Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
File: jDPdzqsVS99j54n0RDSErVVIZkw.mft (raw, json)
Hash identifier: /CP1xaX0A5bwIekqCZ934wyAhPbA87clcEIBU/qj8Y4=
Subject key identifier: 26:97:49:5B:BE:C7:B8:7A:24:0D:E8:8F:68:1A:35:83:BC:33:43:2E
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Certificate issuer: /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial: 0199FCFD649175157739EC60443720246DA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
Manifest number: 1375
Signing time: Sun 19 Oct 2025 15:01:28 +0000
Manifest this update: Sun 19 Oct 2025 15:01:28 +0000
Manifest next update: Mon 20 Oct 2025 15:01:28 +0000
Files and hashes: 1: Af23iU2cOAjf5HW9zn9fh70-n50.roa (hash: KFEfbZsYVTLnLOFsm4vXZoNvNqznJDGo1YKGYJ8NDjc=)
2: jDPdzqsVS99j54n0RDSErVVIZkw.crl (hash: VEp5hl6c8WwBsH2Bx5SyF8L1TuAv3If3/h0GMCh7lcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:64:91:75:15:77:39:ec:60:44:37:20:24:6d:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
Validity
Not Before: Oct 19 15:01:28 2025 GMT
Not After : Oct 20 15:01:28 2025 GMT
Subject: CN=2697495bbec7b87a240de88f681a3583bc33432e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d4:ad:13:5b:01:6e:05:e4:22:ae:f7:b6:08:
cd:35:8b:d3:4e:95:9b:38:62:77:ce:76:ec:03:ec:
20:07:92:ac:4a:1c:4d:cb:a4:c7:88:57:6a:86:ae:
0c:32:55:16:36:ef:31:34:10:44:79:e9:5b:14:49:
b7:47:b6:6a:22:22:1a:ff:fa:7a:ce:1a:38:1c:6b:
f5:66:37:a4:1c:5f:27:5b:b9:15:b7:9d:6e:f4:2f:
b6:e6:9d:19:17:31:4b:df:c4:97:47:91:d4:37:cc:
7a:a5:6a:da:d3:65:67:0e:9a:13:f3:79:7b:9e:51:
8f:a9:8e:9c:85:a9:c1:92:fe:ef:f9:a1:05:5f:45:
9c:7a:e9:1f:ca:92:83:a3:4f:d2:06:ef:ea:97:a1:
e8:62:2e:fc:eb:4c:cb:a7:17:c2:a1:72:b6:6c:08:
d2:59:1f:f0:0b:53:f2:ff:50:e1:0d:fd:e9:aa:be:
c4:32:58:a0:e9:35:2d:a6:ea:e8:bb:cb:84:71:bd:
71:77:8f:3e:07:c2:f9:b9:62:a6:43:a6:de:a2:29:
c6:22:68:9c:31:20:93:83:c6:de:01:63:b6:df:99:
32:4a:f6:3c:70:a9:57:03:21:b0:a6:d5:84:4a:5b:
45:65:f1:71:fc:6c:df:13:77:e4:f8:44:28:27:28:
ee:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:97:49:5B:BE:C7:B8:7A:24:0D:E8:8F:68:1A:35:83:BC:33:43:2E
X509v3 Authority Key Identifier:
keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:cf:84:c3:81:78:3e:64:2d:d7:b3:d9:4b:ec:bb:8d:d2:15:
22:79:3b:68:62:eb:6d:f3:3d:c4:fc:70:ef:79:1e:ad:1d:df:
86:29:26:15:be:0b:ba:7d:dd:87:5d:34:42:2b:d6:58:37:a8:
9d:a7:0e:eb:b5:95:ce:9c:ff:d0:05:23:83:39:c3:88:d4:ad:
7c:ef:4f:88:f4:1a:53:36:7d:c0:4d:09:b4:27:00:77:a8:ce:
62:5f:21:e9:5f:94:af:f0:94:3a:b5:ff:39:72:c3:6d:ce:22:
d6:58:5d:8d:c2:a1:07:d4:be:a7:7b:17:de:16:c9:4f:61:ae:
ba:04:52:6e:7b:d4:2a:12:a0:96:b6:93:64:48:cb:b0:17:6e:
a2:52:1c:33:dc:bf:e9:81:2a:c5:c5:ee:2c:6a:60:ac:dd:2d:
25:20:8f:d8:5a:95:64:35:f7:3e:c1:73:97:54:59:c9:7b:5a:
22:07:52:4f:48:19:c5:a7:57:ad:4c:cf:60:12:ff:5b:c1:e2:
d7:e6:68:78:b8:53:e7:66:83:c9:b2:61:34:ad:0a:57:39:ee:
24:4a:e2:4c:01:2f:d0:78:41:a9:77:bd:1b:fc:9e:9e:fb:cd:
b3:81:90:4a:38:31:cf:c0:f0:ca:33:df:e8:aa:2c:3d:56:ba:
13:07:7e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:56 2025 by rpki-client