Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
File: JijMfwbqCaJH9r6enldMTze06bY.mft (raw, json)
Hash identifier: 8CQTJxlaInd6qcGmtCiSoUbjQgNZQ/FriL38GYUvq8c=
Subject key identifier: 5E:D3:12:C8:10:BD:51:0F:63:E7:5F:26:82:0F:92:AC:B4:31:FB:45
Authority key identifier: 26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
Certificate issuer: /CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Certificate serial: 0199FB0EEA448B972ED7DC5B35579C502669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 06:01:22 +0000
Manifest this update: Sun 19 Oct 2025 06:01:22 +0000
Manifest next update: Mon 20 Oct 2025 06:01:22 +0000
Files and hashes: 1: JijMfwbqCaJH9r6enldMTze06bY.crl (hash: ytTM3/167uWS1xtXL75+7NZTo48nb0VaQcknG7Q82Ro=)
2: hwIYyALOwoBN5zxSDcMvXKZuEhU.roa (hash: UgZLdR3szHuIjLGcrVjUdsIwYk5m69uSb6Pgyz7tXrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:ea:44:8b:97:2e:d7:dc:5b:35:57:9c:50:26:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Validity
Not Before: Oct 19 06:01:22 2025 GMT
Not After : Oct 20 06:01:22 2025 GMT
Subject: CN=5ed312c810bd510f63e75f26820f92acb431fb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:90:81:41:61:8f:e3:86:0e:05:f0:de:13:87:
e5:12:de:13:71:04:79:42:97:6b:90:8e:77:7c:75:
a8:cb:35:8b:2b:18:f7:34:81:15:c5:17:47:f3:f4:
4d:59:cb:05:95:6e:1d:6c:22:8e:91:62:55:b4:49:
f5:f1:97:7e:1f:66:83:40:e0:06:f0:79:29:e4:7e:
a3:eb:10:23:c4:01:0e:9f:9c:c7:70:22:ed:ff:b5:
57:ed:27:3e:19:03:35:b8:93:e3:03:7c:18:3e:a5:
a9:cc:48:0d:22:f5:8a:3e:06:bc:db:19:2a:e9:10:
27:95:1d:ed:92:91:f3:7d:b8:4c:52:85:d6:74:01:
dd:82:65:28:64:2f:71:af:8d:a4:c0:50:69:2f:de:
a8:66:74:9c:be:f9:a9:25:a7:8b:c6:d4:93:58:df:
fa:29:1b:8d:1b:30:d7:7c:7d:cd:02:9d:0c:42:f2:
63:68:f7:4e:14:63:de:00:24:86:5c:c4:62:67:09:
ca:2e:a0:a3:f1:85:1e:ee:57:c1:f9:98:f2:7f:2c:
49:36:4d:3d:e8:d0:a0:bc:aa:97:db:9a:54:22:d1:
3c:bb:56:19:1c:12:19:29:51:a7:6c:3c:e1:af:35:
cb:8d:76:af:73:c6:cc:c5:cb:fa:d6:80:6b:da:22:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D3:12:C8:10:BD:51:0F:63:E7:5F:26:82:0F:92:AC:B4:31:FB:45
X509v3 Authority Key Identifier:
keyid:26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:92:b3:49:10:0a:d4:d0:2d:0e:84:18:d7:e3:d2:f7:e2:09:
9d:b2:d8:06:2b:9d:39:fe:1d:05:8c:03:0e:c8:b5:20:e4:ea:
aa:c5:0e:1a:1e:51:73:42:0d:44:87:e3:83:e8:56:48:91:a5:
ae:b9:51:ac:49:60:65:9e:53:3a:b6:39:f3:28:fc:89:79:b8:
13:a5:c4:a0:2e:0d:8f:0d:e1:be:30:de:a2:f9:a8:82:8d:04:
7b:3b:3e:94:e4:09:22:66:8d:83:f8:0a:18:55:ab:32:06:e2:
47:53:88:ec:1f:77:72:11:a4:65:11:60:3e:09:9c:39:08:c8:
6c:9c:c8:db:17:0d:71:b8:c7:1c:ab:10:ee:b8:77:b7:4f:db:
6b:27:11:30:69:8c:ed:9c:42:90:4f:d5:ae:69:f9:2a:c2:e0:
00:59:a6:3d:48:fd:57:b6:9f:38:22:71:f1:24:bb:9c:c1:fe:
53:a6:2b:a3:1c:0b:a6:7e:86:cd:0a:f2:b2:b3:4a:95:e4:90:
0a:ec:52:3f:ed:89:83:53:69:fe:f5:97:c8:f3:90:81:0a:a4:
6d:9e:72:57:7c:8a:2f:79:ef:5a:24:91:b1:9b:20:27:5c:7c:
9b:8d:db:5d:4b:bb:c8:39:af:6e:f1:6c:92:9d:e9:5a:10:e6:
4d:f5:6d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:36 2025 by rpki-client