Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
File: jTQC6uAnq82SYJDMDd7_gKq5LDU.mft (raw, json)
Hash identifier: B8YO0OKlaDHIe2rz+ugR9wX8BxcQjzbA9f8vGkFifSw=
Subject key identifier: 58:3E:64:D5:5C:51:7A:41:9B:59:DA:F7:9C:65:8F:E2:7F:AC:31:00
Authority key identifier: 8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
Certificate issuer: /CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Certificate serial: 0199FF599BBA25894338E4B1B1BB13F50898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
Manifest number: 087F
Signing time: Mon 20 Oct 2025 02:01:26 +0000
Manifest this update: Mon 20 Oct 2025 02:01:26 +0000
Manifest next update: Tue 21 Oct 2025 02:01:26 +0000
Files and hashes: 1: N99N5uWMIrQ8LjCJuNOmsU4YHrA.roa (hash: Vxcy3FAQ9wvKVutRhz6cjFdOl9fvO+V6qA+CiMGZesU=)
2: jTQC6uAnq82SYJDMDd7_gKq5LDU.crl (hash: KNDXO2peFsryZR86Nf3HyYcHvntDeC2jnEj3HWLSQp4=)
3: rOnq86dV2BXa4tQU-vqcTAdf2VM.roa (hash: nUAAXheN4rY8m+/9k6ldoGDPKA5ssts8flzhVGQ+fHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:9b:ba:25:89:43:38:e4:b1:b1:bb:13:f5:08:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d3402eae027abcd926090cc0ddeff80aab92c35
Validity
Not Before: Oct 20 02:01:26 2025 GMT
Not After : Oct 21 02:01:26 2025 GMT
Subject: CN=583e64d55c517a419b59daf79c658fe27fac3100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:25:43:83:c0:17:5b:04:76:ff:19:ec:f2:4f:
6a:94:8c:7b:5f:08:d5:71:60:a9:3b:4b:24:d0:8e:
de:63:47:a6:ed:28:b5:b1:8e:de:c0:eb:7f:02:bb:
54:a6:7d:05:2f:cb:6f:4d:d3:4a:fb:cf:ab:41:a4:
3a:ce:28:ac:73:6c:16:30:10:28:9c:27:d2:e4:73:
a5:96:c7:8d:c7:30:3b:13:66:39:de:49:94:d0:d6:
0a:59:ba:02:88:fd:d8:19:7d:77:4e:62:db:4c:52:
2d:1d:70:d5:24:bc:c5:e8:cc:1d:f7:9e:f7:e7:d7:
84:97:21:62:5d:5b:90:38:16:b3:a3:6f:8e:22:67:
de:67:05:09:19:81:7f:40:ae:60:ef:26:28:92:1d:
ba:45:94:cd:f9:6b:52:41:30:53:eb:84:23:5c:37:
1f:16:c5:55:0a:11:37:39:9d:69:3d:36:dc:ec:ca:
07:cc:7b:a9:95:61:4f:46:9c:89:66:48:0c:85:6f:
c0:b8:83:fc:3c:55:3e:01:9a:fd:52:31:00:67:31:
36:26:06:91:aa:59:a2:ae:60:dd:53:ec:25:6d:35:
a0:96:bf:17:75:9e:51:cc:49:60:2c:f5:98:84:70:
12:da:4a:89:1f:3a:12:0c:34:6a:e1:7f:f9:cd:dd:
38:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3E:64:D5:5C:51:7A:41:9B:59:DA:F7:9C:65:8F:E2:7F:AC:31:00
X509v3 Authority Key Identifier:
keyid:8D:34:02:EA:E0:27:AB:CD:92:60:90:CC:0D:DE:FF:80:AA:B9:2C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTQC6uAnq82SYJDMDd7_gKq5LDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/558348-4912-4bc1-8e58-f92d7dc37d2e/1/jTQC6uAnq82SYJDMDd7_gKq5LDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:51:32:93:d2:09:f4:c5:b3:61:c2:ec:f4:ae:10:14:f6:37:
29:cc:b5:a4:05:67:40:24:f8:12:d4:e3:42:6b:1e:4b:a4:74:
6b:c1:c9:f7:af:16:75:d9:6e:d2:65:2a:b1:d5:5b:9e:9e:e4:
ff:6d:23:f9:94:b6:fb:b9:74:11:8a:35:b4:d0:31:c1:be:c8:
77:c5:3d:9e:b2:44:cd:6d:54:0d:4c:c8:94:e2:04:c4:f2:1e:
63:91:a6:e5:19:ef:28:74:6f:8d:d4:d2:6e:50:e1:6f:11:62:
3a:62:6d:e6:4f:84:84:0a:38:e0:0a:d0:0a:c7:07:18:12:0f:
51:cd:db:4f:20:68:05:de:e0:f9:47:8c:9e:49:d6:54:83:10:
43:3e:46:f4:c3:ed:b9:44:b2:57:de:03:72:31:2f:ae:15:32:
21:bb:e0:03:17:e2:72:a2:27:67:45:09:3b:b3:38:4d:4b:b4:
3f:6f:83:d8:9b:43:e8:74:4b:8c:e0:4e:c6:54:02:fd:cd:82:
00:90:f5:62:a6:14:0a:32:25:d9:ac:b2:b3:f4:e9:6a:7e:39:
00:f5:4b:aa:be:9f:75:e3:11:9f:44:87:5a:8b:5f:3d:12:28:
05:f3:67:9f:f7:c7:6f:9a:75:ee:1d:ff:09:93:62:34:ce:2b:
c5:ae:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:39 2025 by rpki-client