Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
File: jZknGRkaiU0GjbqNChAG6f6tqmg.mft (raw, json)
Hash identifier: QnrY9QUBVrNPY/zAdIj319aZrqYOBGJYLPkT/4R/ALc=
Subject key identifier: FE:8C:79:4B:65:68:0E:96:BF:9C:48:62:89:9E:EB:91:65:36:85:F3
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial: 0199FDD950C0A7D73161BB4D721D2C0AC23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
Manifest number: 0894
Signing time: Sun 19 Oct 2025 19:01:41 +0000
Manifest this update: Sun 19 Oct 2025 19:01:41 +0000
Manifest next update: Mon 20 Oct 2025 19:01:41 +0000
Files and hashes: 1: UEoVdPpKXNYPc5eN4NXhO3hKujE.roa (hash: S8TgRAvXGtwdrVW8V4DMPg99ZH66pkiGd931XsFhH8g=)
2: auh7CDhWY48lyi05uSGvAmCeUEY.roa (hash: EQMFxwLeohahYmNy2tmys2Ve5N9/cgGCjeiUU7kajMM=)
3: jZknGRkaiU0GjbqNChAG6f6tqmg.crl (hash: YLMNL7D7DIZfH0p64hzPjY5OzlCR9zuYTime+od3zB4=)
4: nz0zNU_fBq73BHptpznw6advDzo.roa (hash: 0C2SqHmcbAjiy/O+OBAPzaEZ28ZqtJabC+l8WC5HbPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:50:c0:a7:d7:31:61:bb:4d:72:1d:2c:0a:c2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
Validity
Not Before: Oct 19 19:01:41 2025 GMT
Not After : Oct 20 19:01:41 2025 GMT
Subject: CN=fe8c794b65680e96bf9c4862899eeb91653685f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:91:f2:9f:d2:a6:bd:66:9e:b9:2c:2b:1e:2b:
db:eb:00:ad:07:48:df:72:78:07:0f:eb:a3:50:59:
a6:24:a1:3e:f4:37:39:1d:75:79:13:a6:fc:14:b0:
d8:66:75:66:24:d6:82:70:fa:d7:1d:59:fe:d8:f6:
5e:22:b7:79:fe:df:69:d7:63:03:26:78:35:ad:e7:
62:e7:b2:5f:60:97:ad:fa:b6:70:69:75:e7:f4:c9:
5e:37:e6:ae:82:20:4c:53:6b:65:d4:52:0e:12:bb:
ec:13:67:ba:98:5b:a9:fa:17:6e:c2:8f:8a:a7:a9:
2c:a1:98:93:01:bf:6e:18:f4:73:f6:15:eb:bc:03:
aa:5f:69:17:4d:c7:d9:80:61:6b:9e:a4:62:bf:10:
b4:80:d5:d1:34:93:ee:a6:f5:0a:a2:fc:0d:d1:c3:
ce:c5:9f:d2:7c:51:9c:a5:53:99:75:4a:7e:35:83:
5f:a9:f8:3d:a0:8e:5d:b9:41:6a:62:d6:6f:2d:8e:
01:69:b2:86:80:02:6f:ea:29:11:08:42:c5:ef:10:
d2:e7:cc:a8:db:23:b9:f1:34:d5:86:1f:a7:de:fb:
45:bd:51:d4:12:fb:b1:da:a5:54:25:11:03:32:73:
e0:54:c0:52:32:9a:f2:33:28:52:e0:3a:84:4f:81:
b5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8C:79:4B:65:68:0E:96:BF:9C:48:62:89:9E:EB:91:65:36:85:F3
X509v3 Authority Key Identifier:
keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:da:b9:5e:58:fa:80:49:c1:d2:52:89:84:10:18:4b:de:4c:
ab:1e:f7:fc:be:d0:52:12:10:4a:55:e9:21:f6:64:d6:8c:5e:
76:1b:27:d7:a4:14:5a:12:1d:02:2b:20:2d:ec:e2:01:36:48:
3d:4c:f2:56:71:0c:49:00:4c:ce:c5:8f:14:17:65:74:9f:9f:
e5:5a:47:75:6b:89:68:d5:c3:87:f5:db:47:82:46:4e:38:cc:
c8:d3:0b:13:c3:b1:4b:b7:0f:f5:e2:9d:7d:6d:26:5d:d5:0a:
bf:ab:04:0c:b9:ca:38:a9:8b:4f:db:2c:e7:ac:22:bc:9b:19:
63:03:be:3f:23:bb:95:fa:1b:ec:84:4e:9a:8d:e3:e2:43:6e:
4e:a9:15:75:8b:ab:3d:3c:91:56:63:bb:ff:a0:06:7c:f3:9f:
a3:9c:e5:1f:93:63:cc:64:57:0f:6f:c2:e1:dc:bc:58:62:06:
12:39:e0:52:8c:7f:e3:e3:1d:ed:62:eb:07:dd:ee:ac:ed:02:
77:5c:be:c5:0f:d8:52:d4:1a:02:26:50:6e:bf:a7:b9:08:c1:
c5:e6:38:17:6e:2e:a4:21:af:1b:3e:51:c9:5c:9b:16:cb:0a:
31:f0:5d:05:06:20:4b:df:0c:f9:37:7a:85:c8:d3:16:1d:e8:
85:8c:f1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:18:05 2025 by rpki-client