Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
File: jLz5N0OA69GF0hGPVRyFWa4jNUE.mft (raw, json)
Hash identifier: fPMsP3cgbjv/wlGfSqnBaX4JhqY/S4lfiC5niTSkmjw=
Subject key identifier: 76:39:1D:27:BF:2F:32:F9:5A:A1:9C:18:FB:B0:8B:CA:EA:38:F1:19
Authority key identifier: 8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
Certificate issuer: /CN=8cbcf9374380ebd185d2118f551c8559ae233541
Certificate serial: 0199FDD8CFB3E0AE251A2A4B83A59A276B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
Manifest number: 0CC7
Signing time: Sun 19 Oct 2025 19:01:08 +0000
Manifest this update: Sun 19 Oct 2025 19:01:08 +0000
Manifest next update: Mon 20 Oct 2025 19:01:08 +0000
Files and hashes: 1: LPHVyLxlu99zLZ120cTfoB_tDV0.roa (hash: k/MXZCSTh36/WgnxNvkdeF42fCURyZYfQlnOWMA/duo=)
2: jLz5N0OA69GF0hGPVRyFWa4jNUE.crl (hash: 7fFA/hJcNCnOhg66wbVkFKhIMoL3o1MFOOHrTfc4590=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:cf:b3:e0:ae:25:1a:2a:4b:83:a5:9a:27:6b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbcf9374380ebd185d2118f551c8559ae233541
Validity
Not Before: Oct 19 19:01:08 2025 GMT
Not After : Oct 20 19:01:08 2025 GMT
Subject: CN=76391d27bf2f32f95aa19c18fbb08bcaea38f119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0a:6a:09:64:5b:60:5f:c5:29:87:18:33:8b:
31:6b:31:8b:47:26:de:1b:9d:75:af:ed:8b:43:99:
e6:c1:c6:9b:b9:81:d2:87:f1:25:2e:fa:23:68:38:
41:e8:aa:50:48:04:53:9a:91:ec:bd:31:26:96:c4:
b0:06:73:30:2a:5f:24:93:db:01:28:09:b9:fb:7d:
d9:69:34:8d:35:0c:1f:7b:f0:8c:9a:75:d3:c3:86:
6b:99:20:aa:73:10:cf:84:2d:ec:a4:ec:c8:7b:86:
7c:85:00:69:a6:5c:09:b6:38:c4:29:6f:b9:ee:d0:
2c:52:64:a8:7f:98:5a:8e:02:90:78:da:eb:13:a5:
fd:2c:56:77:ec:8e:0c:88:c1:3f:91:0c:97:c2:38:
67:13:62:b0:d1:a7:2e:b3:7a:b2:a8:47:43:24:d5:
a5:66:63:c7:6c:a7:30:4d:86:d1:7c:ea:99:13:fa:
e2:0c:95:d8:6e:c5:f1:bb:1c:24:c2:91:1b:cc:7f:
ac:7c:53:91:1e:37:bd:cf:98:37:28:19:44:1d:20:
cc:ef:77:40:85:71:93:13:d4:ab:47:43:82:8b:2c:
47:62:ac:fc:65:a2:1d:ed:5e:d0:98:fb:43:7f:61:
db:3d:3c:67:87:f6:14:f8:87:57:fb:25:6d:b4:23:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:39:1D:27:BF:2F:32:F9:5A:A1:9C:18:FB:B0:8B:CA:EA:38:F1:19
X509v3 Authority Key Identifier:
keyid:8C:BC:F9:37:43:80:EB:D1:85:D2:11:8F:55:1C:85:59:AE:23:35:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jLz5N0OA69GF0hGPVRyFWa4jNUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89a1f0-69dc-4c13-b97b-35203d6b0d57/1/jLz5N0OA69GF0hGPVRyFWa4jNUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6e:37:83:ed:97:64:04:49:0d:2e:4b:d1:e2:bb:d6:2e:1b:
78:27:b6:b1:d5:85:58:0e:eb:f8:ed:00:a9:21:99:20:88:09:
2f:36:17:bd:52:70:49:eb:70:51:c6:6c:98:0c:05:31:a1:0f:
68:a4:6a:f8:ea:91:bd:64:e1:d8:ac:b5:da:16:12:32:ac:ab:
a9:07:43:7a:d1:4c:85:f9:e5:61:84:b9:99:f8:7e:66:2b:fc:
03:57:29:37:74:9f:eb:21:17:7c:87:16:d4:c8:28:d5:ac:d9:
50:da:f8:26:a4:2f:0c:95:14:c1:3b:49:4a:bf:8f:25:02:3c:
52:78:a3:51:0d:fc:f7:4c:f4:2c:38:b1:54:e8:3e:69:da:a8:
a7:96:26:a1:c3:88:d4:d8:d9:fe:78:e9:b4:e2:ea:9e:6f:da:
79:05:1b:f7:2a:67:07:2e:cf:20:56:89:2d:e6:ec:4f:35:0f:
d0:2c:1f:24:44:3a:fb:90:0f:a7:09:f6:34:62:e2:a3:0e:ab:
91:fa:ed:4a:e2:46:a8:8a:0e:b0:40:80:c0:9b:84:bc:cf:3a:
d1:18:c1:da:78:a6:d3:87:81:7f:97:28:39:71:74:e2:68:33:
7d:64:f8:ba:59:eb:e4:61:03:d0:02:a4:32:91:68:58:49:17:
24:4a:73:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:28 2025 by rpki-client