Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json)
Hash identifier: kO8drTpsxKXEfZGOeEfVw8C2T10ZSOBZa80N4SpsiOg=
Subject key identifier: D6:E5:08:49:3D:24:F0:A7:76:AF:A2:54:27:0D:CA:A5:2C:70:4D:DC
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 019A7225F0B02C0C1B9923A07C21D7F8D74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
Manifest number: 1728
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: A8xcoz0CxVsQV59nDwDYQFIr0lo.roa (hash: DYANfqFgGBJIwz26B4ECCOb3ofMn4dBZTXHVwjQaWQ0=)
2: ihKky7iErFMr7G88FOVCnj74bps.roa (hash: j7P5G19jRMsSzlS7Lh1Jjj17xJpONrJFrA53mphipiw=)
3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: AawICLSFjAMskOjf1oNx20zYupKCaBHLqYXT79G+pSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f0:b0:2c:0c:1b:99:23:a0:7c:21:d7:f8:d7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=d6e508493d24f0a776afa254270dcaa52c704ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:2a:03:33:0c:60:54:23:9a:49:6c:ba:36:
8b:f3:ce:58:60:a7:df:8f:d3:e2:23:2a:14:01:fd:
48:13:e0:8a:a4:be:d0:e9:99:b7:30:7c:13:0b:80:
b9:16:d6:1d:a5:5c:bb:2d:69:78:d6:8c:c7:e5:c2:
d0:3a:dd:5f:ba:3c:ad:13:6d:fe:a8:6b:4a:7b:af:
ef:5b:ae:be:e6:05:8b:7d:08:43:a8:9c:0d:55:49:
bd:be:84:a5:02:ff:a6:0d:70:a7:ee:32:76:62:36:
54:8d:74:5b:49:bd:35:d5:56:94:e3:93:6f:2c:7c:
87:81:e6:31:66:9a:fe:3e:76:3e:85:d5:2b:e7:a8:
8c:a5:92:e6:ec:88:7b:16:39:ef:98:a7:52:cc:30:
e1:33:a8:19:41:31:ef:26:e3:37:21:c7:b6:40:90:
2c:e2:bf:e4:b7:8f:21:05:ae:ff:c8:94:a7:72:f8:
cf:74:67:5f:91:47:14:67:d4:2b:9e:12:e3:9d:a8:
ff:92:82:7f:c9:eb:4c:15:86:ec:c4:bc:06:ae:2d:
29:3b:f7:f0:6a:cc:2f:c6:73:45:a9:18:95:c6:9a:
e2:89:bb:a3:6d:9c:71:46:e9:e8:19:00:c1:8a:d0:
82:74:ea:a2:19:5c:f9:f4:77:d3:1d:33:df:2a:4d:
39:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E5:08:49:3D:24:F0:A7:76:AF:A2:54:27:0D:CA:A5:2C:70:4D:DC
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bb:24:83:ef:fc:78:80:e6:1b:c6:aa:63:f9:e5:3f:c0:94:
d9:31:e3:fe:7b:9c:d5:a4:67:2e:13:27:ea:60:47:c4:4c:a3:
09:a1:35:ac:b5:9f:96:05:dc:a1:5f:ee:02:ce:f2:b5:e4:5f:
8b:8a:00:b5:66:dd:63:14:0f:b8:81:54:d1:a3:32:e7:18:72:
dc:95:c2:28:ec:da:fe:f5:ab:81:29:be:30:a1:a7:1b:c8:44:
2d:c9:79:e0:d4:61:c0:33:b7:06:bc:04:69:9d:9d:98:fd:aa:
e3:9d:b0:5d:60:55:2c:05:01:3d:12:17:19:4a:6e:0a:86:85:
ce:e8:f5:ae:03:f4:8e:41:92:d9:ee:65:1b:76:a8:0d:1f:f4:
10:f4:99:a8:34:f6:fd:61:81:fc:7d:69:cb:75:88:b7:55:11:
7c:1d:0a:dd:7c:35:4d:56:69:c6:55:87:0c:ee:60:73:47:91:
fd:0f:c8:b0:60:9d:d5:d2:52:31:54:bb:8b:e5:37:09:54:fe:
8d:23:77:b4:fd:c4:91:b9:61:f7:28:cd:b0:26:ab:06:74:7c:
e6:cb:b5:87:4d:5a:78:94:3f:02:d1:bd:b4:41:1e:b5:6b:36:
b5:c6:5f:ad:ea:7f:ca:b2:c0:bd:a1:fd:57:18:7c:8a:e2:12:
56:4c:3a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:56 2025 by rpki-client