Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
File: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json)
Hash identifier: 7WqNarStuX0s5PwQWRvVuj5WSWn7+82mYpBB8GIzwrI=
Subject key identifier: FA:0C:D0:C2:94:02:96:08:43:59:D9:CB:26:88:F8:68:90:0A:BE:98
Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
Certificate issuer: /CN=8e79cef458de50392e3c02b69182f34c60148d24
Certificate serial: 019A0290F9E3194955A795B6399D7343ECFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
Manifest number: B5
Signing time: Mon 20 Oct 2025 17:00:46 +0000
Manifest this update: Mon 20 Oct 2025 17:00:46 +0000
Manifest next update: Tue 21 Oct 2025 17:00:46 +0000
Files and hashes: 1: FjU0H7vPdjT4WlcuRh8u9jonq80.roa (hash: FVDMMIfr/P3OKDJ02oDTFPsyvxmI1cgf33doeyF5iQw=)
2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: my1xiI28AlplitqXCRHZPwKppcsaDofwNcuOXZl0E70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:90:f9:e3:19:49:55:a7:95:b6:39:9d:73:43:ec:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24
Validity
Not Before: Oct 20 17:00:46 2025 GMT
Not After : Oct 21 17:00:46 2025 GMT
Subject: CN=fa0cd0c2940296084359d9cb2688f868900abe98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:f8:85:c2:ad:8b:f3:76:b2:fb:13:5a:6f:
85:08:f8:45:1f:18:67:46:b0:51:1c:d6:90:e8:f6:
62:85:44:33:3e:1c:a0:ab:61:66:d5:b8:af:d4:8c:
43:1e:00:af:a0:00:72:2e:44:67:04:e1:e4:40:3c:
e2:01:dc:df:bf:af:11:a1:71:f8:3b:bb:9b:e7:09:
a5:21:f8:8b:2c:7f:4a:43:cb:38:b3:23:3e:69:8b:
30:7c:ef:79:16:fe:4c:3f:6a:77:1a:4e:ab:b7:f5:
8a:16:44:65:f6:3a:c0:31:45:ab:3b:b2:eb:7f:ba:
cc:71:b3:93:13:b7:7f:89:2d:ec:94:8c:c4:cb:ff:
9c:2c:9b:a4:95:13:8d:e9:67:38:e0:14:d1:f4:9d:
6e:99:4b:54:5e:43:d6:89:95:df:54:d6:5b:3e:02:
0b:33:39:4e:83:ab:38:34:7e:f1:78:da:6f:ef:c4:
9a:d5:6a:0f:9f:79:c0:b3:f5:99:91:86:91:94:15:
96:dc:45:43:72:2e:b4:c5:5f:e7:c7:3b:cc:94:10:
42:6c:4c:cc:8b:90:79:ee:36:41:ce:c3:ab:7d:a5:
97:4d:f0:10:98:61:1c:1b:dd:da:88:b1:54:63:96:
d8:a3:eb:bb:d1:78:d9:9d:f3:7a:4a:9c:95:b7:27:
75:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0C:D0:C2:94:02:96:08:43:59:D9:CB:26:88:F8:68:90:0A:BE:98
X509v3 Authority Key Identifier:
keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:39:5c:cf:49:20:f4:1f:d4:9f:64:5b:9c:95:36:2b:4b:f9:
05:b5:97:84:51:1a:b4:8d:c9:12:8c:20:bd:ea:f7:36:89:63:
21:f0:89:a6:74:b5:57:b0:16:d4:ec:18:db:80:7a:1a:78:a7:
17:cf:16:b4:ce:de:59:d7:57:64:1c:de:41:da:03:f2:d1:93:
35:64:77:7c:31:31:c1:1f:13:0c:27:4a:93:9f:24:53:ed:33:
d7:18:b9:a1:2c:aa:3e:da:bf:40:21:7c:c9:b7:44:9f:30:32:
e4:de:72:b1:5a:75:ee:b9:8e:94:00:58:fd:48:89:05:1b:87:
43:13:3a:bd:88:5b:c1:2a:9e:66:d1:b4:94:bf:01:4c:a9:a0:
4a:8f:c5:98:91:47:5c:f1:75:29:fd:a9:b0:23:eb:30:61:f9:
03:e0:e3:11:bb:a3:1a:53:3d:be:46:01:2b:a7:09:24:4a:20:
8c:e7:ec:6b:ca:b9:77:f7:a0:87:c2:da:3b:16:d8:bd:03:ee:
31:08:95:57:8e:1a:4e:c1:3c:d2:2e:e0:a8:de:50:9d:8f:ba:
d6:18:ad:da:0e:cf:ca:12:a9:79:ef:c2:2c:c8:6a:7b:98:f5:
0a:7a:b9:89:57:39:a1:9e:82:59:20:b4:db:9c:a2:f9:3e:75:
c3:8a:82:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:40:07 2025 by rpki-client