Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
File: jTgcV7CbXiZ91UcVDbRVg46si6M.mft (raw, json)
Hash identifier: xGEUxuwn6l/CNVXaeIxPSFPwqk+dSAqh37B9O6Z5BEo=
Subject key identifier: EC:A4:62:83:E2:50:3D:D9:C5:22:8E:AA:E8:45:58:30:DB:56:3A:9E
Authority key identifier: 8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
Certificate issuer: /CN=8d381c57b09b5e267dd547150db455838eac8ba3
Certificate serial: 0199FDDA1FBB3F187B5A8BF8F7638D282687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
Manifest number: 0469
Signing time: Sun 19 Oct 2025 19:02:34 +0000
Manifest this update: Sun 19 Oct 2025 19:02:34 +0000
Manifest next update: Mon 20 Oct 2025 19:02:34 +0000
Files and hashes: 1: jTgcV7CbXiZ91UcVDbRVg46si6M.crl (hash: h3Uyj6v++HvW9gAzUAiKVBzG86+xBK0lt7buwTJnxWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:1f:bb:3f:18:7b:5a:8b:f8:f7:63:8d:28:26:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d381c57b09b5e267dd547150db455838eac8ba3
Validity
Not Before: Oct 19 19:02:34 2025 GMT
Not After : Oct 20 19:02:34 2025 GMT
Subject: CN=eca46283e2503dd9c5228eaae8455830db563a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b2:b3:de:2a:e0:3f:a2:c8:95:ef:01:3b:b3:
3e:a3:90:9e:41:82:6f:66:a2:4c:7e:c7:19:8b:62:
02:46:2c:d9:c3:d8:80:52:69:19:bd:32:f5:56:0a:
f2:d9:19:69:26:9b:59:1c:a1:b2:40:98:e2:e4:5c:
86:47:8b:fb:61:fb:70:7e:5c:8a:8b:49:c0:c3:3b:
ca:f3:5b:98:63:54:ce:de:9b:a8:33:b7:85:ac:c8:
c0:d5:51:bc:87:c8:3b:41:d1:ec:95:9d:2a:67:a1:
86:8e:6d:83:ff:5d:50:0a:06:3c:34:e7:b3:5c:65:
10:82:3c:7a:4f:88:3a:5f:70:2b:6d:4e:35:83:4b:
9a:35:85:d7:89:67:31:e5:09:ee:67:47:90:8a:93:
e8:f6:3a:d9:f2:69:14:de:b3:03:ac:e9:2e:78:b3:
4b:f0:be:dd:01:00:f7:dd:44:e3:c5:cc:7e:76:16:
7b:a4:ee:d7:2a:af:20:fb:98:6a:f0:c5:5d:98:c6:
3e:a4:e7:06:0c:84:6d:2b:df:77:2f:59:7d:01:58:
23:63:24:05:a3:25:a1:be:c8:1c:c5:d0:82:d2:fc:
e9:67:4e:2f:41:dc:49:25:ed:87:08:25:25:3a:7e:
01:ee:8b:dd:b1:77:4c:41:53:f9:bc:00:0d:7c:df:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A4:62:83:E2:50:3D:D9:C5:22:8E:AA:E8:45:58:30:DB:56:3A:9E
X509v3 Authority Key Identifier:
keyid:8D:38:1C:57:B0:9B:5E:26:7D:D5:47:15:0D:B4:55:83:8E:AC:8B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTgcV7CbXiZ91UcVDbRVg46si6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b5ee32-c703-494d-89c0-6f830269899b/1/jTgcV7CbXiZ91UcVDbRVg46si6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ef:73:98:4c:92:8d:72:54:4c:eb:ef:ff:76:d3:97:34:0a:
54:00:9c:ed:d2:87:32:20:63:6c:11:10:ec:32:40:7c:8e:b1:
02:df:37:54:90:ed:c1:d8:bd:59:1f:49:e0:40:d7:34:d8:a6:
86:59:40:27:ad:55:f7:b3:10:77:b7:ac:76:c2:9d:7f:04:87:
56:c4:40:33:98:28:2c:57:5f:ec:92:c6:12:fa:17:8e:54:ce:
29:96:3c:dd:a1:47:bc:0d:1c:0b:0e:60:ea:b2:cb:f6:76:29:
c9:e7:8f:9e:b5:60:60:c8:f8:6a:69:23:41:ac:3b:b7:b9:23:
5a:94:2b:f2:1a:52:3c:10:5a:9a:b0:61:9e:5f:72:a6:c1:4c:
19:bb:23:14:91:78:00:c3:8d:fc:9a:84:95:03:6f:53:ec:69:
18:ef:39:6a:d8:fd:f5:f7:61:ba:04:ed:20:b4:ed:e1:23:6f:
cc:14:07:ed:00:68:9a:1a:f9:07:92:67:b5:85:48:9f:c0:19:
1a:98:b4:c8:72:d3:f6:47:b4:39:23:45:79:17:7a:a7:68:f6:
c2:73:41:b9:07:c8:80:37:d2:ea:4c:1d:a2:57:e6:20:1f:d0:
b5:a2:ad:07:14:6c:d6:07:0d:e1:b2:1f:a1:a2:dc:ae:80:d6:
e0:f4:10:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:25 2025 by rpki-client