Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
File: jvxhDOe89HllH9lRjCiJTtHrWoQ.mft (raw, json)
Hash identifier: 3N2kQfZeFN1kGpshHdDxrv53+ZkiEL3bI1xnoRuPpls=
Subject key identifier: 87:D3:67:92:D8:16:65:4C:72:35:E3:B9:5F:9C:66:3E:B5:0E:5F:4B
Authority key identifier: 8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
Certificate issuer: /CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Certificate serial: 019A0ECBFD26D6ED78FCE8647A070FC8CAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
Manifest number: 0749
Signing time: Thu 23 Oct 2025 02:00:40 +0000
Manifest this update: Thu 23 Oct 2025 02:00:40 +0000
Manifest next update: Fri 24 Oct 2025 02:00:40 +0000
Files and hashes: 1: jvxhDOe89HllH9lRjCiJTtHrWoQ.crl (hash: g/JGnjh+rW3vKWpVjY+NpdOi0kL/Sr1a0prrHNfoAqk=)
2: pVboDUVcCgIOSYeEdNLk6uQS4-Y.roa (hash: YNYcfocsMawW3njWrgaZfKy0b3fCRuRw7rODR3Kt6t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0e:cb:fd:26:d6:ed:78:fc:e8:64:7a:07:0f:c8:ca:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8efc610ce7bcf479651fd9518c28894ed1eb5a84
Validity
Not Before: Oct 23 02:00:40 2025 GMT
Not After : Oct 24 02:00:40 2025 GMT
Subject: CN=87d36792d816654c7235e3b95f9c663eb50e5f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e7:94:85:2c:3e:24:ce:fe:dd:9c:62:10:57:
11:fe:b4:b4:15:f7:0a:14:8e:16:fc:c0:2a:cb:c1:
06:26:19:40:4d:13:b5:62:a9:99:b2:84:15:fb:a5:
51:0f:d5:e7:b0:91:90:48:94:c0:d7:3e:f8:40:43:
e5:e8:e3:f5:ed:f0:aa:ab:ff:52:28:23:6e:a3:33:
6b:81:98:40:db:3b:f2:2a:68:33:96:8c:b2:5a:f9:
68:01:74:00:89:02:f4:8a:88:eb:1f:0e:f3:3c:17:
c9:f8:af:a9:81:f4:bb:93:89:bd:f1:c2:b4:5b:55:
4d:cf:41:51:77:ac:d3:73:c6:16:24:1d:bf:ef:b7:
63:ae:04:47:37:56:a8:4d:5b:8b:36:c8:e9:a8:26:
bb:81:ba:42:19:ce:2e:da:f3:47:d0:ba:c3:37:bb:
6a:1f:2f:ce:28:7f:e4:8a:d3:c5:5b:db:86:e4:0d:
31:98:e5:89:75:f0:0b:33:56:84:18:76:91:8b:5f:
f0:2d:c5:88:c0:83:4c:9e:e2:83:06:bc:64:99:9d:
81:2c:6b:66:68:1a:55:36:fc:59:4b:b7:72:19:33:
9d:d3:b4:3c:ae:f5:37:f4:83:4c:e2:e8:fb:3f:a5:
62:38:f9:96:5d:22:5d:78:d3:9c:e2:69:d1:cc:32:
31:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D3:67:92:D8:16:65:4C:72:35:E3:B9:5F:9C:66:3E:B5:0E:5F:4B
X509v3 Authority Key Identifier:
keyid:8E:FC:61:0C:E7:BC:F4:79:65:1F:D9:51:8C:28:89:4E:D1:EB:5A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvxhDOe89HllH9lRjCiJTtHrWoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2894d7-14ee-46ab-882a-21272b87728b/1/jvxhDOe89HllH9lRjCiJTtHrWoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:77:ba:b7:71:46:54:e7:1a:90:88:8c:69:64:db:5a:83:19:
10:30:43:11:aa:78:6d:83:f7:be:1d:08:cb:57:b0:c9:1c:ef:
a3:ad:d8:d6:1f:d6:2b:79:0f:5d:fd:8d:b1:a2:19:3f:22:d6:
88:e5:5e:2f:f0:e4:db:64:27:72:23:0f:e4:30:50:95:17:e8:
c0:85:49:bd:d5:ab:5e:d2:f4:a7:20:94:f2:48:1b:0a:bf:72:
f9:86:6f:2e:ca:31:97:0d:87:f3:ca:23:a1:f8:ce:25:80:25:
61:ec:b2:9b:d9:19:72:bc:3c:8d:66:fd:2f:af:4e:d8:79:98:
97:5e:96:e1:40:1d:e9:d2:76:ac:c2:78:da:d6:21:3f:81:b4:
e5:b1:65:1f:60:2a:a2:94:fd:2b:a5:23:2d:30:17:25:6d:c0:
67:6c:06:f5:04:8a:15:c6:b0:24:e0:c6:4b:7c:05:a4:66:2b:
42:82:4a:58:4c:4c:7f:a0:57:cc:7c:e4:3d:dc:2a:84:80:72:
1f:2d:88:a2:33:54:15:36:35:b4:0f:ae:86:cc:dd:e3:2e:33:
db:4b:78:ab:b9:d8:86:d3:19:b0:3a:80:56:6a:7a:9e:81:63:
69:43:54:7f:cf:fd:ae:19:e5:c7:2c:f1:07:e9:8c:2e:5e:f6:
1a:84:c9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 07:23:37 2025 by rpki-client