Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
File: jciXK026DSBJ03yEikoh1KQ7Ljs.mft (raw, json)
Hash identifier: D1yRZj7Sz5YKzTJi0gCAMawpPaJ1hqASnN/O3seu0Bw=
Subject key identifier: CD:3D:85:C7:78:1A:72:65:E2:04:CB:FB:E3:26:76:20:D8:86:5B:C4
Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Certificate serial: 0199FC58C4935E6A00568E9FC50F1D8B69E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
Manifest number: 055F
Signing time: Sun 19 Oct 2025 12:01:39 +0000
Manifest this update: Sun 19 Oct 2025 12:01:39 +0000
Manifest next update: Mon 20 Oct 2025 12:01:39 +0000
Files and hashes: 1: jciXK026DSBJ03yEikoh1KQ7Ljs.crl (hash: 8YXvB7oKucCrjs8luJAUyJHxaZd5bREp8pSc08j4x6k=)
2: s8IxW5tuKoaeGci5PMMsvkBpqVA.roa (hash: r/ncpxBVtrl7LSWT4Ir7OLnEXZq1sFDkQ+rRRvqTryo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c4:93:5e:6a:00:56:8e:9f:c5:0f:1d:8b:69:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Validity
Not Before: Oct 19 12:01:39 2025 GMT
Not After : Oct 20 12:01:39 2025 GMT
Subject: CN=cd3d85c7781a7265e204cbfbe3267620d8865bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:d7:a7:fd:62:d1:5e:df:63:fd:bb:09:43:
1d:74:6c:c3:95:f5:ae:c1:5c:d6:92:22:1f:bc:10:
b9:0b:8c:a7:67:e2:4a:12:3c:98:1c:09:4a:f4:fa:
ad:7a:a3:79:e6:ca:a3:59:86:ab:4d:0e:bb:36:54:
da:5f:b2:f8:c4:30:e9:da:b2:27:78:98:2f:1a:d4:
3e:84:0a:5b:96:b9:31:84:f3:33:99:a5:4c:6e:74:
32:3f:a1:24:fe:d9:28:f2:57:c4:f6:b4:37:51:ab:
21:5c:a8:80:10:ea:fe:04:e9:1a:71:14:b2:62:e8:
68:aa:f5:d3:1f:e4:58:73:34:92:47:94:21:27:35:
86:8c:f4:56:92:be:15:4f:25:68:c4:41:c2:2e:e4:
cf:ba:25:e0:4e:6d:67:14:1d:a9:18:2d:13:0c:d8:
7e:99:20:75:b2:d0:56:c3:51:c1:66:9e:2a:93:69:
d6:ce:ad:79:f8:fe:57:c9:6a:4f:bc:a2:5e:c3:0a:
2a:f9:84:83:57:75:7e:b9:ab:f1:6e:04:e1:08:66:
2c:c3:28:c1:cb:02:4f:4b:25:d7:76:78:4b:b5:df:
42:ef:a1:e3:70:9d:15:9d:ab:85:02:74:07:5f:0c:
ef:61:6c:47:a6:a0:11:05:cf:4e:80:1d:9b:50:7a:
51:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3D:85:C7:78:1A:72:65:E2:04:CB:FB:E3:26:76:20:D8:86:5B:C4
X509v3 Authority Key Identifier:
keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b4:ee:dc:6f:b1:16:e6:35:ab:5a:59:e6:0a:a9:22:d6:36:
43:11:64:37:e4:34:7d:ed:9c:19:65:53:a7:eb:8d:4e:9f:d4:
e0:5c:14:2d:b4:65:63:46:78:ef:d7:a6:33:de:36:7d:13:2d:
ed:b8:db:35:e8:04:be:8d:a9:0e:82:b1:7f:27:0f:58:93:8c:
74:99:2f:41:dd:14:e4:c0:13:f3:1f:b0:2a:88:17:2b:44:66:
1d:57:6d:fd:d7:ff:d3:a7:c3:de:a2:91:78:89:42:78:c5:6d:
ec:39:55:8d:fe:2c:bb:84:66:66:ec:db:9b:f1:4f:c8:85:f8:
7d:39:a1:c5:7a:9f:4b:f1:d9:70:a0:98:f7:82:ee:18:e3:ba:
81:c1:93:ba:40:b3:48:30:f1:90:3e:c9:63:15:8a:a2:a6:98:
8a:c5:df:40:4d:c9:a5:ee:71:6d:a2:b7:fe:b8:10:dd:01:c6:
9e:a3:f2:78:14:63:ca:eb:6a:49:73:f0:94:7f:d1:29:37:fc:
73:73:d4:36:9f:19:11:e5:56:0f:c2:94:a7:b9:49:04:e8:2b:
e8:d7:21:72:4e:3a:bf:0e:e2:e0:1b:fc:ff:aa:8f:c5:52:c5:
04:cb:c6:19:ed:db:8f:30:c1:55:49:20:9d:a9:0f:9e:6e:59:
22:34:f9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:46:36 2025 by rpki-client