Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File: j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier: HnG+1WY+urz2qbTXH3LXhD57h69TTb63Lug+aGunBr8=
Subject key identifier: D6:19:78:DD:5C:A3:BA:12:07:99:24:AE:74:7C:0E:59:42:32:68:F2
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer: /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial: 019A70A510916449DE2C66AD217F651F4B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 02:00:57 +0000
Manifest this update: Tue 11 Nov 2025 02:00:57 +0000
Manifest next update: Wed 12 Nov 2025 02:00:57 +0000
Files and hashes: 1: Y7eKY9L9f9B1QlpP7Px14Uk4KN0.roa (hash: Ti8fjG26nfzvszXNq8D1c3nuNhyRNxvinzWzoAh4fqQ=)
2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: 5pwXZ53+fc8x7w4x5N5WuNmjEej6onHeArCX+31TvIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:10:91:64:49:de:2c:66:ad:21:7f:65:1f:4b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Validity
Not Before: Nov 11 02:00:57 2025 GMT
Not After : Nov 12 02:00:57 2025 GMT
Subject: CN=d61978dd5ca3ba12079924ae747c0e59423268f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:ac:5a:0a:32:fa:26:c2:73:88:00:30:13:
13:34:7e:5e:0d:4b:cd:d9:8f:66:5b:14:e6:82:30:
3a:7c:45:62:83:b5:28:f9:52:98:90:e5:7a:03:08:
99:88:04:5c:ff:4e:51:f7:0e:d5:02:e2:13:5d:3e:
af:20:51:59:5e:bc:52:c7:8c:b4:d8:20:32:de:c6:
41:67:7c:91:19:39:84:b6:58:d7:28:d4:f6:91:17:
a9:57:98:23:67:22:76:75:4f:32:94:bc:33:65:c8:
bd:24:99:3e:76:db:7a:f9:28:c9:67:36:25:2c:4d:
13:a0:fe:7c:a6:0a:00:88:d9:26:1e:7a:a7:e0:d8:
9b:6d:1c:48:e6:1e:a5:d0:64:4b:59:2a:25:b9:ed:
cf:19:16:98:90:a8:53:7c:03:e4:92:aa:8b:08:ed:
2a:19:14:36:38:88:7b:6e:d8:18:28:ae:fb:91:0c:
26:6f:f3:ca:9d:cc:d5:2b:a4:13:a4:37:b9:68:14:
6c:36:d9:73:91:48:c4:e7:79:a1:ba:5e:d6:47:81:
7f:c1:be:c6:55:0f:32:ab:e5:78:95:8c:79:75:6c:
9c:9e:df:24:c9:83:01:68:6a:20:13:fe:b0:64:81:
67:d2:55:0e:7f:cb:89:c9:66:d0:3e:37:38:7d:c2:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:19:78:DD:5C:A3:BA:12:07:99:24:AE:74:7C:0E:59:42:32:68:F2
X509v3 Authority Key Identifier:
keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:55:74:74:78:59:df:d1:a8:fb:03:56:9e:ea:ba:f1:c6:63:
5a:a4:04:42:3f:30:95:ef:9d:a4:56:37:9c:c8:f4:93:f9:4e:
85:56:f6:8d:f4:8c:ff:9e:93:03:a0:d9:e4:e1:58:a7:a9:39:
e4:c3:2d:5e:62:6c:19:b8:10:a8:cf:bd:20:22:1c:5a:71:f3:
f2:c0:5d:a5:61:a0:d3:39:1d:5d:e3:35:93:b0:db:9f:ac:bf:
ad:b9:34:22:9b:80:f8:a8:f7:fd:68:b3:44:93:7b:32:d1:f9:
90:f9:67:5e:33:b8:05:be:27:c0:0b:4f:37:0b:0c:c4:3f:6b:
92:7c:ab:1e:41:0e:f6:b7:03:21:4c:88:3c:97:31:41:0b:39:
48:63:58:42:6d:e0:83:8b:e6:f6:ff:c6:1e:d2:18:a2:b9:ff:
91:fd:ab:43:0e:36:a9:99:0d:28:aa:61:7b:c5:82:ca:95:f7:
c5:89:44:1f:6f:f3:39:5d:8c:14:b9:3c:2f:50:2f:cb:09:92:
7c:89:19:b2:57:4f:69:87:e2:e7:fc:00:37:89:6c:01:bb:8e:
6f:a0:db:48:90:30:f5:72:34:90:74:ba:59:3e:ab:64:35:97:
bb:07:d1:5b:b5:d0:f5:7a:38:1d:63:e1:78:70:11:f8:f2:5e:
ea:3f:4d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:01 2025 by rpki-client