Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
File: jVdqhq46NTLhCcXN9ymtR4wcaX8.mft (raw, json)
Hash identifier: 9DMzKFKCN5Kegku3g2G2g9oh04MrmCQCTSOgyHxzh/g=
Subject key identifier: D0:DF:90:C2:84:25:B9:88:E0:3D:2A:C5:CC:44:F0:1F:A1:E4:71:16
Authority key identifier: 8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
Certificate issuer: /CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Certificate serial: 019A71EEC584668F9FF2E7A52051E00D299A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
Manifest number: 1438
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: FHdXx9mFGE91HKwW6NlniVutY68.roa (hash: bCfamFt9mTX4NzIQ8vZRhb/+uNTjpTqVv/iTNAFMwHg=)
2: jVdqhq46NTLhCcXN9ymtR4wcaX8.crl (hash: pVcvFbMXvp+UV/FeuNG76fJ2EtbMQ2HZQgCzlIY2/gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c5:84:66:8f:9f:f2:e7:a5:20:51:e0:0d:29:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d576a86ae3a3532e109c5cdf729ad478c1c697f
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=d0df90c28425b988e03d2ac5cc44f01fa1e47116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:1d:79:46:c3:88:00:9f:ad:85:fe:0f:39:
de:da:17:16:75:e4:b4:4b:7b:38:ae:e2:c8:00:91:
a6:f7:e7:d3:33:c2:52:9e:5d:2f:df:23:a7:92:11:
4e:08:57:97:46:43:bb:b5:67:3d:fe:e8:6e:4e:f5:
c1:52:5a:25:2d:db:21:62:ac:76:10:53:2b:52:48:
85:9f:10:d3:da:3a:b1:9d:27:ed:7c:03:f2:42:b5:
41:0f:62:c7:e2:e5:a3:97:b1:ff:7b:63:53:c8:38:
a8:37:00:e4:22:93:ef:3d:9b:4d:33:e0:43:67:b9:
63:3a:aa:1e:5e:4a:2a:6f:19:6a:a8:a7:5e:cd:24:
b1:cb:e3:c8:29:5b:d8:0d:d2:4c:e0:b9:31:51:f5:
47:26:21:99:b6:d4:9a:99:d6:c7:8c:ca:83:91:38:
c6:e3:54:fe:eb:c0:bb:81:bc:51:8b:c4:be:43:66:
9d:87:de:5c:17:3a:88:4e:61:88:fd:ba:6e:45:f4:
72:2c:3d:cf:ef:dc:a7:42:1b:1c:ba:b1:3c:5d:80:
e2:78:1d:ac:be:a8:53:de:f6:7b:09:91:38:a9:54:
f7:42:c7:03:4c:a8:90:ab:c8:1c:3b:15:21:17:6e:
b0:df:a2:d0:51:0a:dd:87:6c:d9:33:0e:b1:36:e6:
e7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DF:90:C2:84:25:B9:88:E0:3D:2A:C5:CC:44:F0:1F:A1:E4:71:16
X509v3 Authority Key Identifier:
keyid:8D:57:6A:86:AE:3A:35:32:E1:09:C5:CD:F7:29:AD:47:8C:1C:69:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVdqhq46NTLhCcXN9ymtR4wcaX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b8648-5e96-4cef-8055-64e729ef302d/1/jVdqhq46NTLhCcXN9ymtR4wcaX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:4c:94:ca:30:ee:bc:8d:95:ad:0c:d5:05:cb:b5:4a:e2:73:
6a:92:2a:a5:e8:a3:63:92:a7:53:5a:00:43:59:00:92:a5:b7:
dd:18:5b:ad:5c:35:6a:6f:ac:30:f0:a0:1f:e8:12:fe:3f:8c:
40:8b:0a:eb:9d:b8:f5:6a:18:a7:22:ad:af:78:75:25:e0:c4:
19:09:69:83:2b:bf:b1:8f:5a:ea:60:06:7b:a1:a3:2c:7b:1c:
70:66:9e:c7:62:d8:c2:f4:8d:b7:ee:22:3f:1c:ec:b3:f4:2b:
4a:99:27:b4:d6:c8:60:74:ee:08:9c:6c:3b:5c:68:0f:5e:bf:
64:b6:09:b6:fc:54:c7:7e:32:7a:cc:ef:bf:5e:1b:b2:76:ab:
12:7b:29:60:2d:ed:c4:d4:89:d4:84:f8:3b:0f:1e:7e:95:b5:
60:cb:be:15:21:5d:67:57:29:6e:cf:70:bb:a5:09:e7:14:17:
db:29:8b:7f:9d:11:db:ea:d4:92:12:d5:7e:a4:f0:3d:34:b2:
8d:82:1b:b1:6f:f3:92:ab:1f:80:13:03:66:48:59:a9:99:90:
23:5d:ad:f4:aa:7c:53:cd:79:2d:39:82:7c:2e:9e:67:d2:24:
fd:27:01:cb:c9:1e:dd:fe:55:1c:37:24:e4:00:ee:41:ae:18:
69:bb:af:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:33 2025 by rpki-client