Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: H3+3jlPpUYkRwiFbjB62JbdjdDzX6vvsJAkBq2c7N1c=
Subject key identifier: 81:29:52:A1:33:9E:47:9D:CE:2D:0C:D9:8A:20:28:B5:BF:CB:B5:C5
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 0199FC216DF819FAC288AAE19AAA08C7B42D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:12 +0000
Manifest this update: Sun 19 Oct 2025 11:01:12 +0000
Manifest next update: Mon 20 Oct 2025 11:01:12 +0000
Files and hashes: 1: CLLXw20tFXDHP2NnWdXuz6OtVIE.roa (hash: fyANJPQO+a+aRIBA049SI7Qf8CVSPhtzXXD8t/DgeGs=)
2: f46_qQD3jnenHxB8isMlElB8Ow8.roa (hash: xiaUuaIqDN3MaDb9piyX8u90zRoK0nA4gMNUAGOcErw=)
3: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: m9plB0O/l5lAJmh/tHQHod3y/8Uf7W2DhNHMx9++0JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6d:f8:19:fa:c2:88:aa:e1:9a:aa:08:c7:b4:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Oct 19 11:01:12 2025 GMT
Not After : Oct 20 11:01:12 2025 GMT
Subject: CN=812952a1339e479dce2d0cd98a2028b5bfcbb5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bd:12:b8:20:27:21:38:71:04:79:aa:6f:47:
6c:b9:fd:38:60:8d:ba:e9:7a:49:f2:24:53:b6:80:
a1:0a:9d:a0:18:fc:98:6e:38:6a:a4:05:d1:2d:c7:
38:1b:63:2f:e1:6a:9e:4a:c0:86:26:a0:33:b5:56:
7e:31:17:13:6b:10:98:bb:34:a6:59:45:8d:b0:a3:
17:4f:83:33:31:7e:14:af:ae:e2:11:03:34:97:b6:
da:52:e4:bc:3b:27:79:7c:3b:3c:1c:7a:fc:33:2d:
67:20:a7:d9:62:02:c6:93:15:9b:69:68:b5:b0:2e:
69:eb:fe:ec:8e:e3:9a:b2:1b:7c:47:1b:fe:2c:eb:
79:84:d6:d4:1d:1c:89:ee:34:23:75:c1:56:8c:77:
0f:03:57:78:93:19:8f:27:a2:12:12:eb:36:54:cb:
9b:fe:de:0a:81:a6:4d:ad:df:95:83:6c:b2:3b:3a:
52:85:31:fd:2f:1a:21:8c:ad:25:6e:e5:76:3f:d9:
3a:a9:b2:4a:5f:49:8a:e9:7e:84:1d:f6:38:cf:6e:
a7:2c:09:8d:3c:d8:12:23:8c:91:70:ad:67:81:35:
f3:bb:e8:fb:96:9d:06:cc:32:52:48:7f:aa:a6:aa:
f1:98:63:37:a6:ba:62:b6:8f:e7:1a:8d:3e:c4:d8:
1c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:29:52:A1:33:9E:47:9D:CE:2D:0C:D9:8A:20:28:B5:BF:CB:B5:C5
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:6a:02:11:bb:32:fa:55:10:1b:fe:46:9d:37:11:e4:2a:f2:
82:28:e1:82:0d:cd:68:4a:a1:6a:01:39:25:33:cc:78:a9:e7:
4d:36:3b:64:73:30:60:e1:00:ae:b1:79:02:46:64:1c:eb:55:
57:c5:ee:b9:4b:f6:74:b0:af:cc:aa:d3:1a:5d:6c:a1:b3:0a:
dd:6f:d1:39:7b:44:e3:10:41:bb:1c:1a:34:8a:dd:35:95:eb:
f8:68:db:53:c8:bd:c6:f4:76:97:a6:a1:00:6b:7a:72:06:27:
76:53:1d:9a:66:f7:03:1e:f7:40:48:9a:8f:22:a8:97:7c:08:
ba:53:63:d8:91:7e:8f:30:8a:36:0d:d3:cb:25:86:2a:3d:5e:
4d:65:41:3c:b4:af:df:40:68:64:f8:7a:c3:61:8a:95:91:92:
f6:83:77:55:4a:56:27:59:0b:8e:cc:7d:4c:2b:83:13:19:e4:
8c:04:c6:00:1a:f0:72:97:49:e1:2f:f3:43:e2:27:7b:54:2c:
86:a4:62:81:18:9f:e4:0a:95:0a:74:6d:f6:f3:3d:96:2a:bd:
b0:29:b9:30:ac:72:58:91:80:1d:02:08:3d:c4:db:ee:c7:12:
69:dc:19:59:09:c0:86:97:54:f4:bd:c4:19:e7:38:0c:ff:d3:
20:80:41:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:14 2025 by rpki-client