8:15:AC:C1:9F:FE:54:80:08:E6:59:AF
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:2e:bf:3f:6f:0b:60:85:3b:3b:39:1c:b0:6f:c6:cc:2f:81:
7e:17:b3:c1:e7:78:ee:58:9f:91:a4:94:67:dd:98:c9:53:7c:
5a:ac:ce:75:d1:44:30:2c:81:09:da:86:3e:f1:c2:0b:de:d8:
3d:a1:a0:1e:e9:b7:60:0e:e2:90:23:b7:05:1c:a0:63:2e:fe:
ff:fc:d3:30:bd:59:74:77:82:85:59:57:88:5c:f3:c4:fd:f8:
00:b5:ce:8b:b8:dc:a5:63:3d:86:f0:b2:9e:9e:9d:9b:25:78:
c7:71:e8:df:a3:32:11:01:08:a4:59:b8:f8:69:d1:c7:e4:cc:
b7:0a:f2:67:bf:b6:f0:3d:26:26:78:10:1b:78:24:79:7c:4b:
14:62:b1:4b:9b:e6:bc:29:1b:ff:75:95:2f:1d:32:0f:d4:47:
18:9b:3e:1a:a4:cf:ac:ac:80:07:78:6b:bc:ca:d6:02:d8:e7:
5b:9c:5a:96:5d:bc:93:c7:7e:2b:42:c4:b5:ec:c5:ca:68:8e:
ea:98:05:51:c5:87:48:eb:29:18:32:59:4f:a3:42:5c:00:a5:
b6:9e:18:78:81:54:14:64:5d:8a:fc:16:d6:0a:11:22:cb:e7:
95:07:02:73:89:b6:61:84:25:65:26:04:6e:d8:e5:ca:fa:a0:
1c:84:2e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:08:18 2025 by rpki-client