Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
File: jjvz0Ldl8upCRh0SN85-reQ7aK8.mft (raw, json)
Hash identifier: YtUuRCDMLVlQUYBdXkDvrgiRQC66jmd1pxm23GymJME=
Subject key identifier: 6C:0B:FE:FE:8F:77:4D:7E:B2:5D:11:52:D0:AC:90:B7:62:D8:F5:73
Authority key identifier: 8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
Certificate issuer: /CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Certificate serial: 0199FC21BCDD2E94176D327CF234F2CFB8E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
Manifest number: 0D0A
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: 2W4793sjPA5QMW_mlfEBfSoM2Is.roa (hash: xqASKHMV7rljYXyQYNSClQ6vovvo85JsyWpLw7N75ps=)
2: jjvz0Ldl8upCRh0SN85-reQ7aK8.crl (hash: O8MgKewKwU/KkaXUOnrST/QDGM6J5CRLi7nF7PH/A+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:bc:dd:2e:94:17:6d:32:7c:f2:34:f2:cf:b8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3bf3d0b765f2ea42461d1237ce7eade43b68af
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=6c0bfefe8f774d7eb25d1152d0ac90b762d8f573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:5d:7e:98:c8:9a:ac:52:58:7a:42:33:ba:
90:22:15:f8:bc:a7:76:1c:91:71:b8:84:eb:9f:4e:
cf:bb:93:6d:36:7f:ae:9b:73:e5:7e:72:54:01:d9:
50:bb:c1:7a:eb:ee:fb:f9:ed:95:aa:3f:95:24:6e:
35:aa:d2:e2:73:e9:da:ab:90:76:c6:b1:90:3f:ec:
5a:52:a6:57:8e:1a:79:19:ce:3a:c7:a8:8a:63:03:
01:c2:a9:1c:f6:24:79:1f:2f:7c:82:b2:22:ad:e3:
5d:3a:56:ad:5b:05:64:fa:da:ca:4b:9c:1f:ba:21:
c5:9e:a0:97:87:02:ba:4f:79:f8:15:26:ee:ae:c6:
54:b3:30:84:3c:e0:e1:45:40:ab:f8:f3:4d:c0:f9:
38:26:f6:c3:08:43:9b:a5:70:82:88:2e:60:a9:2a:
2a:a6:0f:58:4c:46:16:91:9d:c1:00:63:5b:77:2a:
ef:67:f1:5b:a4:5b:b2:94:9d:6c:d4:ae:e0:23:cf:
ad:af:5a:df:dc:c3:51:71:56:07:65:1b:73:ea:80:
b4:38:a1:30:73:5c:eb:3b:51:ce:32:39:d5:cf:47:
c0:c0:8d:b9:84:19:aa:97:e7:cf:58:28:dd:53:70:
99:56:84:0b:05:c2:b7:a4:bb:ad:9d:24:a4:3c:b8:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0B:FE:FE:8F:77:4D:7E:B2:5D:11:52:D0:AC:90:B7:62:D8:F5:73
X509v3 Authority Key Identifier:
keyid:8E:3B:F3:D0:B7:65:F2:EA:42:46:1D:12:37:CE:7E:AD:E4:3B:68:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjvz0Ldl8upCRh0SN85-reQ7aK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/619250-12e7-4ea1-939c-51766b9ca86f/1/jjvz0Ldl8upCRh0SN85-reQ7aK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7d:56:c3:71:0f:86:98:66:e4:8b:5e:78:0b:61:78:2e:ff:
d1:c2:d5:2f:94:1d:36:b0:58:28:1f:a6:d8:c7:83:82:fc:58:
10:69:0d:96:01:46:81:13:11:9b:5f:52:0c:33:ab:97:93:ab:
e0:57:6e:f2:f7:72:92:a8:cd:84:56:f7:ea:0e:50:9d:ad:a0:
d9:1f:6e:30:0d:fe:0b:b8:73:09:c0:34:5c:8c:7f:c5:36:c9:
c3:b9:1a:93:91:be:96:e8:6c:58:49:ff:12:8c:c9:28:a0:c2:
27:b5:41:bb:00:3c:c6:19:89:ab:f4:a6:30:f9:17:9c:fa:3e:
b3:47:f2:c2:d9:b3:9c:a7:8f:22:3a:65:2c:dc:49:a9:d1:af:
7a:66:f5:de:3e:7f:99:d7:98:b0:3d:1b:c6:2d:b9:f1:13:78:
6b:cf:1b:53:34:27:2c:ef:8a:c7:e3:72:77:40:f1:f2:e6:b2:
ca:55:c8:cf:f5:ad:4b:7a:8b:51:fb:fa:1e:f3:1a:d0:62:b5:
61:77:85:ef:c4:83:a5:b5:15:8d:d1:4a:cb:41:e5:30:d8:ea:
16:a1:08:d4:45:a1:29:ff:3c:8c:b6:cf:b2:4d:18:e9:63:9c:
03:09:2a:15:df:c7:7a:cf:d9:80:0b:71:b6:a4:da:69:b9:18:
d0:b4:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:20 2025 by rpki-client