Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
File: j57SGI2p7K2hFJFFrvpJcm_gHpY.mft (raw, json)
Hash identifier: viHnZVbOQnZwnogyubVbcasi3rY1UqVYXFc7gMbI1Oc=
Subject key identifier: AA:74:DC:25:1D:FB:CB:9A:D8:E5:4A:54:61:D2:50:FE:B3:DD:95:F7
Authority key identifier: 8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
Certificate issuer: /CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Certificate serial: 0199FFFE2836809DC2B446A8004726D951A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
Manifest number: 050A
Signing time: Mon 20 Oct 2025 05:01:10 +0000
Manifest this update: Mon 20 Oct 2025 05:01:10 +0000
Manifest next update: Tue 21 Oct 2025 05:01:10 +0000
Files and hashes: 1: XfshKmg26J4GeDmQkqYBCAG3kyQ.roa (hash: WmdBSp3tOZptf78Fte4nZRzoao1ErG+KJTfgEnIY6YY=)
2: j57SGI2p7K2hFJFFrvpJcm_gHpY.crl (hash: rNnBfnldR4yRYQdc7J2gXbDmXkaAwxtGClf+Y0lBQYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:28:36:80:9d:c2:b4:46:a8:00:47:26:d9:51:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9ed2188da9ecada1149145aefa49726fe01e96
Validity
Not Before: Oct 20 05:01:10 2025 GMT
Not After : Oct 21 05:01:10 2025 GMT
Subject: CN=aa74dc251dfbcb9ad8e54a5461d250feb3dd95f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d8:45:36:93:89:3f:bb:c8:e8:c1:2e:f3:2e:
c7:44:2f:c6:9f:70:d5:4f:8f:87:a3:14:a8:f7:d8:
1e:35:77:fd:94:e7:8c:4d:2f:b7:82:61:5a:31:72:
ce:35:5f:e3:cf:34:d4:91:45:61:27:8e:04:35:e1:
68:98:3c:92:97:38:ff:e6:d4:63:3c:4d:23:9b:c4:
88:3c:b2:d6:3d:23:b2:92:8b:f4:9b:ee:ca:9b:75:
ec:8e:e8:4d:ea:34:44:ef:dd:7b:a7:53:dd:49:5c:
ba:27:f5:de:f2:2b:37:7f:89:33:2c:71:bb:96:ba:
67:69:53:8c:79:91:21:c2:cd:2d:4c:eb:52:d6:ad:
05:a6:b7:39:4b:1a:ba:82:cc:1d:2f:83:75:d8:f9:
4b:80:53:42:55:21:67:49:bf:89:fa:9e:43:c1:f9:
2e:a1:db:9f:ac:89:f6:41:a1:fb:c2:08:5b:c5:a9:
e9:5d:29:23:e3:de:b1:55:ea:a9:29:52:6a:d8:9d:
a4:c1:7d:c8:a7:65:ca:d2:fe:19:29:d0:00:43:5b:
ef:b1:cb:12:fd:0e:17:a0:eb:c1:55:48:c4:41:46:
7e:16:14:db:fb:bb:a1:3f:07:0e:f3:84:64:57:05:
98:c9:8b:2d:8d:12:52:c3:9d:27:71:cf:d3:b8:60:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:74:DC:25:1D:FB:CB:9A:D8:E5:4A:54:61:D2:50:FE:B3:DD:95:F7
X509v3 Authority Key Identifier:
keyid:8F:9E:D2:18:8D:A9:EC:AD:A1:14:91:45:AE:FA:49:72:6F:E0:1E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j57SGI2p7K2hFJFFrvpJcm_gHpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e4c7c7-57ed-45e6-9fcf-e7241049745a/1/j57SGI2p7K2hFJFFrvpJcm_gHpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e7:74:3b:74:9f:d2:41:31:f3:49:6c:c2:00:b8:03:05:fb:
1a:df:29:e9:92:69:a0:68:af:a1:9c:f6:e7:95:43:3c:f0:bb:
07:93:82:51:56:9f:f9:81:7c:56:87:2d:b6:d7:80:bb:3b:69:
8d:e3:ba:83:a4:36:93:93:41:d2:5d:52:65:a5:fc:79:92:5b:
72:a4:f3:e9:59:5b:fc:08:f7:d0:9b:6e:21:cb:69:01:25:20:
b5:2b:91:1d:d0:2c:eb:6d:38:c1:53:8a:5c:42:57:69:30:51:
15:36:fd:31:f0:59:0f:e6:51:86:5f:16:25:20:4f:20:e6:ff:
b0:b4:5a:90:9b:47:d2:55:41:ce:3e:8a:03:e8:1f:c4:92:9e:
8f:cc:36:26:87:28:7e:d7:6d:8c:06:29:40:65:98:d4:56:d7:
4f:69:9d:f8:4f:b9:1d:38:86:a9:88:2e:d4:c7:dc:27:8b:b7:
23:46:fc:02:a0:81:1e:09:22:9c:50:01:b5:62:3b:67:0b:2f:
4c:cb:e4:1a:b7:26:0c:49:b3:1e:1b:db:ad:c6:c4:bf:9f:77:
08:b2:ab:45:5d:73:1c:84:2b:d2:ca:3d:33:3a:49:87:ad:cd:
33:6a:bc:cd:83:f9:b8:dd:05:ee:65:16:d5:7e:24:04:07:4c:
d6:ac:02:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:25:17 2025 by rpki-client