
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: HZtBCtcldmgjqlIDIwbaXPdV4LkelWueZB0JIogJWqs=
Subject key identifier: DE:20:FC:40:4C:00:62:23:32:05:23:28:60:0A:01:37:42:E7:44:07
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 0199FC58DD01B65E84DD4C611CDBBD25A81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 09A3
Signing time: Sun 19 Oct 2025 12:01:46 +0000
Manifest this update: Sun 19 Oct 2025 12:01:46 +0000
Manifest next update: Mon 20 Oct 2025 12:01:46 +0000
Files and hashes: 1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: iNYXoKUOt8DeGkQ1tNAvEr90NuszV5FHZbsEChmVBT0=)
3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:dd:01:b6:5e:84:dd:4c:61:1c:db:bd:25:a8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Oct 19 12:01:46 2025 GMT
Not After : Oct 20 12:01:46 2025 GMT
Subject: CN=de20fc404c00622332052328600a013742e74407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ad:9d:e7:eb:08:66:7d:5c:36:b6:b7:20:64:
e8:c3:f1:eb:4a:dd:b0:47:1f:fe:08:e9:39:ea:9f:
f1:0a:24:73:69:97:9d:b4:b5:1e:d6:8c:ad:d1:d3:
98:c7:9a:14:e3:6e:a8:0b:d6:56:d6:cb:c1:1c:5a:
0b:84:16:da:30:ed:9a:a9:87:61:fa:23:53:18:28:
66:4b:cc:4e:bb:ba:a7:0c:76:80:9c:10:1a:5c:4f:
70:c9:58:ff:92:40:66:25:78:4c:00:8b:8f:cd:ff:
30:af:4e:3d:51:8f:57:d7:61:eb:7f:aa:67:20:82:
a7:08:a8:08:f4:9c:77:19:5b:86:65:ee:80:e5:eb:
59:c1:bb:07:53:06:3d:9a:4f:1d:dd:b4:e2:68:c5:
b3:b5:20:7b:11:39:39:0a:55:0b:65:f8:38:48:12:
f4:17:cc:fb:f8:13:36:dc:c6:b7:15:78:49:88:65:
c8:00:04:97:f5:f2:c0:d3:aa:f7:8f:26:20:17:2b:
8f:7a:76:1f:25:30:a2:fe:d6:ad:9f:82:73:cb:9c:
b0:c8:58:76:6f:36:72:6a:a1:d5:09:aa:67:28:ec:
cd:bd:5d:77:04:78:41:7b:50:09:06:ef:72:3f:bc:
55:4b:ec:ac:60:8b:c9:04:5b:80:97:a6:07:be:6e:
84:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:20:FC:40:4C:00:62:23:32:05:23:28:60:0A:01:37:42:E7:44:07
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:29:ee:c1:04:11:37:9c:00:28:01:ac:9c:65:59:80:71:d1:
9c:92:4a:89:37:a3:48:9e:be:ea:99:5e:e5:60:63:51:cb:de:
f0:65:25:39:1a:30:cf:b1:4a:ce:67:ce:cd:45:32:40:a4:bc:
ce:8b:51:bf:ed:0a:01:69:ec:bf:d2:8a:60:95:05:dd:f4:b6:
30:87:65:28:b0:f1:f9:d6:3a:ec:55:e6:9e:13:fa:9d:1f:39:
40:4c:04:49:bd:1d:da:33:0a:2b:1f:b1:3d:05:ae:2c:c6:c1:
6d:6e:f6:52:7f:2d:15:a6:37:86:21:37:f7:27:13:b6:46:7a:
d9:78:8e:90:61:cd:c2:44:e5:42:30:98:f7:13:fa:23:d6:0a:
06:e2:2c:86:fe:05:92:ec:2a:3a:9c:15:00:36:6d:80:c2:23:
de:cd:e2:06:31:b0:0d:6a:1a:e3:71:00:30:7b:ff:ba:79:e7:
3c:8e:8f:a0:29:71:f9:0f:75:67:ab:e0:f7:ca:56:33:ee:da:
85:3f:87:36:ce:da:5d:37:8f:37:03:c9:66:24:e5:55:03:4c:
1d:7d:71:ec:bc:93:c9:ad:15:8b:1b:d1:a3:bf:b4:2d:77:2b:
10:26:a7:8d:cc:35:5a:b3:5d:fb:ef:e0:c9:b6:2d:a6:8a:77:
a2:07:c9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:41 2025 by rpki-client