Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
File: _JKCpXb9YqCiQWa17B8STkJY20k.mft (raw, json)
Hash identifier: Ke01XS7hvr6PQ+pfGW6tKP4Dt6XaPpsFvM1JB1uxrvc=
Subject key identifier: 90:7B:0E:30:2D:0B:A7:4C:67:1B:E0:08:DE:27:8C:50:3A:6D:D8:4F
Authority key identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
Certificate issuer: /CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Certificate serial: 0199FC21B8A0C769238132087C1042D49422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
Manifest number: 0655
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: SpZQMZasDnFvSHk0hsSQsjr39Pk.roa (hash: 0yRKRNGlypprPpNYWnGY3uPL+vLYa/tp92ZMslVRtjs=)
2: _JKCpXb9YqCiQWa17B8STkJY20k.crl (hash: IcQpc65VidLGBiv9zUKKJ+RXzZpIwFt6iZZFIBGI9mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b8:a0:c7:69:23:81:32:08:7c:10:42:d4:94:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=907b0e302d0ba74c671be008de278c503a6dd84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:38:cd:bf:2b:f6:b3:7d:df:09:33:cf:c2:
f8:a9:83:d5:c1:65:70:e9:98:5a:a3:01:35:b0:4a:
4d:c5:4d:49:af:34:df:2a:da:f1:ae:99:7f:86:51:
3b:59:9b:ac:c8:45:5b:e0:3d:7d:51:fc:4a:32:67:
57:65:0e:e9:7f:ba:87:fc:29:56:ad:92:16:69:0d:
07:ef:dc:fb:9a:e5:f7:5f:d8:94:e1:bf:23:a5:6e:
84:e3:9d:3d:da:df:57:d4:e3:3d:20:b1:b7:07:8d:
52:56:25:d6:06:11:67:cc:f3:56:e0:2d:0b:ce:4e:
b3:9f:fe:bc:84:d5:62:67:50:f8:d1:b9:12:09:30:
10:29:82:d6:40:3d:9d:a0:c8:01:5c:ac:79:5c:94:
65:87:89:90:bb:74:fe:41:0b:2c:5a:ce:d5:7e:13:
e2:63:e7:d5:f1:f6:b6:3b:ec:c3:92:cf:46:41:b5:
f2:fe:14:c3:5d:90:ec:5d:ea:8b:1c:9f:0f:b8:ce:
05:b9:9a:85:d1:0a:a9:11:aa:9a:69:27:70:43:0c:
2b:45:69:d6:84:5f:cc:c7:09:e6:6f:d0:56:37:91:
4f:d5:8a:ee:cf:bc:f5:55:70:4f:af:af:9a:27:43:
63:8a:5e:17:84:00:b2:ad:a2:99:3d:70:1f:b4:af:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:7B:0E:30:2D:0B:A7:4C:67:1B:E0:08:DE:27:8C:50:3A:6D:D8:4F
X509v3 Authority Key Identifier:
keyid:FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:05:7b:88:1f:66:1a:fb:ab:17:f6:05:60:9a:92:f5:ee:b0:
90:7b:d2:32:5b:1d:d9:9c:f4:42:2d:38:64:c5:32:7b:9b:f5:
88:8e:20:6d:8a:0d:7e:85:51:bc:69:52:d0:75:05:62:c0:af:
9d:f6:e8:62:37:ec:13:29:5e:d8:6a:3a:0d:9f:c6:56:4c:dd:
57:76:9e:0d:72:05:b7:31:0c:20:12:7b:4f:65:02:cd:63:56:
d4:8d:a6:20:f2:4d:40:32:07:4d:85:eb:9b:76:57:7d:04:f3:
a0:fe:66:d4:1a:f0:3d:bd:7e:a6:10:6c:8a:c6:38:cd:bc:10:
46:ad:63:61:56:77:4a:fc:f4:70:b1:89:8c:f0:04:18:59:fe:
03:f6:b1:22:49:ea:1b:f8:a3:65:fd:bc:b5:31:ce:14:26:08:
ca:66:b1:cd:c8:3a:9d:2e:a2:71:41:c7:a6:08:07:d8:9c:4e:
2e:56:9e:08:e3:30:7b:45:c9:a8:df:bf:2f:b0:03:5d:b3:72:
97:86:a4:96:25:ef:ac:70:2a:2d:03:26:b9:62:b1:c7:8a:1b:
56:f7:46:24:33:7d:7c:5b:4b:37:0f:09:27:40:0a:11:50:dc:
b0:bb:67:3e:ef:06:42:75:96:4f:4d:43:f6:5a:25:7f:30:bd:
9f:46:7c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:21 2025 by rpki-client