Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
File: jZknGRkaiU0GjbqNChAG6f6tqmg.mft (raw, json)
Hash identifier: zr2GLVioYtcjVpsD6pXMcfsUPNxtwPfUSpqsadKG5dk=
Subject key identifier: B9:16:B3:2E:B2:2E:8C:51:BB:7C:0A:FF:6C:74:4A:38:D5:EE:82:53
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial: 0199FFC7EAA2E82CB65BC5681F1845444D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
Manifest number: 0895
Signing time: Mon 20 Oct 2025 04:01:55 +0000
Manifest this update: Mon 20 Oct 2025 04:01:55 +0000
Manifest next update: Tue 21 Oct 2025 04:01:55 +0000
Files and hashes: 1: UEoVdPpKXNYPc5eN4NXhO3hKujE.roa (hash: S8TgRAvXGtwdrVW8V4DMPg99ZH66pkiGd931XsFhH8g=)
2: auh7CDhWY48lyi05uSGvAmCeUEY.roa (hash: EQMFxwLeohahYmNy2tmys2Ve5N9/cgGCjeiUU7kajMM=)
3: jZknGRkaiU0GjbqNChAG6f6tqmg.crl (hash: JHxaqLxk+yPcLmM/2taoBZMIiIHyJAHnwzRwWCvNkiQ=)
4: nz0zNU_fBq73BHptpznw6advDzo.roa (hash: 0C2SqHmcbAjiy/O+OBAPzaEZ28ZqtJabC+l8WC5HbPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:ea:a2:e8:2c:b6:5b:c5:68:1f:18:45:44:4d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
Validity
Not Before: Oct 20 04:01:55 2025 GMT
Not After : Oct 21 04:01:55 2025 GMT
Subject: CN=b916b32eb22e8c51bb7c0aff6c744a38d5ee8253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e5:29:33:9e:9f:b1:b7:1c:49:31:94:bd:b3:
51:61:b3:79:7f:9c:87:99:36:1b:ae:74:87:c9:df:
8a:e8:ff:a3:c9:68:24:d1:6a:89:0f:74:25:94:98:
98:2f:ce:8f:47:b6:e3:35:80:4a:ee:92:26:0c:c5:
aa:f2:57:ca:53:d8:6e:24:c9:20:7c:b0:69:24:7c:
28:db:81:eb:4d:d2:8f:58:04:65:57:23:32:65:9c:
94:a9:8a:e3:0b:6e:b8:d1:12:28:1c:77:7f:34:3d:
fe:69:f9:1f:71:be:2a:17:d0:46:7d:0b:b0:1c:a4:
8a:d8:6b:63:68:04:e6:c7:f1:b5:d9:8d:de:f8:2d:
00:bb:56:59:d1:c8:37:a2:8e:d5:40:1f:7f:81:a7:
64:6d:78:b6:7b:1b:b7:57:e0:95:98:e5:65:e3:b3:
7f:de:0c:5c:85:b4:04:1f:31:89:24:6a:2a:2a:99:
90:ef:0e:83:11:20:6d:c3:cc:a7:8e:fb:b7:93:32:
fb:20:4a:32:c8:37:e8:24:63:78:ca:86:dd:ff:0d:
53:d7:ff:6d:1e:06:38:56:cd:9b:ef:4b:bb:46:70:
66:9d:a0:99:8f:f6:1c:53:73:62:68:d4:05:34:06:
e8:83:e3:60:27:74:4d:b9:1c:08:17:f5:2e:0a:38:
bd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:16:B3:2E:B2:2E:8C:51:BB:7C:0A:FF:6C:74:4A:38:D5:EE:82:53
X509v3 Authority Key Identifier:
keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:03:e6:c0:e0:d1:dd:1d:c2:97:5d:06:d8:ca:47:7d:74:37:
36:af:80:ab:20:ef:f5:6a:75:91:57:65:24:c5:ec:0a:b3:ee:
53:14:ea:eb:8f:35:73:85:fd:15:5c:bf:98:78:b0:72:51:95:
bd:c8:58:9a:21:cd:14:95:b5:3a:fd:bb:16:e9:5d:7f:43:62:
4d:82:81:28:95:af:31:92:ed:5a:b5:e2:d6:e4:83:42:bf:0b:
5b:3a:fa:9b:79:f2:8e:c9:db:67:4c:82:70:fd:3a:01:be:d5:
27:4b:e3:4d:58:74:47:38:a5:ad:d2:0a:77:8e:fa:eb:55:0d:
c4:3e:43:70:e2:2b:4d:71:f4:0b:0c:89:17:dc:83:9c:b1:53:
33:e4:e6:f0:8d:e4:f9:4b:4c:e6:21:5e:2f:8b:26:17:da:c2:
59:7e:72:9a:47:29:4d:da:40:67:c8:b2:06:49:55:de:82:0a:
b9:b1:c1:7e:36:39:14:e4:71:17:04:b4:77:21:80:12:40:4b:
ec:c0:54:32:0e:5b:08:af:93:1d:9c:d7:14:36:05:f3:2d:f1:
2c:54:ce:8e:e9:a3:32:5b:7a:52:a8:7b:a6:b5:2f:74:7a:7d:
d4:33:21:1b:70:c0:0e:5f:f6:45:e8:33:58:68:77:e6:d0:de:
62:2a:46:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:12:33 2025 by rpki-client