Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: G33vZzR4N5hZd8OQywhMTaY/rcsGuHm3Okd0zkdLYEw=
Subject key identifier: FD:D2:66:84:2B:79:2B:95:82:54:71:CA:B8:55:6C:6C:56:0D:4C:AB
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 019A4627EBA9DDC40DA392D61A55000FF862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 169B
Signing time: Sun 02 Nov 2025 20:00:12 +0000
Manifest this update: Sun 02 Nov 2025 20:00:12 +0000
Manifest next update: Mon 03 Nov 2025 20:00:12 +0000
Files and hashes: 1: IhekhU6m6siADVsydLLUojGt3d4.roa (hash: Ie3OUaBFXbHVHoRv6fa60x6E6g/3rnXK7E53n8a6clg=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: aIli0mCnJfSRnLQowhTI2uZHjrJX1vQT/sbyTSwgGn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 15:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:46:27:eb:a9:dd:c4:0d:a3:92:d6:1a:55:00:0f:f8:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Nov 2 20:00:12 2025 GMT
Not After : Nov 3 20:00:12 2025 GMT
Subject: CN=fdd266842b792b95825471cab8556c6c560d4cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3b:f7:c8:66:9e:be:0b:22:bc:f6:aa:9c:32:
ce:59:ce:95:3d:ee:a9:09:c7:96:f0:9c:69:46:db:
fe:5a:ea:72:b1:aa:56:9b:31:f3:2c:06:08:23:5b:
25:65:83:b9:4a:4e:3e:cd:d5:67:20:05:39:90:ad:
1c:1a:f2:9a:ab:73:e4:8d:9b:aa:f6:66:0a:e6:ae:
73:76:5b:a1:66:96:5f:cc:af:9d:f8:28:20:cf:cb:
6c:3a:9d:74:ea:48:53:4d:56:fb:08:52:f1:cf:6e:
38:56:a2:23:bd:8e:5e:cd:72:e7:ce:b6:a5:3c:f7:
97:ba:9f:27:49:f3:1e:81:24:54:60:3c:a8:28:09:
af:e0:50:d9:db:d4:3f:55:d4:81:5d:f4:c6:5d:35:
79:13:bd:a7:cd:ba:19:e6:ea:c5:60:a5:36:1a:87:
8c:ca:97:8c:fb:0a:11:4b:93:ae:47:73:2b:67:36:
62:17:8c:6e:88:f6:c5:92:19:05:6d:03:93:a2:1b:
1c:26:21:36:c6:71:f1:07:e8:8b:74:0c:80:8c:62:
e6:5e:fa:24:7c:2b:aa:e2:cf:2a:19:03:76:6f:bc:
7c:b0:35:7e:d2:52:5b:ba:78:a0:1d:f6:4e:ce:ef:
5b:d9:eb:23:23:61:f7:54:db:dd:39:79:09:16:96:
86:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D2:66:84:2B:79:2B:95:82:54:71:CA:B8:55:6C:6C:56:0D:4C:AB
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:18:da:e3:81:9a:ac:c6:34:98:f8:4d:25:94:ac:79:2d:9b:
ec:a3:c4:46:8e:8f:c3:82:7e:c4:15:f6:a2:76:58:c1:b4:64:
2b:fb:48:cd:47:30:6f:0c:8a:5c:18:72:85:02:84:66:47:a7:
8b:c3:52:3f:cf:45:ed:0b:0a:2a:d4:ba:db:37:06:b9:9d:02:
23:66:30:52:55:40:9c:11:e0:33:04:e7:07:4c:f0:cb:d6:2d:
cc:b7:16:41:08:12:cd:c9:9c:26:0b:74:a8:15:88:26:5e:ba:
d3:59:2a:68:df:d6:28:42:ab:40:aa:05:78:d4:99:1c:33:c6:
ba:ff:95:59:f4:48:49:5d:ca:bb:9b:96:4e:ce:7a:34:ba:c3:
b4:47:82:e8:8c:b8:51:c2:87:bb:87:ac:8b:08:c9:0b:d4:63:
c3:aa:2d:9d:ab:e8:e3:22:b8:96:f3:00:f6:b1:bb:bb:30:0b:
0e:cc:cd:e3:d2:5e:04:e5:9b:3d:a5:fd:cf:88:d5:14:b2:79:
20:ee:ed:0a:aa:0e:2d:7d:f7:ee:7b:ea:b6:63:91:2c:e9:2c:
24:50:b7:37:7a:13:f8:12:73:8b:84:47:6d:e7:92:bc:b3:ce:
4d:3c:20:4a:6b:5b:a8:ff:ba:61:7d:38:71:57:7e:47:74:17:
42:ce:23:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 21:46:13 2025 by rpki-client