Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
File: x-jZWfHJVkoz8o_kSrYUuPYrABs.mft (raw, json)
Hash identifier: 3DCS+OqgmJ6HE/DP6CK59RmT52gKs6yP2xTyqA9Yxw8=
Subject key identifier: 45:D6:AF:60:C0:48:AC:00:D8:21:87:A1:74:98:9D:FF:E4:E9:F2:10
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial: 019A70A53C00F6D432676CECE3B23A37E2B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 02:01:08 +0000
Manifest this update: Tue 11 Nov 2025 02:01:08 +0000
Manifest next update: Wed 12 Nov 2025 02:01:08 +0000
Files and hashes: 1: 0dZuTVI8Td6vXZ_M7JHFy8X1O5c.roa (hash: F7QdZ0RB8p70yz/o07QNKl2zYYJpUZcQmbMtrrlchjc=)
2: HvzEip9yu7BJ9xjiNMrZ1suP-8Y.roa (hash: CQzBI8KlBsVb85wsnxBXgdOAhqwS8nG5XBQFZs7IhV4=)
3: S-Yjb4eozy3TXfv2IRjmsYO3X3c.roa (hash: 5Sdpus0Ffzh+VbOC9y8nRnaSgxwGysE5TC3V4JwdK/g=)
4: x-jZWfHJVkoz8o_kSrYUuPYrABs.crl (hash: RkFor40xL681bAg6DR5PdDyx5wJpcnBtOT1m0IDONmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:3c:00:f6:d4:32:67:6c:ec:e3:b2:3a:37:e2:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Validity
Not Before: Nov 11 02:01:08 2025 GMT
Not After : Nov 12 02:01:08 2025 GMT
Subject: CN=45d6af60c048ac00d82187a174989dffe4e9f210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3e:55:b5:32:8f:b3:47:a5:d2:94:65:cc:d7:
34:db:6a:a1:46:69:ec:f7:3f:0f:8d:f0:f7:4f:c7:
3d:ce:16:7e:9b:4d:41:08:06:58:10:75:94:4b:32:
e5:3e:6b:32:2b:4f:b1:fe:06:02:cf:8f:43:1c:2f:
23:8d:d7:d7:ed:ff:d2:c6:2c:8b:74:6e:3b:be:63:
fa:cd:fa:fd:d0:ae:bc:46:c2:f1:5d:98:3c:54:4c:
24:ee:bd:1c:ed:1e:a2:e9:d5:80:f6:48:99:5b:32:
3c:68:b9:a0:95:9d:29:04:ad:62:6f:d1:08:ac:83:
73:0b:08:19:94:76:59:de:4a:1b:2e:01:14:2b:61:
ac:16:69:97:05:e3:4d:88:2c:39:fe:21:11:e8:f8:
80:5b:fc:96:c2:09:22:65:bb:c5:d9:8f:6d:7c:ba:
0c:02:cd:01:d2:67:cd:d3:08:cc:23:af:26:13:8d:
92:ff:cc:aa:4b:90:81:94:bf:25:e9:4a:1a:42:fb:
f0:70:78:4b:fc:5f:6e:7f:57:87:4a:43:5a:0c:ba:
5d:62:2c:7a:38:70:23:39:15:9e:04:b0:fa:84:a7:
9c:58:a6:19:65:93:94:a5:85:92:0d:b1:14:c4:46:
d8:e5:d2:64:de:81:b0:0f:6f:4b:c3:8d:1d:7f:d7:
af:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D6:AF:60:C0:48:AC:00:D8:21:87:A1:74:98:9D:FF:E4:E9:F2:10
X509v3 Authority Key Identifier:
keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:dc:63:be:ea:ee:79:b0:bd:d1:da:48:2d:21:6a:82:6d:09:
9f:31:e4:fd:ab:51:e0:e1:69:18:1e:1e:12:06:72:cc:f2:68:
2d:9a:e3:a0:bb:94:28:f9:6f:03:e3:e0:ba:e6:e1:0b:a1:2e:
95:26:c7:e9:6c:00:27:35:dc:44:a8:8b:bc:ff:00:4f:a5:3e:
85:86:fb:ce:96:23:12:a9:e6:2a:20:04:09:df:e2:4f:73:ab:
54:2e:6a:10:c1:d9:2f:cc:30:d1:0d:fc:ae:3e:9b:6c:24:d3:
e8:09:1b:dd:5a:a5:c3:54:3c:ba:56:c0:7f:3d:32:77:50:e9:
8f:7b:2b:cc:19:42:2c:4e:6a:3f:7b:b2:5b:b0:f4:a9:20:6d:
e4:2e:fe:c3:d2:56:b6:5c:df:4c:ad:52:3e:dd:7a:bb:7d:fd:
ef:4b:06:fa:4e:73:00:10:d7:8c:0e:85:0b:fa:2f:7a:94:c7:
98:d3:6a:5a:e0:31:fa:3c:02:5d:b9:cb:2e:8b:04:c7:6f:f8:
1a:9f:99:73:52:40:ff:36:cc:84:fb:99:7b:37:c6:e2:1a:39:
f5:f6:d4:dd:42:eb:f1:46:02:7a:9b:77:cb:41:b8:d1:0c:0a:
3b:d8:72:01:f8:13:bb:28:9a:09:42:d0:4c:32:6b:31:4b:87:
0b:69:b4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:42 2025 by rpki-client