Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
File: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json)
Hash identifier: 6eEAfIVYOJGcMx2+IN6GzL70f1zZDsEGBsWdiBZG+mA=
Subject key identifier: 18:C4:E4:BC:6D:B2:C2:16:9E:E3:76:BA:11:13:80:E2:7A:09:60:F6
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Certificate issuer: /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial: 0199FB45F0B5C2DAFFACA14161FED41E3DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
Manifest number: 038D
Signing time: Sun 19 Oct 2025 07:01:28 +0000
Manifest this update: Sun 19 Oct 2025 07:01:28 +0000
Manifest next update: Mon 20 Oct 2025 07:01:28 +0000
Files and hashes: 1: RhJqWm0s7H9JSpG-oB16vDuB6kk.roa (hash: bJdYRJsXAlzRdfbbxHF22ta+TfJKXfgxRqEjBlrSXVg=)
2: hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa (hash: 7j9B0FnRG/QF0eLBUbMO8Y6cUWQTPrhU1jAqJD4B+34=)
3: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: TUSUpF7sgCyNqFcGBXp6H/2gkC+9uqVJvhhi6Ez2Xfs=)
4: l0kAn8ApI2SNAoJbZCIEyIXuAX4.roa (hash: B0SI0CCL7BAZvHBp4fUMaxE46b5MHfw4w3OsX4XuXk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:f0:b5:c2:da:ff:ac:a1:41:61:fe:d4:1e:3d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Validity
Not Before: Oct 19 07:01:28 2025 GMT
Not After : Oct 20 07:01:28 2025 GMT
Subject: CN=18c4e4bc6db2c2169ee376ba111380e27a0960f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7a:17:d8:9e:b5:12:7d:7f:b3:0d:4f:d6:f9:
95:b9:b0:5f:46:59:31:ab:9f:f4:ec:0f:e6:0b:8a:
ad:9d:e4:e1:69:c7:d0:f9:56:be:bd:c2:4e:18:66:
d4:a7:b5:7c:90:a9:14:20:e0:8a:c8:f1:54:43:72:
54:a4:cf:05:76:00:15:bd:9b:13:e2:42:31:8b:19:
1c:c4:9e:f4:01:3e:fb:94:d0:33:a3:ae:f9:b9:73:
5b:9d:2a:15:c5:dc:b3:2a:83:e4:dd:4a:ae:83:a9:
2b:95:f4:5d:af:6b:f4:41:1a:27:86:19:36:7b:5c:
ab:5d:43:8d:0a:f3:c2:6a:7f:f5:10:70:e8:48:7d:
19:c5:d6:a1:87:e7:4c:1e:a1:f7:34:f9:22:a6:a0:
83:72:2f:ea:2c:13:b4:af:e4:01:7d:a8:69:a7:f0:
97:43:2b:cc:ed:fd:9c:68:32:d9:e8:65:19:33:4e:
c2:ae:7f:d3:f3:65:b2:c4:d9:a9:2c:0e:a6:01:b7:
8f:5f:60:c9:37:f5:7a:39:a8:a6:34:af:6d:91:4d:
d5:6f:41:fd:a1:e8:51:3c:95:15:66:0b:7f:d6:21:
59:88:a2:fd:d0:91:16:e6:f6:82:03:4e:5f:58:0f:
ae:43:1b:b1:50:73:61:c3:84:aa:00:d9:7b:93:43:
84:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C4:E4:BC:6D:B2:C2:16:9E:E3:76:BA:11:13:80:E2:7A:09:60:F6
X509v3 Authority Key Identifier:
keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:9a:46:cc:0e:22:3b:6f:eb:1c:e6:21:0f:0e:e6:ee:4c:57:
11:de:9d:f9:7a:37:7f:a1:ce:6a:51:98:89:04:b1:68:d0:95:
9d:54:31:a7:b0:c9:16:8a:84:a0:60:ee:3a:4d:f1:fb:05:9a:
c4:cf:44:73:3e:cb:6f:42:f9:d3:74:3e:42:1d:81:03:52:4c:
41:3f:8f:75:13:4f:6f:9c:6c:bf:cb:60:29:fd:d3:c7:86:b2:
d1:e4:ed:17:09:85:b5:9e:46:ff:20:79:a8:63:bd:9b:e1:33:
99:9c:8d:0a:1e:2b:56:f6:31:f6:5a:d8:e2:bf:05:5d:05:1f:
bb:98:48:c9:14:85:ba:de:ca:7d:d3:c9:01:72:f1:43:8e:cf:
51:18:b3:e4:01:0a:f8:17:5c:7b:ac:c5:8e:fb:ab:89:ce:da:
0e:1b:26:ec:6b:4d:11:61:18:b2:a9:5e:f8:9e:c8:f8:58:ea:
12:31:8a:58:61:ab:7f:cf:7e:92:3a:e7:6e:06:15:81:62:c6:
96:35:fa:5c:ad:d6:63:7d:11:c6:6a:d2:cc:14:ea:8e:76:1d:
d1:cc:c2:5c:9b:42:cb:df:1c:5a:99:cb:25:5a:e5:79:4b:51:
f1:c2:e0:a5:d2:3a:fc:dd:d5:95:71:a8:bb:7a:24:c5:d8:6d:
91:fb:62:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:29 2025 by rpki-client