Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
File: jHtuGDyNUsxGBbqLXa3cZjJik-w.mft (raw, json)
Hash identifier: Q5RN/iY02ibHWS/1qw0sNIA3T6WjBL2lbIcea0fPWk0=
Subject key identifier: 20:D6:DD:64:4F:F4:03:88:69:A0:8A:15:A9:0A:9F:62:6B:9E:7F:1D
Authority key identifier: 8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC
Certificate issuer: /CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
Certificate serial: 0199FBEAD792D18A116D8E2708BC554436A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
Manifest number: 165E
Signing time: Sun 19 Oct 2025 10:01:35 +0000
Manifest this update: Sun 19 Oct 2025 10:01:35 +0000
Manifest next update: Mon 20 Oct 2025 10:01:35 +0000
Files and hashes: 1: hi5ZHldjJLIMs_WwcUjXAobxn_E.roa (hash: K7O/p6BErwsTAP5GquRxOQd6mPGtBXsqXpbnYVE78oE=)
2: jHtuGDyNUsxGBbqLXa3cZjJik-w.crl (hash: eQoYAFnG4IxpfmvpBSWRu7jFJcNxD7128QqBTyyEc70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:d7:92:d1:8a:11:6d:8e:27:08:bc:55:44:36:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7b6e183c8d52cc4605ba8b5daddc66326293ec
Validity
Not Before: Oct 19 10:01:35 2025 GMT
Not After : Oct 20 10:01:35 2025 GMT
Subject: CN=20d6dd644ff4038869a08a15a90a9f626b9e7f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fb:d9:1c:b0:3a:50:e9:2f:b3:e9:51:9a:3b:
cb:0e:70:c3:77:a8:ba:c9:92:47:fb:73:51:f5:21:
05:bc:67:fa:4a:31:79:a7:c2:0c:ec:f8:89:97:48:
dc:b2:69:4c:0a:25:47:02:2c:4a:02:9b:02:65:24:
a7:e7:88:9c:38:b0:d1:54:3d:25:23:23:11:10:5d:
f8:5a:e2:4d:cc:5c:a1:ec:56:f6:ba:0d:23:c6:21:
dd:a7:7e:70:bb:7c:e5:dd:64:fa:ba:ed:35:93:9d:
0f:e4:a1:09:71:0a:56:f7:dc:f2:e3:04:64:7e:c0:
1c:fa:b3:da:79:bd:66:81:53:a5:61:5a:42:59:be:
bc:b1:2b:98:1c:ba:bf:27:e5:d4:3d:4b:90:46:12:
dc:48:5a:0e:78:d9:5b:e3:52:01:85:3c:94:24:89:
0b:5c:4e:3c:45:d3:51:37:fc:74:8f:bc:0b:36:42:
34:c0:7b:2d:b7:41:f6:5c:8c:dc:d0:da:61:82:f5:
17:39:30:1a:da:76:61:b1:c2:e3:8b:ce:3b:cc:c7:
c8:bf:96:38:26:39:6c:33:24:b9:53:d0:8c:6d:1b:
24:f5:5c:2c:0b:f0:8a:8e:6f:b9:2a:f3:e2:93:9c:
05:b3:59:c8:5d:55:f2:ca:90:89:c0:0c:4a:9b:e2:
2c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D6:DD:64:4F:F4:03:88:69:A0:8A:15:A9:0A:9F:62:6B:9E:7F:1D
X509v3 Authority Key Identifier:
keyid:8C:7B:6E:18:3C:8D:52:CC:46:05:BA:8B:5D:AD:DC:66:32:62:93:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHtuGDyNUsxGBbqLXa3cZjJik-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e22f15-85a8-4318-ab75-b6e867941f7e/1/jHtuGDyNUsxGBbqLXa3cZjJik-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:bf:d7:0b:cd:60:1d:7f:1a:4b:57:f3:6c:b5:f6:d1:b1:71:
88:ed:a1:62:53:b6:b4:16:1a:d4:f0:af:a6:4c:af:b8:c2:55:
dd:29:24:5f:fb:51:0e:bd:bd:0b:08:7e:d8:82:69:39:d0:df:
3c:41:61:93:f1:a0:85:dc:c9:3e:73:99:f0:78:68:cf:11:07:
42:a0:5d:5f:fe:de:f9:51:ea:07:33:f7:e4:9d:7c:02:a0:43:
7f:3f:78:f7:97:fd:ee:62:39:f6:8f:1d:a0:7c:44:d2:63:d0:
57:15:1b:d2:39:50:4b:93:b3:e5:ea:4e:dc:da:75:2a:f8:14:
c1:25:ef:71:c2:55:6a:05:a2:23:4a:da:2e:d3:2a:53:1b:2e:
7b:27:b5:99:8e:d3:5a:6d:a5:f5:e7:34:ce:e2:54:b9:24:a0:
a9:9d:03:bd:db:c3:a5:dd:06:0a:06:cc:d6:79:92:00:08:fa:
74:16:cb:5e:79:e6:c4:12:f0:79:e7:3c:26:fc:32:e3:ae:20:
5a:12:1c:05:90:1e:f3:2f:f7:5b:b8:08:ed:01:80:ee:dd:b2:
cb:95:af:08:07:9f:b1:66:01:b8:05:31:9d:d3:ce:4d:f7:ee:
0e:e3:5a:b5:64:a7:f8:0d:46:01:bf:c2:78:10:d5:cc:ed:82:
86:e8:28:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:12 2025 by rpki-client