Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
File: jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft (raw, json)
Hash identifier: hHZWQvwrTyhkJXTUrQdo/eGaodLzje/Ux3EosnhKIbs=
Subject key identifier: F7:E1:E3:F2:69:23:C1:C5:86:DB:36:AD:38:51:E5:40:A4:08:EE:BC
Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Certificate serial: 019A7149D8A0E0B0E8748EB48B7814F025D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
Manifest number: 1601
Signing time: Tue 11 Nov 2025 05:00:56 +0000
Manifest this update: Tue 11 Nov 2025 05:00:56 +0000
Manifest next update: Wed 12 Nov 2025 05:00:56 +0000
Files and hashes: 1: R2l9RMJ9r-Uxp3JREDEadFHxFJU.roa (hash: weYAVSG/ZQ3RqDZF3sJtlOJw4FVloRVdNFig6sXWzgw=)
2: jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl (hash: 70MtzNh9h4t5JxA6jOvos2RPfVaQ5RuxhZfBZ+5T2vE=)
3: pPRmMnVfJ7xdqUjJgPRkFHjdCl8.roa (hash: IWh8KTHgqy6EH2ywVMGWNHIBEN+BDziBPQVDednZZvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d8:a0:e0:b0:e8:74:8e:b4:8b:78:14:f0:25:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6
Validity
Not Before: Nov 11 05:00:56 2025 GMT
Not After : Nov 12 05:00:56 2025 GMT
Subject: CN=f7e1e3f26923c1c586db36ad3851e540a408eebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:99:2b:80:91:94:7e:3d:d0:5f:82:9d:ec:70:
60:a8:d8:3d:90:13:c3:03:fc:86:2a:2d:25:9f:36:
0b:4b:70:11:6a:79:08:dc:16:41:b6:50:ff:34:b8:
59:40:9e:c7:1c:5f:2a:85:47:50:2f:3d:22:10:c7:
87:e9:3a:66:ae:2f:9b:16:c9:be:b9:f3:56:b3:87:
98:f3:63:4b:b1:c1:be:92:37:27:71:1d:e0:04:55:
ef:a9:c8:94:b3:f1:88:2d:2d:3e:d9:57:b8:66:b4:
96:1d:df:cb:3e:37:9d:9b:9e:ff:83:ef:fc:31:b8:
c2:a9:03:5b:af:e1:e2:3d:a0:8e:bc:00:5a:c9:5f:
3b:d5:1f:6c:88:47:6f:57:0b:40:07:3f:99:40:a8:
80:0d:ba:d3:a6:51:b5:e0:e0:56:3a:a5:da:41:7e:
33:d1:3a:52:f4:f5:4c:3a:8d:f2:7b:04:03:d8:66:
a5:b0:b3:2b:f3:c2:31:65:3f:33:f8:22:3e:e7:09:
53:7b:94:cc:11:30:86:5a:71:b7:c2:60:92:e2:4d:
77:86:98:70:af:b5:34:e5:15:51:4c:6e:56:f7:bb:
93:58:dc:03:5d:b0:c3:47:48:9e:5d:e8:f2:f2:ef:
98:8e:4d:d1:85:44:66:0f:c0:f8:e8:e6:02:e9:f1:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E1:E3:F2:69:23:C1:C5:86:DB:36:AD:38:51:E5:40:A4:08:EE:BC
X509v3 Authority Key Identifier:
keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8d:9e:ff:f4:f0:d0:da:09:70:d6:2f:53:99:7d:e9:01:fe:
4a:ed:b7:90:fb:6c:9e:dd:ba:62:a4:86:17:c4:a6:f5:c3:02:
f6:dc:3a:3c:ba:c8:02:c1:fb:0b:fa:01:52:a0:12:3c:d7:15:
69:d5:e6:36:2f:af:ab:c2:40:fe:9f:77:27:41:b9:29:ef:1d:
26:90:7a:ff:36:bd:70:9e:f2:14:79:43:ae:53:d0:33:39:43:
bd:9a:5f:b0:c8:32:fd:ac:cc:31:df:cf:b9:10:f1:c2:3b:20:
dd:b4:1d:29:0c:7b:2d:1b:a2:ca:f8:90:43:79:51:5f:5b:5e:
a1:c2:54:5b:f4:12:81:88:ce:a5:7f:31:98:f3:09:f3:62:0f:
32:a9:2c:be:dd:9f:fd:7f:a4:a6:1c:6f:36:fb:25:1e:c4:f8:
71:af:78:33:42:42:91:55:be:28:44:79:4f:9d:a4:2e:b4:4e:
4b:56:db:64:24:59:3e:8c:cc:3c:c6:14:dc:1b:41:ff:74:32:
38:d5:99:6b:b2:18:8d:ca:11:df:0a:44:7d:15:4c:5f:af:81:
d3:f8:b4:16:72:ba:5f:fc:c5:7e:f8:68:76:80:46:7b:31:ec:
e5:7f:2b:27:e9:cb:bd:9b:d6:87:96:15:4f:7e:7d:c5:e5:ac:
57:99:8e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:01:13 2025 by rpki-client