Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json)
Hash identifier: O/g+nrkmipNUxS/kX2GlIc1CoEQmRx7fzubY4ie2nlA=
Subject key identifier: BA:C6:B8:57:2E:88:D1:69:2F:80:ED:98:4B:60:67:82:C3:0B:F1:F0
Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Certificate serial: 019A2854625FD659184D96F1D4FC43AE54E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
Manifest number: 170C
Signing time: Tue 28 Oct 2025 01:00:10 +0000
Manifest this update: Tue 28 Oct 2025 01:00:10 +0000
Manifest next update: Wed 29 Oct 2025 01:00:10 +0000
Files and hashes: 1: 1gqy8jv-V_H7oweUasDl-ECUQ1I.roa (hash: w7kEB0Eg8qOWOT1pz0wZhRGBM4Y+whIgLQrg7qaGMxo=)
2: EHlGqb04iAIbXB5rqXIY0OnBfmY.roa (hash: 81m7h3zrGqKLifk2aQp93enuHjOZTif5bviOShjKwd0=)
3: JwRfQe1RRMFqmouHM8GDCbBv0qg.roa (hash: HeOaGIUlAHS+jA2tQ0PvTXar52BfbpysaRlaXP3EMw8=)
4: OrMUAZWeOYOcLPd3g5LwbkMUXk8.roa (hash: gKkiytrZ0hzX5R/Kg8dR7Gdhl0r2rLxr0t9FK+F8kjA=)
5: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: jd0MCzYbelqoi/9PLmD/cxbs92h2bXulaAiW2eaQf64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 21:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:54:62:5f:d6:59:18:4d:96:f1:d4:fc:43:ae:54:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81
Validity
Not Before: Oct 28 01:00:10 2025 GMT
Not After : Oct 29 01:00:10 2025 GMT
Subject: CN=bac6b8572e88d1692f80ed984b606782c30bf1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a2:4f:8a:9e:1b:fb:a8:4b:a7:33:58:2d:5b:
56:25:ab:1d:a8:21:8b:47:14:5a:90:67:7e:d9:24:
67:89:a0:76:0d:82:e0:60:27:22:ce:b8:57:9a:bf:
b2:0f:c4:3d:7b:72:a4:12:73:a9:f4:7f:02:65:36:
4e:32:66:64:2f:5a:b7:c8:c8:80:d4:95:47:a2:72:
81:f8:47:d4:5c:48:d3:40:49:37:7d:5d:32:50:ed:
cf:a9:1f:21:ea:0d:cf:6c:8d:02:15:d8:58:99:ae:
e5:70:7a:d9:1b:af:50:60:2c:31:57:6b:b4:3f:0a:
b0:d9:9e:c2:67:d4:0e:fa:24:f6:9b:ae:a5:f7:fa:
b8:d3:82:f8:e6:b5:ff:bc:3f:8b:fc:35:22:63:69:
0b:8d:ca:58:a0:4e:5d:ca:4a:11:90:6b:85:88:21:
88:0c:19:26:62:25:6f:40:6d:9b:3d:a5:18:98:b4:
90:e3:fa:1e:23:bc:c7:45:59:ff:e1:50:89:46:2f:
e8:55:6b:40:8f:b3:ad:0c:78:0f:e0:fe:8e:1b:0d:
a9:d3:f2:91:b2:50:2c:b2:bf:85:75:d9:ff:92:ad:
5e:cb:a7:bc:7e:39:81:53:52:2f:65:60:c7:3f:ff:
22:8b:40:33:7b:4f:d4:06:19:7b:c2:8b:a2:3a:a4:
71:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C6:B8:57:2E:88:D1:69:2F:80:ED:98:4B:60:67:82:C3:0B:F1:F0
X509v3 Authority Key Identifier:
keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7c:bb:89:06:28:c7:5b:21:99:aa:85:52:f8:0b:d0:d5:4f:
55:57:7e:8a:6c:e7:1a:06:60:3d:5f:93:11:f1:10:26:22:de:
c5:d6:38:b9:c0:40:b6:06:71:fe:d8:11:40:0b:5f:bc:b6:b7:
d3:93:ff:85:fe:0a:20:a5:9b:25:d0:4d:3d:62:cd:63:42:32:
a6:cf:7d:16:97:f7:fd:1e:92:e9:9b:29:43:54:1b:9a:7b:c6:
d7:32:cd:0e:e3:d2:ac:8d:5d:fa:f2:32:ee:96:bb:a9:0c:24:
2f:19:c7:d6:1b:6d:7e:48:0c:84:f7:2a:13:3e:bb:18:75:6f:
b8:50:5c:39:14:c8:93:fb:c4:c2:e1:65:5c:29:75:e3:9a:57:
90:ec:f8:a3:16:c8:90:35:d2:5f:11:26:6c:56:79:d8:62:0b:
3d:e9:33:46:14:85:ba:71:7c:2c:12:2e:82:5f:f6:2a:19:d9:
80:45:2f:9a:fb:9f:d9:00:ff:9b:80:ac:08:35:96:d0:e9:f4:
0e:3b:46:bd:1f:93:2c:fd:d8:1a:51:40:f7:59:87:9f:11:5c:
c2:e6:55:cd:d5:8e:7a:3a:9d:74:97:70:a6:63:24:43:e4:51:
12:4b:7f:e2:90:06:ad:2a:da:21:c4:4c:c1:77:bd:a5:53:f3:
fe:b5:11:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 03:48:49 2025 by rpki-client