Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
File: jZCoyIbumsQjhhb5JjHruLx243E.mft (raw, json)
Hash identifier: W6PaIZ3ob0BuIkPHq+42xFKNOO8wuKoqVMjVqmvrseg=
Subject key identifier: 04:FF:68:CD:5B:A5:2A:EA:6B:90:A6:67:1A:0E:25:48:91:F6:E2:ED
Authority key identifier: 8D:90:A8:C8:86:EE:9A:C4:23:86:16:F9:26:31:EB:B8:BC:76:E3:71
Certificate issuer: /CN=8d90a8c886ee9ac4238616f92631ebb8bc76e371
Certificate serial: 0199FAD84259C421FEC2D5731C5CC658EB7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
Manifest number: 9F
Signing time: Sun 19 Oct 2025 05:01:40 +0000
Manifest this update: Sun 19 Oct 2025 05:01:40 +0000
Manifest next update: Mon 20 Oct 2025 05:01:40 +0000
Files and hashes: 1: jZCoyIbumsQjhhb5JjHruLx243E.crl (hash: 7iiSwv/+7gMuY+e/lLuUxwKxbRM/lySPA+Q6lbCHCdo=)
2: usm9wn0ranV8cJoAdmlA0D2Pk2s.roa (hash: lnjChVLXxICPBgsN6v1LDI5Ki8JFy1bjGXMD/7hIN1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:42:59:c4:21:fe:c2:d5:73:1c:5c:c6:58:eb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d90a8c886ee9ac4238616f92631ebb8bc76e371
Validity
Not Before: Oct 19 05:01:40 2025 GMT
Not After : Oct 20 05:01:40 2025 GMT
Subject: CN=04ff68cd5ba52aea6b90a6671a0e254891f6e2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a5:4c:1c:06:76:a2:27:bf:64:7b:ab:54:cb:
36:99:c9:c1:bd:8a:69:b8:89:15:fa:25:58:b4:29:
d2:96:7b:dc:a6:03:72:1b:eb:e3:5c:29:18:c8:4b:
64:aa:33:72:d6:8e:6c:9c:4c:3f:08:71:7f:d6:c1:
97:aa:00:37:b2:17:35:19:a6:d2:e0:1d:05:19:f6:
b1:a5:c6:74:0f:17:9e:24:a7:75:c5:92:00:a0:e8:
af:44:f9:fd:9e:be:1c:fa:7d:50:5a:c2:7e:ef:49:
37:f7:6f:29:8a:4f:16:22:5e:b5:a7:fc:e7:f6:be:
06:84:9f:d0:79:1c:a0:2d:a8:47:ca:e7:fb:12:18:
be:ec:ee:fa:b7:cf:93:de:c9:48:37:d5:57:2a:95:
a8:14:64:f1:3b:dd:31:11:e5:11:4e:64:45:6e:b4:
76:e8:80:01:a5:6b:da:d1:05:37:fb:df:a7:f1:3b:
a9:3c:6d:e2:79:52:40:56:eb:18:b0:30:b9:47:10:
47:a7:fd:e7:53:20:b1:25:53:21:5e:c7:3e:1a:c1:
2c:2f:3a:f3:e4:0f:97:fa:83:91:85:4e:85:b0:c7:
bc:d7:45:08:13:77:9f:fd:fb:39:92:cc:7a:2e:76:
c4:d4:a9:76:5e:37:59:c2:a3:02:fd:93:7d:db:09:
db:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FF:68:CD:5B:A5:2A:EA:6B:90:A6:67:1A:0E:25:48:91:F6:E2:ED
X509v3 Authority Key Identifier:
keyid:8D:90:A8:C8:86:EE:9A:C4:23:86:16:F9:26:31:EB:B8:BC:76:E3:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZCoyIbumsQjhhb5JjHruLx243E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9b0ed7-9fd6-4ca6-a575-36aa91069cbd/1/jZCoyIbumsQjhhb5JjHruLx243E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f3:ba:55:98:bb:e2:1e:58:b6:5c:85:16:b9:3e:b9:2c:10:
78:da:7a:13:a0:c1:d0:16:9f:49:65:f4:72:40:c3:00:f4:34:
19:3f:75:48:65:7d:0e:60:3e:19:d1:a8:2c:82:4e:4e:a8:d0:
24:b3:fd:b5:13:3f:e0:71:22:42:e9:57:d1:d4:1e:3f:b8:d5:
2f:d2:04:2c:7d:1a:39:df:48:dd:eb:ad:12:22:da:a4:8b:e7:
10:da:52:42:45:7b:9b:be:f1:8c:d3:75:e4:b1:ec:73:ba:47:
65:43:89:e0:1a:0e:ea:5f:d2:70:30:da:bc:3a:f4:6f:9c:a4:
dc:89:58:ca:ed:4f:91:6d:3f:7f:bf:1f:6b:74:93:35:96:4e:
48:9d:12:60:0d:8a:72:1b:c7:0b:18:65:ac:fe:88:86:ff:4a:
3b:74:4f:24:a4:19:ca:25:f9:56:3a:f1:b5:1c:c0:32:60:ca:
9c:4f:8f:03:d8:1e:bb:c4:7a:f6:dd:f3:2b:62:15:4c:e4:5c:
99:68:52:a8:ec:4e:33:8a:7a:78:d7:84:02:05:ee:90:19:22:
a2:12:c1:ff:ad:c2:6a:dd:9b:8b:ad:e5:f0:4d:fd:b5:b7:db:
77:5a:39:e4:d6:83:20:8c:05:db:06:9d:30:17:03:c8:a4:9d:
8b:07:f7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:53 2025 by rpki-client