Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
File: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft (raw, json)
Hash identifier: gSZWcdReNpU+F7nRm1GR/xXuAdMKmT3/efyNdzsqd4k=
Subject key identifier: 3B:AE:D8:71:B0:97:0A:A5:89:7D:4A:63:3A:6E:0F:72:8F:6A:41:B8
Authority key identifier: 8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
Certificate issuer: /CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Certificate serial: 0199FFC8B73104AA13B300EC87F13BD9A8AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
Manifest number: 09A0
Signing time: Mon 20 Oct 2025 04:02:48 +0000
Manifest this update: Mon 20 Oct 2025 04:02:48 +0000
Manifest next update: Tue 21 Oct 2025 04:02:48 +0000
Files and hashes: 1: _XanHjYNZTT-5X0sROOr4g4zRS4.roa (hash: BSdib09dS8aBenYj0m64OabQQ/2b6u37mA8nYmBf36k=)
2: jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl (hash: VxQsqjYN+XOVMy3sDOSW2WBhIeA19Ez7BW2Z8Zv//Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:b7:31:04:aa:13:b3:00:ec:87:f1:3b:d9:a8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d243abb7c571aaa9ce223cf61c47e54f9e1ca3b
Validity
Not Before: Oct 20 04:02:48 2025 GMT
Not After : Oct 21 04:02:48 2025 GMT
Subject: CN=3baed871b0970aa5897d4a633a6e0f728f6a41b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:ac:e0:f3:51:48:14:f7:de:be:9f:77:c0:
19:85:68:d3:a6:7b:59:f7:59:1b:5f:b2:c9:3e:01:
bb:68:4d:38:96:a2:78:94:c5:44:ed:26:61:50:47:
92:b1:88:c6:f9:13:bc:db:ea:f6:a2:ff:17:e4:52:
68:a4:b4:0f:cb:73:fc:79:90:3e:e9:a4:af:1a:4f:
39:44:c6:02:08:f0:49:57:11:53:01:68:54:de:36:
24:ba:d1:1d:5d:61:fc:38:b0:9d:c5:d6:1e:ce:44:
de:85:fd:6a:fc:8e:e5:c6:3e:8e:42:fd:c1:3d:f0:
6e:e6:6e:02:6a:c6:18:69:0c:72:4f:15:d2:fa:31:
e4:90:e3:e4:28:f2:96:92:04:74:9a:a2:e9:a9:c3:
ee:ba:80:d8:8e:d7:e7:5b:4b:52:18:07:06:16:77:
26:f4:6f:84:4c:76:6d:68:ab:4f:44:82:c2:2e:46:
2b:4c:3f:09:35:eb:22:b7:9e:ad:e9:8e:b9:ca:38:
aa:fa:0b:92:04:dc:7f:d0:e8:2f:f6:4a:ff:0e:bc:
95:b0:f4:23:40:10:2f:8e:ee:e6:46:b1:28:3a:a1:
dc:8c:a3:e0:79:ec:ed:8e:08:cb:43:30:6c:e2:97:
1e:d9:60:0b:f7:95:42:ba:d0:ef:bb:28:0c:fb:8d:
4b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AE:D8:71:B0:97:0A:A5:89:7D:4A:63:3A:6E:0F:72:8F:6A:41:B8
X509v3 Authority Key Identifier:
keyid:8D:24:3A:BB:7C:57:1A:AA:9C:E2:23:CF:61:C4:7E:54:F9:E1:CA:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/17a7af-9853-4ee8-a778-15185f4dd955/1/jSQ6u3xXGqqc4iPPYcR-VPnhyjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:00:3a:33:f1:8d:b0:86:a4:a3:f2:6b:b3:3d:2e:0e:35:8a:
87:d5:00:a1:d8:dc:76:fa:cd:72:09:a1:9c:5d:fe:38:49:ab:
4a:e3:26:40:23:4b:62:2c:85:ae:ea:55:9e:74:77:a7:17:bb:
c0:fd:6d:c4:ff:e5:60:33:db:68:38:5e:35:e8:76:35:df:79:
8a:dc:1d:cc:be:a9:11:9a:c0:a3:a6:c6:00:a4:00:37:09:c7:
fa:53:ea:76:a8:6d:86:44:0e:42:ac:bf:58:c4:db:4b:cf:31:
43:3c:56:f1:48:a7:c0:2b:28:5e:e8:ab:bf:f9:14:96:67:0f:
98:b1:bf:ab:9b:81:eb:1f:d8:ce:c9:63:67:87:b2:4a:0e:fb:
c9:2e:19:bc:83:4c:91:e6:12:05:7f:dd:d1:6a:74:63:ec:ca:
6b:ae:ba:30:e2:e2:4b:29:77:c7:c4:df:ad:25:30:79:3b:bd:
86:14:ae:cc:85:fb:c9:d7:62:f1:60:db:6a:a2:2c:a6:6f:be:
ba:52:ee:5c:27:c3:52:57:bd:eb:ca:3e:66:54:54:4a:44:d9:
46:15:95:e4:04:ce:89:c0:29:20:52:31:1e:2d:98:fb:89:de:
c1:f5:dc:10:2d:10:7c:31:1a:7d:12:6f:35:aa:82:22:47:a0:
57:8c:3e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:44:25 2025 by rpki-client