
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
File: jPCwtGoI0ecPy92Hetk5oBMuEmk.mft (raw, json)
Hash identifier: /HnCRqoUal5x/pfGv/0chi/N09rfCpJh1DV8cYbpq34=
Subject key identifier: 59:D4:DE:B1:9F:A8:EE:6E:74:88:5F:8F:26:11:01:99:2B:4A:CB:F9
Authority key identifier: 8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
Certificate issuer: /CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Certificate serial: 0199FAA12A666602F08C85714CF5561E03CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
Manifest number: 1284
Signing time: Sun 19 Oct 2025 04:01:30 +0000
Manifest this update: Sun 19 Oct 2025 04:01:30 +0000
Manifest next update: Mon 20 Oct 2025 04:01:30 +0000
Files and hashes: 1: Gh9PpfuY5LxhoKf93mfL5cK3chM.roa (hash: h2BIVV97ReDZkfRDJTGtHCoQkarTn+cxIbkViPsb5Nw=)
2: jPCwtGoI0ecPy92Hetk5oBMuEmk.crl (hash: TcepqYVM72dDGbfNy1dGf82J1H1d+P5wTbmFQbqZroA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:2a:66:66:02:f0:8c:85:71:4c:f5:56:1e:03:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cf0b0b46a08d1e70fcbdd877ad939a0132e1269
Validity
Not Before: Oct 19 04:01:30 2025 GMT
Not After : Oct 20 04:01:30 2025 GMT
Subject: CN=59d4deb19fa8ee6e74885f8f261101992b4acbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:77:37:fd:d7:68:57:9c:11:51:9d:99:72:2d:
2d:5d:92:8d:97:72:0b:0e:bc:48:5e:9f:ed:54:ca:
94:e1:31:ec:4a:cf:31:ec:38:ef:09:1d:41:7d:7d:
48:44:29:5d:22:e3:04:c6:c4:3c:92:01:ef:fa:c3:
da:e4:09:c6:0a:d2:be:83:b4:bb:34:25:f2:6d:62:
8c:8e:39:5f:37:2e:c8:32:8e:3a:e3:00:5b:0b:b8:
8e:a1:72:10:3e:62:d7:73:3b:47:a4:2c:7b:d7:53:
b5:5b:55:a2:17:9f:2e:86:df:25:d7:b3:92:8c:c6:
c8:85:c0:ac:bb:08:fb:74:33:f6:4b:d1:51:1f:bd:
72:74:cc:e3:11:ab:94:b7:53:0f:46:93:64:22:87:
c5:d1:61:c6:af:6c:85:b0:37:30:c3:5a:7d:1d:e4:
4a:46:05:af:4b:50:81:a5:5c:95:24:9b:dd:a5:38:
d7:2c:69:37:44:42:a0:83:c6:8b:79:ab:e3:04:c8:
dd:1b:75:9e:67:57:74:81:4b:f0:d6:7d:9a:7f:df:
ed:b1:6b:a1:e1:d2:d2:f3:35:71:36:9e:66:9c:e5:
4a:dd:34:9a:d8:38:8f:23:30:e5:f1:27:d8:8a:a8:
7a:1e:0f:56:34:5d:51:5a:57:a6:0d:62:aa:b4:0b:
e2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D4:DE:B1:9F:A8:EE:6E:74:88:5F:8F:26:11:01:99:2B:4A:CB:F9
X509v3 Authority Key Identifier:
keyid:8C:F0:B0:B4:6A:08:D1:E7:0F:CB:DD:87:7A:D9:39:A0:13:2E:12:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jPCwtGoI0ecPy92Hetk5oBMuEmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/488f90-224e-4634-967f-8f181d3a3e8f/1/jPCwtGoI0ecPy92Hetk5oBMuEmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:52:67:f1:99:4b:09:d0:1f:ab:1a:0f:fe:40:d0:13:b3:8f:
68:9c:77:d4:08:c6:91:7c:1c:cc:dc:9d:97:1a:3d:31:df:30:
b6:3f:3c:0e:6d:e2:55:0d:0b:ed:cd:c9:18:1b:be:68:ae:ec:
b8:ca:ef:de:cf:e5:77:19:af:1b:e1:95:af:c5:0c:8b:e0:c5:
00:9e:86:17:27:a1:67:53:06:dc:a3:33:93:e3:8d:40:3d:eb:
0c:d8:60:9e:5e:9a:56:b6:50:c3:6d:63:0e:17:4b:fc:e3:b3:
c9:aa:92:38:17:1a:52:58:1e:cd:6b:10:57:43:5c:3d:71:cb:
97:af:18:a6:28:ca:2e:01:4a:74:fa:1c:24:5b:0b:9e:b9:69:
fe:6e:31:0a:e9:7a:8c:43:ee:6b:27:22:1c:59:6b:c4:47:55:
fa:22:af:c8:2e:2d:24:14:d4:cf:9f:b1:be:8e:81:ae:b1:ed:
27:c0:74:71:df:82:fc:09:7e:8a:57:db:5e:54:92:d0:2d:9e:
8e:ed:e7:08:16:da:7e:b1:d8:83:48:df:f7:63:60:4b:47:dd:
42:4a:29:10:d5:7a:55:1a:2c:b4:99:ab:b0:25:78:49:25:1d:
b7:a7:65:2c:47:22:d9:c3:2e:9b:21:43:68:52:21:4b:56:35:
fb:e8:fd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:55 2025 by rpki-client