Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
File: jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json)
Hash identifier: XX0WPc73McXikAB420nfUaojvaMlIUMnXV20yCWmGJM=
Subject key identifier: 6F:99:C7:15:62:C4:F9:A1:DC:45:70:20:3F:CE:84:6F:33:D3:41:CC
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Certificate issuer: /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial: 0199FD6AFC972407FCC13C299FF1CBF574D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
Manifest number: 02D7
Signing time: Sun 19 Oct 2025 17:01:11 +0000
Manifest this update: Sun 19 Oct 2025 17:01:11 +0000
Manifest next update: Mon 20 Oct 2025 17:01:11 +0000
Files and hashes: 1: DUQ0ry08WIUw5lopwRc9s2zZ5Ck.roa (hash: 4MMSMGpFYTj64gvYvAI9aZYJdovl51CVqQfi4na/C5A=)
2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: Ho2ndsu61053tC54N46MaZT6trzIxutSXlNF2NO3wLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:fc:97:24:07:fc:c1:3c:29:9f:f1:cb:f5:74:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Validity
Not Before: Oct 19 17:01:11 2025 GMT
Not After : Oct 20 17:01:11 2025 GMT
Subject: CN=6f99c71562c4f9a1dc4570203fce846f33d341cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:ad:ac:fe:6e:7b:28:84:43:3a:2b:f1:2e:
49:70:a9:3e:d5:4e:3d:2d:17:5f:09:20:ba:fd:58:
28:d3:3a:e1:82:bb:15:39:ae:66:14:b8:a2:2e:3d:
09:a6:25:9f:d9:16:68:72:12:87:8a:95:7d:e0:6e:
d7:d3:b7:65:1d:98:fa:88:9f:aa:fb:19:ee:96:26:
80:f9:9b:f1:e5:73:3f:cf:52:a7:5d:94:54:14:8e:
a8:4a:0f:fb:06:08:7a:b5:60:13:ab:85:7b:1c:f7:
7c:5d:8a:73:3a:8d:b4:70:61:ce:ce:14:43:4a:1c:
68:ce:92:59:b9:03:62:70:3b:ad:6c:b2:dd:d5:6d:
c6:48:d7:7d:a7:13:b3:02:d5:8b:49:91:df:53:d2:
15:9b:43:8e:af:68:92:a1:1d:d1:56:1e:85:38:be:
82:66:77:56:9a:31:15:63:02:b6:4b:84:1a:bd:00:
97:f9:92:20:2e:46:74:75:45:0a:ac:69:cf:47:88:
5e:c4:74:30:cd:59:a0:9a:09:28:43:74:1a:d9:6b:
0d:e2:fe:6b:8b:27:0f:5c:ee:f2:c1:2d:26:dc:9f:
14:57:d3:74:68:c8:b1:52:76:de:d4:de:89:90:0e:
74:ad:d0:2b:a4:67:6e:a3:c9:2c:cc:35:b8:da:c2:
af:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:99:C7:15:62:C4:F9:A1:DC:45:70:20:3F:CE:84:6F:33:D3:41:CC
X509v3 Authority Key Identifier:
keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:44:b1:5c:8e:55:cb:74:15:16:5f:17:9b:8a:99:fe:64:85:
87:35:17:01:1c:93:9d:a9:86:80:0f:71:8a:3e:de:16:b0:57:
f2:fa:d6:20:46:b8:ee:93:1b:d6:e5:05:1d:cb:2c:e9:95:a1:
04:f3:f8:66:08:7f:87:33:87:21:a1:b3:1d:3e:3d:62:a4:a0:
a2:4f:4a:13:85:e1:57:3d:41:8a:31:88:43:ea:f0:f5:79:d4:
1f:f5:27:9b:04:3c:08:6d:eb:7f:92:2b:0f:6d:0b:cc:b5:4d:
5f:81:28:27:c4:41:d4:3b:29:60:9e:35:43:b9:95:9b:68:65:
9f:24:2a:8e:d0:ae:d3:68:d4:b2:2b:3e:88:3f:ae:47:da:f2:
fe:fc:e9:dc:50:ae:fa:b1:03:f8:8e:67:5b:49:cd:00:61:c2:
8c:eb:ce:37:cc:e3:e9:2e:3b:6d:f7:5f:b0:65:b8:81:32:a5:
b3:55:2b:7a:5d:0c:61:d7:03:ab:2b:0a:56:c9:02:00:b0:6c:
c1:b5:2f:23:de:6c:aa:0b:49:a1:58:4e:2f:57:fa:aa:6c:76:
ad:89:9f:01:13:2c:a6:32:85:36:8d:a7:49:93:e9:54:3e:64:
1a:e0:ac:2f:82:1c:db:b6:28:ea:94:41:3a:9e:5c:43:24:97:
45:ba:c0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:34 2025 by rpki-client