Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
File: jjA8wq-Dh4llJ3HDReB98-gNVE8.mft (raw, json)
Hash identifier: EQ7ihkaykE6cRJa555gLIQFzA4ffWtmsn43UTrUlZRQ=
Subject key identifier: 90:78:0A:41:22:C2:57:20:E8:02:FF:67:F2:0D:AE:49:4E:1A:6A:2F
Authority key identifier: 8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
Certificate issuer: /CN=8e303cc2af838789652771c345e07df3e80d544f
Certificate serial: 0199FDD9BE2B22717DBCD3DC5A7C63CEAF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:02:09 +0000
Manifest this update: Sun 19 Oct 2025 19:02:09 +0000
Manifest next update: Mon 20 Oct 2025 19:02:09 +0000
Files and hashes: 1: jjA8wq-Dh4llJ3HDReB98-gNVE8.crl (hash: KRJK/G2mK6AlVJ8itCHEThMhN+15kdwE7a1VzhmuWaM=)
2: tnLXZpAcdsupjiIll_iKlzExQoQ.roa (hash: mDoarqNRra8hpVT2LOO1TVGYi/0LvJxSxAQ/O0wAR7o=)
3: ux92dho2cYr-1uH_cggrGiXNZ3c.roa (hash: gSDKdScN6Ai8I+kzsJX0oBNCs37fov6KbILBlfyfoo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:be:2b:22:71:7d:bc:d3:dc:5a:7c:63:ce:af:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e303cc2af838789652771c345e07df3e80d544f
Validity
Not Before: Oct 19 19:02:09 2025 GMT
Not After : Oct 20 19:02:09 2025 GMT
Subject: CN=90780a4122c25720e802ff67f20dae494e1a6a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:32:4c:8f:fc:16:5f:86:a1:a3:2f:56:56:
e4:55:f0:04:74:e4:70:8b:1c:24:3d:da:49:fd:b6:
5a:0e:be:29:b8:9b:c2:1e:65:de:e0:aa:26:ea:5a:
35:09:89:fe:bf:6b:7a:2f:79:ee:1c:71:ae:7d:cd:
61:c4:93:56:37:50:b0:a2:26:72:75:e2:24:3e:0c:
9f:40:d5:13:74:d4:ad:d6:3e:59:e2:e1:ba:50:4b:
0b:df:98:af:7a:e9:be:e9:54:8c:0a:bf:7b:31:28:
ff:a7:14:9e:e9:31:df:6b:2a:e5:1e:2f:37:d6:aa:
09:58:3d:b0:b3:bc:27:1b:ee:21:08:f0:c5:a6:b3:
7c:c3:e6:ab:ba:93:19:ec:5f:62:d7:e8:16:eb:87:
a1:66:7f:2a:92:36:5c:8e:65:6e:7f:35:78:f9:8e:
fd:88:cc:78:4a:36:7c:60:18:5f:a3:dd:27:63:97:
34:80:58:cc:28:20:d2:d7:c0:cc:b8:9b:aa:26:cc:
5b:e8:8e:b0:25:7e:ed:e6:25:28:4a:a4:6d:64:03:
6e:8b:e3:88:ca:18:22:3b:a9:0c:48:5a:53:c7:97:
2f:c4:73:87:58:25:07:e3:f6:3c:74:cf:a0:9f:c7:
48:ac:7f:f2:85:d2:c3:a2:99:10:ff:0d:75:dd:40:
d5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:78:0A:41:22:C2:57:20:E8:02:FF:67:F2:0D:AE:49:4E:1A:6A:2F
X509v3 Authority Key Identifier:
keyid:8E:30:3C:C2:AF:83:87:89:65:27:71:C3:45:E0:7D:F3:E8:0D:54:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjA8wq-Dh4llJ3HDReB98-gNVE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9d1a4b-509a-4913-b937-d0adb11ded34/1/jjA8wq-Dh4llJ3HDReB98-gNVE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:95:56:bc:e2:0a:27:c9:ea:38:d8:a7:4b:b2:ba:f4:7d:82:
2b:af:4f:4f:c1:38:f8:64:2c:ff:aa:56:23:fe:59:c8:ba:53:
62:f3:a3:a2:62:52:51:12:4b:4b:f5:59:54:1f:af:b4:8c:79:
3d:33:9e:c2:04:e7:ad:b2:73:fe:d8:02:49:a9:33:8b:2d:55:
77:ad:67:21:45:1d:ae:25:b5:26:02:cb:40:a3:88:e8:bd:1d:
e2:5b:ff:01:2b:07:c2:84:91:2c:7f:90:ca:0e:b6:d6:da:e5:
70:bb:95:d0:24:93:74:84:69:c7:72:e6:a6:78:8c:08:b8:6e:
88:80:15:b7:5d:f4:81:e2:8b:a2:be:c9:9f:8f:30:94:46:96:
f6:56:8b:1a:1d:b9:f9:60:32:02:18:1c:d1:f0:1e:9e:31:87:
c6:e7:a9:f7:a0:e1:04:e3:ea:07:ba:0f:28:6c:3f:21:9e:43:
64:ed:c3:ce:86:85:a3:3c:2b:41:5d:fc:87:82:9f:62:ca:40:
34:0d:49:ea:4c:4e:87:5a:e7:d8:17:14:62:96:1d:62:45:65:
9e:49:9d:e5:9a:7b:ca:94:a8:32:c6:49:5e:11:c3:96:74:15:
0d:a9:0e:17:c5:2d:1c:a4:9f:bd:4a:38:11:5d:09:10:96:e1:
a8:84:73:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:44 2025 by rpki-client