Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
File: jU8_i6fc9YlPL2Edffq1PUpjwKk.mft (raw, json)
Hash identifier: Os5LsAaCO4kHZeGN4r0ppp/zUu20yklpj9wKaSWVWCE=
Subject key identifier: F3:C0:D5:4D:CD:77:A4:15:3E:8C:3C:E4:EB:18:EE:CE:D8:B7:5F:24
Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Certificate serial: 019A71133ABD13998C1E54AB90B294609119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
Manifest number: 145E
Signing time: Tue 11 Nov 2025 04:01:16 +0000
Manifest this update: Tue 11 Nov 2025 04:01:16 +0000
Manifest next update: Wed 12 Nov 2025 04:01:16 +0000
Files and hashes: 1: CGfUbuDeRkllwMZF7DTrKk3yLcE.roa (hash: l5jsvO9CwwUl92v3ODW6ImGh3DZFw7mx9nyyajWFi54=)
2: jU8_i6fc9YlPL2Edffq1PUpjwKk.crl (hash: oQ65NpnmjW73I3Lww53Ez3Y6wniDtw4P8Wp4KWYw+xE=)
3: mW-GeUTpPcmN505mq7SBylbmL1k.roa (hash: EwfFRwG/wTzHhkN3Xr0yb1fHBsnFoko8PwS4OTwxOW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:3a:bd:13:99:8c:1e:54:ab:90:b2:94:60:91:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9
Validity
Not Before: Nov 11 04:01:16 2025 GMT
Not After : Nov 12 04:01:16 2025 GMT
Subject: CN=f3c0d54dcd77a4153e8c3ce4eb18eeced8b75f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a1:57:d3:92:ca:7c:53:2f:90:f3:77:2b:97:
91:a2:32:f7:a2:48:11:94:62:5c:4a:fc:45:b4:ae:
91:f9:dd:4e:ea:92:0e:ae:10:4c:15:94:b4:83:82:
fd:d1:5b:64:ab:b5:df:ff:82:59:d8:a3:b9:57:eb:
ed:df:ba:ff:b3:35:86:63:65:30:a4:b0:08:38:25:
5f:05:77:b6:01:8c:07:d5:bb:a3:d3:de:f1:48:c4:
fa:a4:f8:5f:a3:cf:da:fe:84:41:da:c7:6a:a9:65:
21:c5:1c:9b:1b:54:39:17:c4:44:84:06:e3:f9:01:
15:4a:5f:d6:c8:da:39:bc:95:1b:ac:d7:67:66:4c:
82:8d:18:87:fa:d9:b2:ba:a4:e3:d5:c2:93:0a:98:
44:2c:db:ee:65:af:fa:c0:0b:ad:ba:46:75:22:4c:
a6:88:60:c1:ff:c8:e0:d3:a5:bd:a8:d6:de:71:ab:
2c:44:f5:91:18:53:cd:57:bd:9b:3b:dd:25:98:47:
6a:44:8c:80:af:58:4a:0b:2c:ff:57:3b:68:f2:c4:
94:3d:64:c6:0a:ef:f0:50:38:5a:81:32:07:ff:ae:
cd:27:44:6f:cb:8b:94:55:ba:dd:84:9f:2e:3b:41:
4d:eb:14:3a:a1:fa:aa:96:b1:4e:9e:6c:0a:68:a7:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C0:D5:4D:CD:77:A4:15:3E:8C:3C:E4:EB:18:EE:CE:D8:B7:5F:24
X509v3 Authority Key Identifier:
keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e5:63:34:3e:8c:0b:71:39:ea:7a:f7:b0:fb:66:ed:80:0e:
b0:4f:ee:59:c8:07:e8:61:d0:99:74:70:29:6d:c6:28:aa:12:
4f:2e:e2:98:4d:90:64:c2:2f:14:52:a1:35:b9:dc:80:8e:3f:
8c:fd:3b:6a:07:02:21:d5:d7:35:3a:fa:ae:90:88:e3:45:85:
0b:ea:b6:e0:2f:cf:ce:0a:16:70:a4:b7:9e:4e:4b:69:db:b6:
05:d3:e1:bc:f3:59:5a:ff:09:b2:79:b1:14:e1:3d:3d:cc:b9:
8d:2c:fc:f9:56:0b:fa:79:67:21:1b:4d:20:2c:f3:43:73:e8:
85:8e:0e:b4:a6:19:c6:32:85:a9:3d:9a:79:5f:29:fc:c8:08:
d3:d7:53:3f:62:46:39:f5:a7:21:c5:93:83:22:c1:2a:b3:5b:
5e:5c:67:aa:00:20:7e:00:40:1f:85:85:93:4f:a2:ff:70:b7:
10:25:e3:7b:35:cf:6d:45:ea:a2:59:8a:a4:df:4f:d9:76:cc:
70:bd:f7:21:c4:b6:c9:68:de:5a:ea:e7:af:2f:45:50:5a:8f:
5b:57:29:e6:32:8a:9a:77:e2:f2:c7:da:64:53:b3:ac:19:81:
54:60:29:2b:a3:7e:38:60:bf:24:66:b9:b1:61:20:c9:d9:17:
39:19:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:40 2025 by rpki-client