Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
File: sJ__jo_9j459mntm0cxz3DkoHvY.mft (raw, json)
Hash identifier: PygmN6cxp3rOLu1x7UbmM9AQOKSZN9m6vzqgZPuEM9c=
Subject key identifier: 58:50:40:50:67:87:12:C0:87:D3:32:A2:AD:2B:CD:E0:10:E1:75:62
Authority key identifier: B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
Certificate issuer: /CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Certificate serial: 0199FC8F64CC8D3DDD50690A2247B34DF136
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
Manifest number: 16ED
Signing time: Sun 19 Oct 2025 13:01:19 +0000
Manifest this update: Sun 19 Oct 2025 13:01:19 +0000
Manifest next update: Mon 20 Oct 2025 13:01:19 +0000
Files and hashes: 1: KZIUSongntyb8cmh04ohuVf-RH4.roa (hash: EqZXG+hM0Nf7quHml742UmbfXBrPEdr6jmp61c5zxV4=)
2: K_3LG8OaW8IFtRNbLO4GRdIs5Vc.roa (hash: xg+Bjx4DC/FY08PaKoFJJvP5HHj4DB2L0enoWEQOn+Y=)
3: sJ__jo_9j459mntm0cxz3DkoHvY.crl (hash: QMty38V/pzdw7bRSpzBgam5Kv4rK4OELjhiCeWoGBcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:64:cc:8d:3d:dd:50:69:0a:22:47:b3:4d:f1:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b09fff8e8ffd8f8e7d9a7b66d1cc73dc39281ef6
Validity
Not Before: Oct 19 13:01:19 2025 GMT
Not After : Oct 20 13:01:19 2025 GMT
Subject: CN=58504050678712c087d332a2ad2bcde010e17562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:3f:79:84:24:c3:59:a7:4a:69:d6:6b:38:
eb:45:cf:a8:9d:cc:1d:7a:4c:ac:6d:89:86:58:98:
99:2a:ec:9c:98:d2:ef:63:8a:13:e8:eb:ee:f8:bb:
86:b6:08:61:5a:77:44:58:b9:c4:ad:65:87:40:05:
30:c8:bf:e7:84:8a:8b:0c:55:23:8b:e4:ae:d1:1a:
9e:f8:cc:54:db:d4:e5:c8:d6:71:8f:60:ce:8d:11:
d1:bb:f9:1a:49:a9:56:6a:ca:c2:08:07:bf:2e:48:
a1:a9:14:84:27:ae:4f:05:22:2e:f0:10:ef:e1:2e:
d9:9c:ed:f0:30:ce:8f:e7:b6:36:df:94:09:31:20:
73:29:d0:8a:75:13:60:49:7a:f1:44:88:3d:9f:85:
24:c0:31:d8:37:01:e4:6b:85:b8:d6:ed:b3:dc:de:
27:4b:fc:f3:82:de:8a:c1:50:fc:a5:95:4c:42:0e:
96:3c:3c:de:47:26:65:b2:17:be:9a:aa:c0:27:58:
9a:d4:90:2f:68:32:a2:55:8b:ac:d9:a5:98:7b:3e:
c5:9d:f1:5f:de:4d:2b:23:c9:a5:f4:12:37:5c:6c:
81:54:85:f9:15:c7:d5:5d:10:15:77:cd:93:ba:18:
98:b8:2e:ea:66:5a:93:24:b4:69:22:f4:22:dd:0e:
a1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:50:40:50:67:87:12:C0:87:D3:32:A2:AD:2B:CD:E0:10:E1:75:62
X509v3 Authority Key Identifier:
keyid:B0:9F:FF:8E:8F:FD:8F:8E:7D:9A:7B:66:D1:CC:73:DC:39:28:1E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJ__jo_9j459mntm0cxz3DkoHvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/8fbc7e-1f47-487c-8292-e5a77f7a7aa2/1/sJ__jo_9j459mntm0cxz3DkoHvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ac:cd:25:91:84:48:ff:d6:d7:70:75:7f:a9:28:82:87:c2:
6d:62:87:6e:d1:76:1b:f0:99:f9:b1:e3:a8:57:f2:cf:77:1f:
c2:46:ec:2d:ab:82:11:3f:c9:e8:3c:c1:a8:23:b4:8d:23:0f:
91:a8:76:66:e7:88:39:1c:58:85:aa:4a:14:f2:a3:93:ef:2c:
61:26:3f:96:17:7b:9e:ce:23:6f:b8:be:4b:f4:ed:14:be:88:
a8:1a:20:6c:c0:60:d7:05:74:e4:2f:7e:4a:0e:15:b0:04:2e:
89:2f:2e:4d:ac:8d:e2:23:99:40:d2:dc:74:04:23:52:b4:cc:
32:76:2d:51:c0:8f:54:b6:e8:9c:81:8a:9e:18:ba:68:de:da:
63:83:da:5c:10:e8:4a:7f:40:ff:7b:b9:d5:ed:2c:e3:2a:cb:
98:e7:47:fc:06:88:0d:6d:4f:07:00:10:3d:db:15:95:39:79:
b7:a7:4f:96:a8:f8:cb:cd:e5:73:d6:4c:15:9f:13:c9:55:f7:
f1:02:a4:9a:3b:6e:00:11:b4:e9:6b:1f:ee:46:c5:d0:34:58:
21:a1:b6:0b:cb:15:d5:e3:0f:21:b6:fc:87:62:f4:0f:73:64:
c7:7d:da:26:d2:bc:bd:0c:d9:ae:e8:da:5a:e0:26:7f:86:a6:
76:93:6a:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:45 2025 by rpki-client