Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
File: jrsOsZ53d9cDgAD2wS053tEgQkI.mft (raw, json)
Hash identifier: rq5l9Jl5LhOBiCcxgBRvLhL4qgjcU2UwLkRCBydKRdg=
Subject key identifier: DD:4F:F2:0C:BF:EC:D0:19:5F:07:AF:AE:ED:5E:54:0E:FE:3E:A1:C6
Authority key identifier: 8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42
Certificate issuer: /CN=8ebb0eb19e7777d7038000f6c12d39ded1204242
Certificate serial: 0199FFC8154EC17C270517F8969FC076EDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
Manifest number: 0D1E
Signing time: Mon 20 Oct 2025 04:02:06 +0000
Manifest this update: Mon 20 Oct 2025 04:02:06 +0000
Manifest next update: Tue 21 Oct 2025 04:02:06 +0000
Files and hashes: 1: 68-2o2gnqeFje-83JI2NL7vcFCs.roa (hash: 5XT1BGaZiWzYIBY9EJMQdD9z2CvFYvirF/G5S8/gceM=)
2: jrsOsZ53d9cDgAD2wS053tEgQkI.crl (hash: y+s9ime7IwKhhUwz9BzLwpTTSN3hjQGfTYlvHeAdd90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:15:4e:c1:7c:27:05:17:f8:96:9f:c0:76:ed:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ebb0eb19e7777d7038000f6c12d39ded1204242
Validity
Not Before: Oct 20 04:02:06 2025 GMT
Not After : Oct 21 04:02:06 2025 GMT
Subject: CN=dd4ff20cbfecd0195f07afaeed5e540efe3ea1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dd:78:d9:d9:e3:85:f4:3d:14:0b:c2:2c:24:
95:30:97:89:0a:4d:f5:c0:2d:35:5e:00:8e:f0:18:
b9:f6:32:18:45:50:1f:14:ca:cc:f6:35:6c:9e:3c:
29:9f:6d:c8:e6:8c:b0:58:f4:a2:74:2d:c0:95:4c:
41:59:b2:b4:99:78:61:57:4a:0d:36:5a:46:fc:b3:
14:01:19:8c:73:a8:7c:f4:0f:78:26:ad:6f:fe:36:
3c:9f:d5:b6:c8:df:27:21:f3:d0:b0:3d:63:33:f6:
63:7e:5f:28:7b:5f:a7:80:a2:1e:22:c0:b9:e5:0a:
97:fc:61:e9:83:82:34:68:46:91:41:8d:03:93:41:
7f:a3:22:70:b1:52:18:63:07:b8:93:d9:8b:b7:3f:
20:51:37:ee:71:a1:b9:39:20:a1:38:9a:34:66:f2:
f7:3b:3a:bb:51:5d:87:1f:94:9e:a8:9c:84:d1:75:
18:0f:2a:27:d4:16:2e:c2:fa:30:9d:4e:cb:8a:25:
38:72:98:79:37:f8:3c:94:f9:1b:cc:df:ff:d4:7d:
e5:62:2f:85:2c:46:08:a1:62:a2:f9:64:33:cc:e6:
f9:28:47:78:54:99:9a:58:37:3e:a8:19:81:94:35:
cb:0b:ac:c5:30:0a:0c:80:25:30:50:a6:9f:ed:7b:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4F:F2:0C:BF:EC:D0:19:5F:07:AF:AE:ED:5E:54:0E:FE:3E:A1:C6
X509v3 Authority Key Identifier:
keyid:8E:BB:0E:B1:9E:77:77:D7:03:80:00:F6:C1:2D:39:DE:D1:20:42:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrsOsZ53d9cDgAD2wS053tEgQkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b157d-8196-4e40-ab36-15141c66854d/1/jrsOsZ53d9cDgAD2wS053tEgQkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:7f:c3:df:3f:bd:2c:9d:7d:38:1d:4c:e4:4e:43:d1:80:5c:
26:2f:b4:e1:35:58:3e:e5:f6:51:4c:13:ac:91:af:e1:57:0f:
07:af:3d:b1:1f:cc:5a:4b:14:57:9f:96:cd:58:ab:1e:b1:46:
87:1b:5f:1f:78:3f:78:8a:bd:de:ee:fc:3c:da:bc:f1:00:b6:
04:bf:6f:79:b3:3c:26:e3:ae:6a:05:5a:a0:71:d9:82:65:03:
3f:9a:22:d1:3c:95:98:c5:46:a2:8d:9d:c6:90:cb:03:23:b6:
30:0e:ff:ad:67:d3:67:c9:28:f6:52:1e:3c:68:b2:70:50:ca:
bd:70:f7:e5:3d:b2:9e:57:7a:64:7b:49:29:67:16:3f:7f:d3:
0a:5d:24:b9:8e:35:50:72:14:61:47:7d:5c:6e:4c:c8:0a:04:
5c:40:78:47:fa:61:29:79:9f:00:e4:e9:d1:e8:2d:c5:2d:c9:
e6:8b:b0:cd:47:e7:76:9d:3a:53:47:aa:08:9a:10:6d:e7:de:
6d:f9:35:4a:52:08:96:f3:f1:79:ef:9e:4f:63:39:e4:aa:fa:
15:97:27:63:8d:2d:d2:9c:e4:71:00:08:32:96:16:55:9b:b1:
66:9b:aa:6b:2c:b2:b8:3e:a8:33:52:eb:99:5f:2c:55:10:f6:
2a:b4:95:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:18:01 2025 by rpki-client