Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: qEUWhJVCxTFRrWswkHmG/RCYP/IevD/4LoSFBF2ARGs=
Subject key identifier: 95:12:5A:B4:EB:C1:A7:66:D4:FB:39:EF:0A:37:72:D0:44:C5:76:19
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 019A300F7D8145323907D8E0289DDAE560CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 1700
Signing time: Wed 29 Oct 2025 13:01:52 +0000
Manifest this update: Wed 29 Oct 2025 13:01:52 +0000
Manifest next update: Thu 30 Oct 2025 13:01:52 +0000
Files and hashes: 1: Rj6LyhmuYOVWqVkzjLxE3-yzKYI.roa (hash: hnTztba+lIL8dBqmzjJSK96VaZ7aTD4lLM3WLko0IFQ=)
2: XrKKt_JxbNMZGjXoulTmr3xDG5Q.roa (hash: f11YjtJ+XEcEDqhtgknq7hIx2BkA5rt08V/n2Td3MMU=)
3: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: b+STwzcQPLbaqwqcl9WWUp7CZDz/DzEP50sZjYdcLBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:0f:7d:81:45:32:39:07:d8:e0:28:9d:da:e5:60:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Oct 29 13:01:52 2025 GMT
Not After : Oct 30 13:01:52 2025 GMT
Subject: CN=95125ab4ebc1a766d4fb39ef0a3772d044c57619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:78:f7:63:56:14:78:06:5b:87:a4:99:c8:
d7:cb:62:e6:80:46:8b:c2:0a:04:b8:20:c3:20:bd:
50:43:0e:3e:7c:a7:9f:62:af:cc:2f:3d:92:93:b7:
cf:4a:2d:89:54:16:99:66:a9:d9:40:35:32:90:23:
4b:aa:05:62:d9:d4:c0:6d:1b:4b:c3:fa:45:86:46:
49:b3:7b:ae:69:67:41:9a:dd:88:55:27:12:c3:c0:
f8:48:17:41:83:7a:37:36:34:cb:69:80:16:01:56:
9a:48:17:e5:2a:c0:84:bd:4f:4a:05:04:d8:7d:84:
99:dc:31:3d:51:e0:f4:72:98:cf:d9:07:87:91:ef:
35:25:da:92:2a:60:6b:a0:fc:85:71:7e:ea:ab:95:
e6:e5:3c:02:79:19:48:35:43:88:19:34:12:2b:a2:
b7:45:a0:3b:07:65:f7:a0:8d:70:aa:14:ef:0f:be:
c7:da:37:66:dd:ea:1a:e9:f2:2a:09:8b:07:a4:f0:
bb:1e:93:66:b3:75:bd:b8:87:05:23:d6:78:cb:cb:
1d:1a:40:e8:b3:16:d9:01:b7:00:a0:8b:02:99:ba:
f8:89:07:e4:70:67:4c:48:da:6a:de:20:b4:d5:e5:
d4:e0:12:46:de:0b:ee:ee:37:d0:40:76:db:50:0f:
73:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:12:5A:B4:EB:C1:A7:66:D4:FB:39:EF:0A:37:72:D0:44:C5:76:19
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ca:d6:50:dd:f6:8a:c4:a7:4c:c6:9f:aa:af:2c:3c:49:f8:
c2:e8:02:71:05:bb:cf:72:a0:62:ac:60:4e:8c:24:ce:21:a6:
e4:a4:c7:56:0d:ce:76:8f:2b:a5:ec:52:79:5e:ef:06:18:22:
2a:06:9c:d9:d4:be:37:41:ef:da:17:7a:05:3b:54:b1:f8:aa:
c5:6c:91:b1:a4:c2:cc:2d:63:cd:ce:57:08:cf:dd:ff:13:66:
58:c7:fe:26:22:b5:21:f5:81:91:85:83:c3:d5:21:67:78:71:
23:c1:4a:27:a9:dc:2b:6f:e4:fb:3f:e4:e4:7f:97:e0:f9:a2:
f6:d7:1b:84:04:f1:c1:26:88:52:64:6b:1e:88:80:4f:a2:01:
ce:b8:42:97:d4:35:48:d0:b3:77:9c:68:41:45:3f:37:d6:05:
39:4b:e3:4a:9e:af:f3:59:03:c8:2d:64:b0:9d:d3:bc:18:3b:
29:db:c2:31:2a:ad:cd:85:c6:44:be:4e:94:22:0e:7a:27:20:
d5:11:68:be:9f:46:f8:5d:61:55:5e:83:63:e1:9f:cc:85:21:
f3:57:1d:25:4f:38:cf:eb:e6:e9:38:8c:32:c8:d5:0b:f9:13:
b6:f3:b2:08:d7:94:b0:fe:90:0e:aa:26:7e:84:95:c9:ae:55:
df:ba:a6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 16:35:06 2025 by rpki-client