Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
File: jsM7jhNW_M_INGbu2KhlUSp9APE.mft (raw, json)
Hash identifier: Tx+uwYx2jlVFkcQNH6BDjnMSrblqVT7CzFyCAotDRzk=
Subject key identifier: 1F:4F:DD:6F:98:21:0F:FC:09:F7:16:20:B5:99:D3:F9:B5:13:52:41
Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Certificate serial: 0199FDD95BEB49E5E00BE7FC46C384CAFB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:44 +0000
Manifest this update: Sun 19 Oct 2025 19:01:44 +0000
Manifest next update: Mon 20 Oct 2025 19:01:44 +0000
Files and hashes: 1: jsM7jhNW_M_INGbu2KhlUSp9APE.crl (hash: oX7wjYDCpqUagXkG/cfy8vc31wVQVZah6ZEFD8XxsMc=)
2: qwVGjqL0m5G9ustOpPZ5FS2RFbA.roa (hash: QQptDB1uT/9FFhotqk1bN1Jx0M0NJncKcjU5av3+7no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:5b:eb:49:e5:e0:0b:e7:fc:46:c3:84:ca:fb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Validity
Not Before: Oct 19 19:01:44 2025 GMT
Not After : Oct 20 19:01:44 2025 GMT
Subject: CN=1f4fdd6f98210ffc09f71620b599d3f9b5135241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:28:57:1d:7a:91:0a:0b:84:f5:10:33:68:
e2:43:07:ff:11:93:84:03:3b:ac:98:63:0f:d0:a5:
cd:a0:02:77:2e:7f:21:87:31:a9:39:d5:3d:f9:ce:
d1:e1:01:48:35:c3:3c:c3:1b:1c:89:69:f6:94:c5:
df:95:79:41:e8:c9:72:1a:b0:d5:22:9a:62:74:25:
0e:6d:90:da:49:5f:2d:c1:c7:b8:dc:f9:a1:00:89:
23:2a:05:f9:16:b0:98:27:2d:df:bb:c2:0d:e7:e7:
2b:4e:0a:61:c6:72:42:f9:68:61:da:0a:50:5c:87:
91:65:ad:b4:57:9a:dc:36:7f:02:f8:c7:46:2a:97:
61:77:34:74:4d:9d:95:35:34:75:4e:84:74:92:30:
04:59:45:2f:78:cf:3b:a0:25:9f:37:35:78:27:f4:
e9:34:00:72:78:f8:1e:a0:05:20:ba:71:02:55:ef:
1f:aa:46:6f:64:59:78:5e:5f:0e:ce:6d:9e:16:96:
0f:b7:72:45:2a:f0:18:34:1b:58:ce:b9:d2:0f:a4:
6c:0c:45:91:25:e4:6a:79:38:72:34:26:b3:99:bc:
24:6d:a1:6b:cf:8c:7b:f6:4c:1d:6f:fe:64:24:fe:
7d:06:18:18:cd:a9:fb:21:c5:0a:4a:ac:ff:75:31:
5e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4F:DD:6F:98:21:0F:FC:09:F7:16:20:B5:99:D3:F9:B5:13:52:41
X509v3 Authority Key Identifier:
keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:16:19:34:7e:d2:21:50:fa:c0:83:f0:80:e8:cc:20:07:76:
04:de:06:50:9d:35:97:5d:73:d8:56:8b:17:c4:7a:1e:cd:d6:
17:a1:2c:54:56:0f:f2:f2:ec:86:9b:41:51:87:97:82:3d:f4:
ca:ec:95:78:cc:56:6c:0b:93:71:fb:a4:04:08:49:7c:da:a6:
bc:cb:6a:59:d7:b6:d6:fd:15:ef:6e:51:a6:d2:6f:f6:6e:98:
e7:e0:d0:90:a0:ed:1a:3a:a1:bf:2f:b7:fb:ab:86:32:75:cd:
44:76:22:d5:f3:cd:f2:85:0c:c2:02:c2:db:68:af:6b:82:c9:
0b:21:12:51:ce:21:e2:be:62:f8:76:1a:06:9e:33:40:36:2f:
21:17:da:0c:53:d5:5d:cf:eb:48:5e:89:bc:98:a6:eb:98:8f:
47:a1:c7:cc:a5:fc:a6:f4:4c:01:09:dd:57:b0:dd:57:f0:14:
49:a4:e4:63:ca:41:4a:32:3d:3c:87:b4:5c:43:64:f3:bc:14:
08:ab:8b:8d:c2:c0:bc:88:6c:ef:bc:f7:03:48:1c:6e:9a:c8:
4d:94:9f:2a:d0:62:d7:00:cc:87:9c:22:f2:7c:bb:4b:ea:f8:
0f:af:90:3b:d0:a9:7d:60:8e:93:17:4c:e3:97:64:6d:b6:c2:
0b:dd:64:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:43 2025 by rpki-client