Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
File: jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json)
Hash identifier: vE7JgmaK9hx8rff84eioxa6IZN3eC/5eLyZzB2EthjI=
Subject key identifier: 94:23:8B:8D:60:07:0F:58:44:37:F8:22:9D:1C:20:52:20:22:35:04
Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Certificate serial: 0199FC214E5E9CE43D05CB50EC3D7D7B59C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
Manifest number: 09D3
Signing time: Sun 19 Oct 2025 11:01:05 +0000
Manifest this update: Sun 19 Oct 2025 11:01:05 +0000
Manifest next update: Mon 20 Oct 2025 11:01:05 +0000
Files and hashes: 1: Ai-_WODQT5gjGDaQ6CXKPNkmTMg.roa (hash: WNvkuBtCgqvZC4hHmC3CVdy2TgQFB8OfoCsx9x6UKkg=)
2: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: cFtNlMcuoIZUL1zbbVMroOg90qwSm5V+a1PFd4+VDYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:4e:5e:9c:e4:3d:05:cb:50:ec:3d:7d:7b:59:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Validity
Not Before: Oct 19 11:01:05 2025 GMT
Not After : Oct 20 11:01:05 2025 GMT
Subject: CN=94238b8d60070f584437f8229d1c205220223504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:cb:ce:74:57:65:d4:35:11:31:87:b8:ae:
47:40:c2:12:aa:70:2c:55:e9:0b:db:65:a0:81:96:
de:85:7c:2b:ec:77:be:5c:80:06:57:1a:1e:af:fd:
8d:94:5f:78:1f:ba:01:89:94:ca:b4:b5:17:ad:b6:
68:d2:0b:4d:82:bb:c8:c0:7d:b5:2e:d0:2a:de:94:
ff:52:4a:88:1f:03:95:34:9e:b2:4a:1a:0b:ce:2c:
0b:e5:bc:d7:e9:08:db:55:09:8c:87:6c:e2:8b:93:
98:e0:dd:ac:41:ce:b2:3d:7b:55:53:e4:66:26:e6:
75:59:af:33:72:ff:87:58:5d:d2:8a:14:ee:21:08:
bc:ac:7b:09:ab:d8:aa:a6:67:fa:8a:e6:88:13:b2:
3a:a0:08:79:a3:52:04:09:09:2a:1f:85:98:62:f4:
e4:d8:18:16:15:e4:1a:81:41:73:71:49:32:b5:be:
e5:45:95:c6:f1:55:13:cf:3d:65:65:13:4e:ab:0c:
b2:39:a6:d2:34:22:83:05:18:c0:eb:ac:b2:a4:98:
d3:9f:3c:28:ca:40:d8:e5:b4:cb:07:c4:7b:a2:84:
89:d9:c8:ce:d3:25:d8:08:e2:bf:70:30:9a:4f:b4:
91:99:72:51:4f:51:2d:04:0c:f9:e4:6b:2a:50:26:
61:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:23:8B:8D:60:07:0F:58:44:37:F8:22:9D:1C:20:52:20:22:35:04
X509v3 Authority Key Identifier:
keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ff:ee:7a:1b:88:cc:1c:cf:1f:05:c4:d9:1a:07:af:ff:11:
1d:6c:83:f6:84:aa:f9:0a:a4:4f:a1:85:74:8f:73:e9:c6:30:
57:31:2a:ae:e2:80:73:27:07:aa:1a:bb:23:6d:66:0e:74:8b:
47:7f:30:7d:99:d1:32:15:ce:72:1a:98:51:c9:ff:0c:50:7f:
44:b2:eb:3a:13:8b:20:b0:8e:99:2f:ac:cd:fe:af:69:f9:4e:
c2:d7:ad:f7:9e:6a:73:41:ba:9a:01:c3:23:47:f5:9d:b1:3e:
5d:98:9f:8e:89:fc:7d:76:db:b6:9a:78:24:12:07:eb:2b:cd:
70:33:24:ad:6b:1f:aa:5f:34:4a:86:45:de:08:5a:9c:c5:3a:
ae:25:60:e2:a1:8b:b2:79:69:ef:d9:68:04:d4:4f:00:0c:f4:
89:f7:c2:80:ba:69:89:42:d7:cb:bc:e8:c0:e9:f7:96:d2:a8:
f1:66:63:f2:a4:26:f3:c7:6a:f9:56:df:bb:c7:75:b9:92:f2:
13:e3:c7:ae:1f:58:dd:af:56:f9:c7:a8:ad:df:7b:57:3a:63:
2a:21:4c:cc:5b:b2:b4:05:7a:57:9d:4a:da:11:6a:eb:97:39:
a4:64:d6:18:72:f6:b9:57:59:84:70:09:c0:24:c3:60:0a:63:
af:96:2c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:20 2025 by rpki-client