Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
File: jxdSJfOGzpgBGfaYhPm-fGorOzM.mft (raw, json)
Hash identifier: K14F8lVIa/UEJhTfscLD6qtxzJOYcAES/pqpT3RYTR4=
Subject key identifier: 94:6F:54:59:2A:54:F3:BC:1C:64:98:DF:01:FD:BA:1D:1E:4C:FE:2F
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Certificate issuer: /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial: 019A71EE7DF37191DD8C9982435062BE54E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 08:00:46 +0000
Manifest this update: Tue 11 Nov 2025 08:00:46 +0000
Manifest next update: Wed 12 Nov 2025 08:00:46 +0000
Files and hashes: 1: 89EQQCo6Tx4ACaGk_JyA4-a5SnA.roa (hash: DER2tNvuAXp0PR1aSNW92ooYvtdX7oI6GzQVCz2YBFM=)
2: jxdSJfOGzpgBGfaYhPm-fGorOzM.crl (hash: 1nvHFdcgmPWMfdiRRBL8A2l+b+WaMFttRQd6tApmb+w=)
3: wqj7UB7atlo4UtptagO8D4QVpv4.roa (hash: ylN4r0wdJFKjI8FqYNMjzdJ19nbuA10o9E8/faFnnKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:7d:f3:71:91:dd:8c:99:82:43:50:62:be:54:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Validity
Not Before: Nov 11 08:00:46 2025 GMT
Not After : Nov 12 08:00:46 2025 GMT
Subject: CN=946f54592a54f3bc1c6498df01fdba1d1e4cfe2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:61:f9:df:6f:ab:3b:e4:05:a7:d9:b3:de:
d1:30:e7:ef:2a:48:2e:3b:9e:02:a3:75:94:89:59:
c3:87:c6:44:01:56:f4:64:f2:e3:9e:de:10:42:be:
24:72:73:cf:b0:d6:0f:bc:07:a2:36:b9:08:22:f7:
18:57:32:60:cd:e4:73:52:20:eb:0b:49:c5:5f:4f:
af:9d:6d:d4:de:e8:61:04:91:81:7c:ed:47:0f:54:
16:d2:39:ce:ff:b8:5e:04:1f:cb:80:51:0a:ee:3b:
48:a4:f0:1e:1a:f6:22:f8:22:3a:54:ed:22:cf:c9:
f8:f8:73:93:48:51:63:03:fd:b4:ba:3d:eb:94:1c:
bf:bb:c1:10:b8:57:b0:8d:55:d6:de:af:15:fc:4d:
dd:e5:01:4d:28:98:75:f7:32:27:06:8c:67:44:c7:
84:7d:6e:c0:7b:41:30:82:24:a8:4f:6c:9d:89:30:
06:17:71:b8:33:72:2b:e6:28:65:f4:ef:80:6e:76:
bb:eb:6f:4c:69:ef:f9:ab:1e:cc:ff:d4:81:11:e6:
56:1e:ba:74:12:45:0a:88:79:4b:01:2f:59:34:e7:
89:dd:10:11:14:42:84:da:a3:b1:1d:a0:a7:23:27:
a5:ef:13:0d:08:2f:b8:cf:13:19:1e:40:8e:b7:b1:
0a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6F:54:59:2A:54:F3:BC:1C:64:98:DF:01:FD:BA:1D:1E:4C:FE:2F
X509v3 Authority Key Identifier:
keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cf:f0:23:8d:54:6f:96:ef:7f:d1:6f:b1:7c:57:9a:8a:2f:
b3:da:b6:07:ca:d0:27:27:08:b2:a6:f5:0f:19:e9:57:39:23:
5f:01:74:3e:47:7f:f5:9e:1a:52:9a:ab:48:51:20:9d:be:fd:
27:6a:ca:7b:e9:f4:39:5f:0a:12:f2:b0:8d:8d:5c:4c:48:5e:
00:2e:13:82:4b:c6:e3:8b:d0:5b:aa:cd:10:5d:8b:7b:65:4d:
67:94:f5:5d:e1:2c:5c:27:f2:2d:6d:d6:c6:91:a3:05:88:0d:
36:8e:38:53:2c:39:3c:e3:5e:76:72:a3:50:0d:ad:cc:15:a3:
e6:94:92:a5:11:bd:b0:84:54:55:e0:b8:59:56:ca:68:43:03:
4e:49:0d:e6:26:9e:5d:bf:54:4f:65:21:9c:c5:50:a5:f0:ea:
31:53:e7:16:15:e7:33:15:71:85:78:39:60:08:e0:0d:e2:17:
71:14:04:97:dd:ba:57:95:b9:50:34:64:30:8b:0d:5a:64:07:
99:d4:48:cd:99:91:da:27:e3:53:97:89:f9:b4:1d:30:94:2e:
bb:c5:4c:80:6e:48:57:ce:60:ac:18:c9:73:69:e6:8d:b6:b6:
6b:18:9d:8f:5d:ad:1e:3b:0f:6e:3b:ab:1d:a9:60:5c:6c:f0:
94:03:c2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:41 2025 by rpki-client