Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft (raw, json)
Hash identifier: TRiqVgjOJNhGrD9IVblYemU74cSHdZdS23R5ZRYp8HU=
Subject key identifier: 81:9A:34:B4:CA:8F:D9:69:8E:B3:76:9C:E2:67:91:AD:4E:64:37:DE
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial: 0199FDD9CE2E353367F5AC13F48196F057F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:02:13 +0000
Manifest this update: Sun 19 Oct 2025 19:02:13 +0000
Manifest next update: Mon 20 Oct 2025 19:02:13 +0000
Files and hashes: 1: ReBd6XpLAEdQnq22AyigT28YEek.roa (hash: RhoXTgASpblnjFEdfG3nqoqUpEixf7i2FKnJEh2Jo/g=)
2: sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl (hash: ocaXx50Okp4PtEe58DKtPmMhWRa8XTfgmrFu/aQXkLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ce:2e:35:33:67:f5:ac:13:f4:81:96:f0:57:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Validity
Not Before: Oct 19 19:02:13 2025 GMT
Not After : Oct 20 19:02:13 2025 GMT
Subject: CN=819a34b4ca8fd9698eb3769ce26791ad4e6437de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:13:40:ca:2b:0c:ab:03:3f:71:47:f8:02:e2:
49:c6:da:85:e6:dc:98:8c:86:45:ba:58:f3:1a:07:
71:0e:e5:f9:95:5b:b5:99:fc:ca:52:19:41:de:fc:
56:8f:9d:6e:f0:d4:f3:4b:90:ba:cf:5e:64:29:b6:
d5:f4:75:1a:4d:53:21:44:6f:6c:0e:c7:f3:1f:8e:
09:6d:ef:db:f8:88:0f:9a:8c:72:67:4d:00:b5:23:
44:c9:76:4a:4a:ac:22:c6:f8:25:49:6d:1f:c1:68:
25:6d:d8:7e:54:48:af:33:50:ed:c9:d9:7e:6c:91:
f2:83:a0:13:b2:67:d8:36:1c:ba:0e:b7:ea:9c:48:
b2:35:82:d9:56:2a:9a:e0:5f:fe:9c:e8:35:9b:34:
d1:34:09:24:c7:52:a8:d7:26:e8:dc:b5:fb:b1:01:
de:30:1c:2e:cd:80:6a:4d:73:07:ee:5f:fe:67:43:
4f:e9:c0:a3:a5:1e:e5:3a:da:ef:37:c1:f2:ae:7b:
da:e8:6e:dc:f7:ca:14:92:16:73:cf:cd:bc:2b:82:
0e:16:80:68:b0:a1:8f:7b:0f:21:e0:30:75:0d:2d:
e3:cb:5a:56:08:5b:b2:a3:de:73:f7:e2:7e:81:66:
0b:9f:40:19:5d:c0:4f:ca:bf:4b:55:66:83:96:0c:
90:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9A:34:B4:CA:8F:D9:69:8E:B3:76:9C:E2:67:91:AD:4E:64:37:DE
X509v3 Authority Key Identifier:
keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:6f:28:f0:ac:89:e8:a8:2f:18:5a:7e:1c:40:28:f9:41:23:
82:a2:71:9e:87:29:ab:1d:d0:0b:f8:9d:ba:6f:5c:ea:7e:4c:
7f:ab:8e:d1:68:6f:d6:13:2e:27:a3:73:a1:a3:32:9f:1e:d0:
30:2f:1f:a0:7e:73:de:62:a5:8a:57:fe:8d:94:49:af:ac:f4:
5c:8d:1d:04:00:d0:00:00:21:16:dd:92:a9:ec:6b:5c:da:54:
87:9b:a2:7b:58:98:d2:aa:47:c6:62:db:d3:a9:c7:08:2c:4b:
00:27:00:37:7f:56:af:ea:64:26:3b:4a:57:71:a7:12:b5:be:
f3:7e:39:4f:15:9b:a6:3e:ee:24:48:27:0a:0e:0d:be:4f:57:
07:7d:bd:d2:61:25:71:b6:4b:e0:52:23:4a:f4:1e:73:78:7a:
6e:e6:57:c5:f2:6a:1e:7b:f6:e9:3d:48:c5:93:6e:87:81:38:
28:77:98:b3:3b:a6:3a:7b:9f:86:1f:77:2b:eb:95:c2:a9:fc:
8c:d7:b9:be:2f:65:fd:51:0f:01:cf:97:a1:7d:3a:fe:c8:23:
34:42:8c:d0:12:cf:55:c8:18:bf:6b:b8:3a:61:a9:16:68:cf:
90:32:e1:ff:61:3c:ea:08:b0:c7:4e:54:08:c5:7f:12:d3:78:
da:ec:85:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:43 2025 by rpki-client