Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
File: jHcBPkiKCccJtjIkbZQF2kWMVTg.mft (raw, json)
Hash identifier: YWRL4tTkKgQzqoEHeITg1r/Z3mtdDdnuotc2u0UhSbo=
Subject key identifier: A1:D1:D4:BA:B8:74:69:96:1F:3E:E6:3E:07:E8:58:28:FC:EF:16:BC
Authority key identifier: 8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
Certificate issuer: /CN=8c77013e488a09c709b632246d9405da458c5538
Certificate serial: 0199FFFE42BFCCAFFAEBECB2A1E546DADC0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 05:01:17 +0000
Manifest this update: Mon 20 Oct 2025 05:01:17 +0000
Manifest next update: Tue 21 Oct 2025 05:01:17 +0000
Files and hashes: 1: 1vKogvAJ7aYG5PR2yXnQrWioZSo.roa (hash: 7AslTVaGAxs89CrI0ewnWcmXXnAy3y2uVc1NOrkGAHw=)
2: IGFAJ7tvsxoewBIz-CIaT5Rb9KA.roa (hash: b9kbJBvM0NpcufGFz0NyZFZ9HPycn+QMvqEDUNgTAzI=)
3: ivVRenlAkxSye3NC_DyoAxqoj6M.roa (hash: tMvkuqfZVs7G8eRqzF/eWUmt5tCQ8iMBN+34AAtvEYo=)
4: jHcBPkiKCccJtjIkbZQF2kWMVTg.crl (hash: iEgSUSgajH5dtEqcsnQ9jHmzBOPHk+EhdSKrK11YsRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:42:bf:cc:af:fa:eb:ec:b2:a1:e5:46:da:dc:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c77013e488a09c709b632246d9405da458c5538
Validity
Not Before: Oct 20 05:01:17 2025 GMT
Not After : Oct 21 05:01:17 2025 GMT
Subject: CN=a1d1d4bab87469961f3ee63e07e85828fcef16bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:99:f0:53:fa:1c:1c:b1:b2:50:96:5f:3b:
dc:a8:b0:14:46:10:80:c4:fd:6c:6f:de:de:de:ea:
25:83:46:bf:81:33:26:29:76:5e:c3:49:7f:a6:64:
3d:e1:3c:8f:1a:51:b4:e9:75:cd:d1:64:bb:75:b8:
5d:09:4a:de:f5:d5:e7:16:17:99:d5:aa:32:fd:41:
03:94:db:d5:45:5c:78:ab:47:2c:57:b4:ab:3b:32:
d1:63:dd:15:39:1d:7f:26:d4:bb:13:1a:f5:d4:48:
ab:42:86:e1:0e:c8:4e:a0:d7:cc:a9:72:e1:1b:40:
e8:4d:f5:c0:5b:c1:59:50:be:69:2d:a0:07:70:92:
4a:f1:22:d6:c5:61:29:b2:d0:c2:7a:3f:4b:e8:bb:
a7:43:86:3e:72:f8:62:bb:df:97:02:16:0a:01:ca:
9e:ac:f5:82:d6:6f:0c:38:08:7d:68:59:c3:b7:36:
68:ac:a8:eb:ac:99:41:0e:6d:19:22:48:7d:68:76:
02:4a:e0:9b:c1:47:ad:dc:a0:4b:ef:24:5a:6d:26:
8a:ff:2c:37:8b:f0:d6:72:96:4b:54:5b:7d:7c:0c:
8e:76:93:5d:28:79:cb:e4:4b:2c:10:b8:08:6b:fa:
ce:6a:44:af:24:ea:26:6d:9f:d3:4e:3c:39:48:3a:
2a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D1:D4:BA:B8:74:69:96:1F:3E:E6:3E:07:E8:58:28:FC:EF:16:BC
X509v3 Authority Key Identifier:
keyid:8C:77:01:3E:48:8A:09:C7:09:B6:32:24:6D:94:05:DA:45:8C:55:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHcBPkiKCccJtjIkbZQF2kWMVTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/168509-2cf3-483d-bcd8-02129533a33d/1/jHcBPkiKCccJtjIkbZQF2kWMVTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:68:84:23:f5:ee:f9:dd:2b:d5:3c:7c:67:3c:29:37:49:9d:
ea:4f:90:d4:1d:77:3b:fb:a5:94:d8:67:70:32:48:d3:6e:e4:
00:fc:8a:5d:8f:ba:d0:2c:c7:26:64:2b:d1:e4:44:9b:d6:40:
ad:ac:da:6b:34:7e:4f:80:97:ed:d6:60:f8:69:22:55:a2:e5:
8d:54:5e:75:36:aa:73:eb:0d:5c:20:e2:45:59:90:ce:c9:fe:
36:ea:9b:93:75:3c:e4:29:91:07:21:29:05:36:b2:dc:aa:9d:
6e:22:0e:cb:2f:2c:ce:ab:98:c3:b8:96:4e:36:e0:13:bb:97:
d7:a4:7e:0a:4d:22:f4:46:02:ff:a1:7e:0f:3c:41:4a:8c:ba:
e6:81:2c:e3:d1:5b:74:43:53:23:e0:fe:bc:d8:37:91:2e:0e:
03:72:b7:75:d0:52:f3:a1:f3:24:71:c5:6b:c3:c3:0e:cf:89:
1c:75:c9:2a:2f:8f:2b:6e:51:38:bd:36:22:73:80:03:c7:5f:
74:af:1f:0b:43:ba:95:bb:6e:c3:d9:84:07:25:43:dd:c6:be:
79:b4:ae:26:4b:08:83:22:d1:8d:2b:0c:cf:be:46:72:88:ef:
5e:c2:b2:87:2f:8d:7a:3f:18:44:c9:cb:27:f5:1a:c3:44:4a:
e8:16:b6:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:02:16 2025 by rpki-client