Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
File: jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft (raw, json)
Hash identifier: vo+uH2KUKmKa5MlVF6cONWYV2mTY0NYFUhK1hyawmc0=
Subject key identifier: 06:55:82:22:9C:EC:A0:B6:60:A4:38:F2:D3:D5:D0:A6:A2:DF:7B:6C
Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Certificate serial: 0199FB7CFA242B41397A9F32B64B27BFBD1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
Manifest number: 0FF1
Signing time: Sun 19 Oct 2025 08:01:35 +0000
Manifest this update: Sun 19 Oct 2025 08:01:35 +0000
Manifest next update: Mon 20 Oct 2025 08:01:35 +0000
Files and hashes: 1: bmmsoMxYv54D3Mc8ZLTs5VomINo.roa (hash: kqjLBEFpjOoFx6G/izyFkQ1F3RKWyrbgiXrW4EShNUE=)
2: jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl (hash: 1XlcVEWmZEeTAJHxtd4oc/iOpH0WOqPsnac0fe/uv48=)
3: snNBqH-54jS2dGd9kUA2wImuV_A.roa (hash: +KuCAVSEZ2fMvcpoRb3reL7YI4QgXbzX9w7SZK+eaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:fa:24:2b:41:39:7a:9f:32:b6:4b:27:bf:bd:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c
Validity
Not Before: Oct 19 08:01:35 2025 GMT
Not After : Oct 20 08:01:35 2025 GMT
Subject: CN=065582229ceca0b660a438f2d3d5d0a6a2df7b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:63:cf:00:ce:9a:69:4c:8a:ea:ca:49:70:
eb:cb:d2:96:42:8d:5f:82:a2:1c:12:58:48:06:1d:
7b:23:56:d8:cc:4c:a6:2e:79:f6:ba:84:4d:a8:f0:
99:37:5d:17:76:7f:3d:3a:23:ca:7a:24:91:8c:d5:
27:db:c2:17:de:30:cd:8c:56:36:0d:95:4d:43:0f:
70:50:10:b6:eb:77:58:9a:61:54:eb:0c:dc:19:b8:
90:a3:40:af:6c:ba:63:67:c4:27:41:06:fc:1c:89:
33:9c:db:ab:0f:d1:2c:2d:7f:1f:d9:cd:20:55:51:
d6:88:3b:84:78:9e:63:f6:10:08:88:f8:3b:50:93:
1d:05:bf:0d:c7:09:83:af:21:93:bc:90:e2:47:c4:
b0:fa:51:d0:c2:a4:df:bf:2d:2d:77:af:c3:24:2d:
66:91:e6:89:3d:68:26:80:32:a2:89:24:d9:8b:66:
3f:71:29:30:42:65:cb:2a:eb:3c:fa:3c:81:83:c1:
9a:10:b3:34:d1:7a:2e:26:78:b9:12:63:63:27:36:
2c:49:03:8e:70:e5:b0:47:c1:3f:3b:83:b9:9a:e7:
23:81:5c:09:01:c7:f8:29:7e:aa:c9:12:b9:e5:71:
d2:8d:4f:2f:de:17:ca:9c:4a:98:3a:bc:8b:b1:9a:
5a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:55:82:22:9C:EC:A0:B6:60:A4:38:F2:D3:D5:D0:A6:A2:DF:7B:6C
X509v3 Authority Key Identifier:
keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:be:e0:c9:2f:3b:00:96:d1:d9:60:7a:39:14:fc:9b:b6:67:
29:3e:a5:42:97:44:59:b9:1b:6b:22:0d:6e:b0:2a:0b:32:46:
bb:87:39:04:4c:61:31:40:f5:4d:b6:d3:aa:c0:1a:9b:fa:de:
51:ad:e6:5b:95:d3:2e:96:3e:d5:87:0b:bf:82:75:97:ab:f6:
ac:c9:72:82:a1:66:fc:ce:47:8d:04:9a:1f:bc:73:67:ce:78:
48:fa:94:d7:9c:55:cb:4f:af:85:8a:76:9c:85:99:b1:2e:1c:
6b:47:3c:b5:d7:d1:94:d6:a4:3a:4c:0c:aa:ae:45:af:b8:64:
77:bc:d9:8c:67:dc:4c:19:72:f9:12:fb:23:11:9b:80:8c:3c:
7d:39:42:4f:06:6b:aa:9f:9c:ed:0e:0d:86:63:d4:52:9b:6b:
c6:b7:2c:4c:67:17:55:a0:c0:20:1c:af:0a:46:ae:21:cb:40:
4e:7e:dd:34:e1:ad:d4:65:7e:b6:86:61:e8:e8:1b:f6:e9:18:
8e:3d:30:11:f5:2e:f1:17:7b:d3:40:d6:82:3a:9d:ec:08:f4:
c8:7b:47:10:7e:f8:dd:d1:65:51:94:d8:c4:16:0d:69:ce:ab:
c0:94:72:e3:73:52:fa:b0:48:ac:2f:f6:a6:fe:3f:2b:6d:4f:
8c:26:62:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:25 2025 by rpki-client