Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
File: jnruNVn8wxv-137s6LdHnI6Fals.mft (raw, json)
Hash identifier: h8HJ1/Fxl9JE09LKQumsJ9BDM2cUGmKVgTkq/9Ah81g=
Subject key identifier: 80:BE:43:19:34:8B:5E:86:B3:3C:BF:B7:72:4A:B9:53:4C:69:9E:38
Authority key identifier: 8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B
Certificate issuer: /CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
Certificate serial: 0199FCFDA32429A3245B06CDFD3A3C0D3346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 15:01:44 +0000
Manifest this update: Sun 19 Oct 2025 15:01:44 +0000
Manifest next update: Mon 20 Oct 2025 15:01:44 +0000
Files and hashes: 1: LOaUW2EiiQcwyCw-rJigudzub6k.roa (hash: RdbP2I4p2rkiwtFqPpCMDtwplJx26+Pix0+Jf5B+brg=)
2: jnruNVn8wxv-137s6LdHnI6Fals.crl (hash: S4IyzNUbt/ha7OSceklA4WJTWsCo8E82HeDhuDXCXeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a3:24:29:a3:24:5b:06:cd:fd:3a:3c:0d:33:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7aee3559fcc31bfed77eece8b7479c8e856a5b
Validity
Not Before: Oct 19 15:01:44 2025 GMT
Not After : Oct 20 15:01:44 2025 GMT
Subject: CN=80be4319348b5e86b33cbfb7724ab9534c699e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:7a:d7:e3:bd:6a:20:b6:09:e7:62:d0:4f:
40:16:91:53:bd:e2:22:64:46:70:b9:ed:88:72:f6:
35:ca:66:5d:19:1c:56:93:3d:2c:53:0f:43:71:40:
ec:7d:43:ce:e6:76:01:79:3a:81:ab:66:1a:9b:78:
f8:3b:41:cd:b7:8b:e1:46:4d:72:99:02:49:18:91:
b7:a8:3b:7a:c8:b6:43:f1:7a:1e:e9:f1:df:15:3c:
0d:71:68:12:17:16:51:b0:31:90:36:df:aa:43:d4:
2a:34:c3:69:8e:9e:11:88:b2:b0:5f:d7:19:46:14:
3a:e2:e5:20:2b:c0:55:2d:fd:7f:37:02:73:15:29:
15:6a:38:0b:26:08:eb:16:cb:a0:9c:da:43:2b:bf:
45:76:41:af:ef:a0:d7:12:0e:60:85:36:46:a2:76:
1d:dc:24:0d:f6:65:3b:2c:eb:91:af:dd:8d:5c:ca:
f5:d2:f5:96:42:c9:38:59:83:10:5d:2d:11:92:4d:
82:5a:d0:82:b8:a8:d0:b9:78:e8:83:b6:b9:a3:41:
f0:c4:a9:70:e5:59:2d:23:0f:e9:d8:b7:eb:99:47:
54:3f:b8:b7:51:b6:c5:d7:51:d7:4b:25:a1:8e:9e:
73:a1:bc:95:6a:ab:a5:eb:fa:85:ac:67:c1:ff:28:
49:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BE:43:19:34:8B:5E:86:B3:3C:BF:B7:72:4A:B9:53:4C:69:9E:38
X509v3 Authority Key Identifier:
keyid:8E:7A:EE:35:59:FC:C3:1B:FE:D7:7E:EC:E8:B7:47:9C:8E:85:6A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnruNVn8wxv-137s6LdHnI6Fals.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/jnruNVn8wxv-137s6LdHnI6Fals.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5a:b7:c7:1c:f4:ff:ba:ca:1a:2b:ed:58:9c:9a:2b:9b:4d:
1c:47:20:01:b4:5b:61:6b:8f:db:6d:93:a8:f1:14:33:ad:f3:
e4:03:d4:a7:9b:59:9e:3c:c7:dd:f0:f7:84:15:2f:80:4f:1d:
78:49:4d:47:6e:0d:ab:9f:ca:4c:5d:cc:8a:64:41:56:3a:c1:
3f:90:84:f0:a5:5f:9e:7b:57:1f:32:09:7e:36:c1:8d:c3:79:
ba:f2:6a:8e:64:5d:eb:ef:20:79:c2:40:b9:e5:d0:df:bc:ff:
52:b8:da:0b:f9:5d:90:e1:04:99:de:dd:6d:4a:24:e2:3c:2a:
e0:0f:c2:86:ba:f3:d3:83:b4:a4:b7:41:e7:6b:12:6b:91:44:
eb:7a:72:1d:4f:36:cf:80:3d:9e:bb:66:97:d0:dd:0d:5d:ff:
48:0f:7d:90:9b:f4:43:2e:86:96:e2:84:2f:33:d0:ce:37:a2:
62:3d:74:29:9f:2c:a2:d4:4f:74:0c:68:25:98:9d:1c:36:5e:
e4:5e:73:2f:59:f9:c6:27:39:32:c6:60:fd:40:f1:6b:f6:0b:
4d:6a:02:53:43:53:ec:ae:f6:36:a0:f6:ae:76:2c:98:ec:07:
10:09:4e:77:57:de:21:c4:5c:fc:20:91:46:fe:7e:cc:47:1a:
e9:0c:0a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:03:14 2025 by rpki-client