Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
File: jsH30FMGguG2jjv-WodE7lGtM10.mft (raw, json)
Hash identifier: tr8F8B1yzlWLa+wSwlp6hZx+xZrVRpieVKxTY0K01Uw=
Subject key identifier: 19:97:53:7F:E3:CD:3D:88:7B:E7:58:54:88:0D:FA:A3:19:02:2F:F9
Authority key identifier: 8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
Certificate issuer: /CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Certificate serial: 019A7149B69650D24CC94FCD05B13027E7B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:00:47 +0000
Manifest this update: Tue 11 Nov 2025 05:00:47 +0000
Manifest next update: Wed 12 Nov 2025 05:00:47 +0000
Files and hashes: 1: WqkjigZnCXf1cGoouiwLBsYhyDg.roa (hash: JS3h2BtVCeMAnMIYV0aIQuTD6sVEzA9KQapJj6DBbJg=)
2: jsH30FMGguG2jjv-WodE7lGtM10.crl (hash: FsDirORgyP2Edlry9juYL4htQWqU/VN7jZl/7RNYUPM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b6:96:50:d2:4c:c9:4f:cd:05:b1:30:27:e7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec1f7d0530682e1b68e3bfe5a8744ee51ad335d
Validity
Not Before: Nov 11 05:00:47 2025 GMT
Not After : Nov 12 05:00:47 2025 GMT
Subject: CN=1997537fe3cd3d887be75854880dfaa319022ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:7f:48:e2:65:54:71:13:0a:87:f4:20:74:
4f:d0:db:89:25:59:21:0a:d4:8d:9b:1f:66:87:3c:
27:41:2f:ce:c8:24:da:5c:81:01:6f:1a:6b:57:4b:
80:f5:f9:10:ad:f7:21:a4:e8:4f:52:5b:2d:71:44:
04:9d:84:a7:05:8f:d7:1c:68:0d:7b:56:80:1e:f4:
55:6f:4b:d0:99:ae:ea:4b:c3:73:50:75:5c:a6:be:
33:24:2a:08:03:91:a3:49:e8:c4:d1:b1:d6:ad:75:
4a:3f:a2:3d:73:cb:bd:68:ce:de:ef:91:7e:fd:66:
e5:a5:01:11:ca:73:16:ae:4f:62:7c:d4:66:b1:cb:
07:ad:bf:dc:00:c9:82:03:67:f6:22:76:9e:4b:02:
d9:6f:3c:8f:e7:47:77:8f:22:f9:66:d6:86:e4:ec:
3e:57:5f:16:30:30:b8:34:5f:f3:77:a3:5f:9f:de:
72:1b:1b:9f:01:b5:b4:fe:16:53:32:f4:41:59:b3:
c1:db:c8:db:23:af:83:f0:9e:78:8f:48:88:ea:1a:
8f:db:27:e1:cc:9e:ca:41:15:d1:17:e3:75:03:a2:
17:90:8c:31:37:ae:0f:b2:f0:e7:33:b1:43:9a:6e:
f7:7d:0a:c9:42:92:5b:a5:ec:ec:c1:e6:e5:55:9d:
98:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:97:53:7F:E3:CD:3D:88:7B:E7:58:54:88:0D:FA:A3:19:02:2F:F9
X509v3 Authority Key Identifier:
keyid:8E:C1:F7:D0:53:06:82:E1:B6:8E:3B:FE:5A:87:44:EE:51:AD:33:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsH30FMGguG2jjv-WodE7lGtM10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/918a33-6766-4795-8573-aee698af68b7/1/jsH30FMGguG2jjv-WodE7lGtM10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:8f:bf:0a:08:9d:63:75:be:e0:4b:09:1d:ff:f8:73:53:d1:
0f:6b:f5:04:9b:5c:4e:66:fd:78:aa:68:cf:83:ec:4d:33:ae:
7a:83:68:f9:f6:87:62:01:08:ae:2c:5a:56:8e:dd:f1:52:11:
ae:3e:2d:d9:8b:db:9e:ee:85:f9:05:45:46:24:80:44:b4:f8:
b5:28:55:eb:75:b1:1f:ce:aa:b4:c1:96:b0:39:7e:48:89:9d:
36:cc:11:e2:3d:30:f5:0a:be:08:7a:fc:a2:35:a2:4e:01:d5:
26:48:20:cb:e5:71:ac:ea:27:86:51:81:39:bc:52:4f:c8:23:
27:43:73:28:e0:1d:ea:5c:1d:ae:20:2a:0a:29:0f:ed:4c:c5:
26:a5:2f:24:c9:33:95:d8:93:13:f8:13:7b:71:1e:91:a7:0b:
47:a0:41:17:28:b2:12:b6:22:23:be:6d:2c:a8:ba:5e:02:12:
b1:a1:7b:46:22:1f:45:cb:d5:31:4b:c8:3b:8a:73:c2:16:6a:
0e:0e:7d:c5:61:40:7c:7c:42:5e:e0:59:08:41:df:c4:75:6c:
bf:a4:c1:63:15:d6:8b:b4:f3:b7:53:64:db:ec:9d:95:ff:24:
52:9c:61:5c:f5:ec:48:7b:2c:96:77:f2:5b:d5:26:83:8b:34:
49:d6:a3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:07:15 2025 by rpki-client