Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
File: j8LtpUeIeltFA9kFkupQVljabno.mft (raw, json)
Hash identifier: ir/vgvxEffv8FXV9Q9Lau/NXj60i63coaMBHCRDz4hE=
Subject key identifier: 04:0A:C9:48:A1:24:63:4A:E3:C1:17:72:C8:94:CC:5F:CB:45:E4:55
Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
Certificate issuer: /CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Certificate serial: 0199FF22957DF22C92F5662BA075B6FE1C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
Manifest number: 15F5
Signing time: Mon 20 Oct 2025 01:01:20 +0000
Manifest this update: Mon 20 Oct 2025 01:01:20 +0000
Manifest next update: Tue 21 Oct 2025 01:01:20 +0000
Files and hashes: 1: j8LtpUeIeltFA9kFkupQVljabno.crl (hash: 6IzxOx6bA+vqgs8PmXwzZMtFS6dD6a2i6hN1f/haYnM=)
2: vo41TJmt3C6QujdoChHPsobf9wU.roa (hash: D6T9SlEvHKEsLXEPPq633IxaLopzaLfHyAO1ibmxPX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:95:7d:f2:2c:92:f5:66:2b:a0:75:b6:fe:1c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Validity
Not Before: Oct 20 01:01:20 2025 GMT
Not After : Oct 21 01:01:20 2025 GMT
Subject: CN=040ac948a124634ae3c11772c894cc5fcb45e455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:af:4f:1b:cc:18:a2:bd:34:96:46:d8:b2:
0d:ef:eb:ce:44:60:48:c7:de:5b:84:54:4d:49:3d:
37:85:9f:bb:a1:2c:11:b1:cb:77:6a:b1:60:19:ce:
8a:54:49:46:7d:94:37:0a:1a:7b:fe:5f:bc:c5:d4:
58:6a:c9:a4:0f:04:6c:1c:fa:18:b6:e9:f0:c2:95:
35:98:68:e6:87:d9:6c:d3:f9:29:06:36:68:27:1a:
af:c3:8b:d3:e3:c1:c1:97:22:3c:2c:d3:ca:54:2f:
11:17:55:30:3d:18:75:b1:9a:e4:75:d7:46:22:c6:
80:3a:f7:fe:73:ea:ed:30:c1:10:2f:c0:4d:c9:dd:
2e:3a:12:75:b0:a5:3c:54:d2:c7:bc:44:d3:b9:d2:
4e:ac:5a:f7:35:4f:89:e3:5b:75:71:ec:bb:be:5b:
6d:39:a0:59:16:44:02:95:6c:b6:33:0f:c4:b5:c0:
d2:73:49:5b:e5:6d:0b:b5:e2:95:20:fc:75:8e:e9:
b1:a7:1b:16:e0:58:c3:fa:6f:2c:a7:80:97:73:22:
05:62:4d:d0:d2:5d:38:81:48:93:36:02:1f:e3:89:
b4:6a:68:3b:d1:0e:70:18:e1:06:92:d3:ba:a2:03:
d7:74:85:a8:93:ff:6e:0b:64:5a:05:dd:30:d5:4d:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0A:C9:48:A1:24:63:4A:E3:C1:17:72:C8:94:CC:5F:CB:45:E4:55
X509v3 Authority Key Identifier:
keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3b:ee:b4:1f:62:00:51:71:99:a4:93:a0:a9:27:65:ec:66:
fe:76:c3:22:72:2c:0d:44:c2:f3:8b:b2:66:ce:af:ec:4d:0f:
59:5c:7d:f8:24:b4:77:b7:82:4c:fd:bf:06:7a:c1:1a:c3:a0:
11:30:dc:03:82:e3:21:b2:e5:7a:3f:c7:1b:e8:99:55:fc:ac:
6b:9a:c1:b1:45:59:61:fa:b6:6b:ea:f4:dc:a3:63:a2:d5:9b:
6c:ef:2d:57:7d:6d:9a:28:03:27:99:03:76:88:6c:66:22:e3:
02:4e:80:73:39:23:27:ec:4b:7b:fc:6e:4b:79:df:8e:08:c5:
e8:95:c1:a0:95:f5:c4:d3:7f:5b:8b:ec:a2:53:ad:4a:19:8b:
c6:b1:d4:ed:2e:d5:90:c0:81:4d:c6:da:52:86:84:c8:e3:c7:
74:ff:62:2c:22:f0:44:32:3f:35:47:47:0a:3d:6d:7b:6e:26:
b6:81:cc:92:69:6d:1b:51:d5:43:1c:9d:aa:8d:c3:49:98:79:
28:3b:1c:c9:c7:bc:13:e9:bc:84:48:7d:f3:1a:9d:d6:00:1d:
c7:38:ef:aa:33:f8:3d:9c:d4:d7:7a:2b:0d:6c:27:b5:c7:2b:
2a:c6:56:41:fb:5b:5d:ea:e4:5f:45:be:12:45:ca:41:b8:cc:
41:24:c4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:30:40 2025 by rpki-client