
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
File: _JgxNwQvyMSSFwfU622l9sSnmls.mft (raw, json)
Hash identifier: m4MZLl34xCIU6MIGkWMyWQCUV1HLE+iCnlzyrBHS/n0=
Subject key identifier: 2A:EE:60:B7:8D:31:9E:D4:4B:3B:A5:34:34:3D:81:E1:76:BC:F5:8D
Authority key identifier: FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
Certificate issuer: /CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Certificate serial: 0199FAD813E69E22A6B2019AE2C8A44C4DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 05:01:28 +0000
Manifest this update: Sun 19 Oct 2025 05:01:28 +0000
Manifest next update: Mon 20 Oct 2025 05:01:28 +0000
Files and hashes: 1: SXZm8wbMg3xM60shH7B8R-_NnKM.roa (hash: L4R596s7KyX9eES8kDOckvjATz5MXeTWz01yNs2zMaw=)
2: TSzzT-wDXDGDMx-4wmmQgF1l3HA.roa (hash: yUpCizyCuVdygvZFqIzlfSb6NuJnZoyRJzdQ53d5l/A=)
3: _JgxNwQvyMSSFwfU622l9sSnmls.crl (hash: Hj4WfEpHqPmWJMOPbTSy3g91o3H04fbAGKhsniMqr6w=)
4: _L_G56aRVg6nD-NomNA5jLK-OFc.roa (hash: pqPipm6sSmIrz6wz+oGLMWSdr2XRQ9UIYUQfzfKl1sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:13:e6:9e:22:a6:b2:01:9a:e2:c8:a4:4c:4d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc983137042fc8c4921707d4eb6da5f6c4a79a5b
Validity
Not Before: Oct 19 05:01:28 2025 GMT
Not After : Oct 20 05:01:28 2025 GMT
Subject: CN=2aee60b78d319ed44b3ba534343d81e176bcf58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7b:fe:3e:50:a5:7b:f9:61:d5:18:67:3a:5d:
52:da:cd:e7:dc:10:04:b0:15:f0:af:09:20:59:7f:
56:e4:b2:5e:ee:13:f2:ff:b3:d1:af:c9:7e:42:fc:
18:fc:c6:86:e5:67:e5:41:98:e0:7e:d4:57:fd:2b:
6e:ba:3d:6a:80:8c:98:3d:ee:18:52:f7:3d:b5:73:
bd:c6:1c:0e:d3:27:b0:54:a8:50:21:2b:ab:6d:92:
72:b4:c2:d2:9f:9e:c5:93:a5:a1:71:62:46:1b:de:
ef:c6:61:d1:96:fd:e6:b6:04:c1:74:91:dd:89:f0:
ac:08:0d:2c:7d:ba:1d:40:0d:15:c4:b3:33:f3:de:
ca:0d:6d:8d:da:68:bc:d2:38:0b:a2:7f:7f:66:c3:
a9:14:30:66:90:2d:24:86:9d:52:fe:b5:da:17:e8:
01:bf:8e:97:9e:07:67:48:60:2a:f3:ac:bf:4b:a8:
9c:b3:97:65:aa:8a:0b:f2:0b:8f:3f:0f:5d:95:1e:
de:94:a2:51:b6:81:37:57:5f:2b:94:85:54:4e:56:
3a:b9:e6:4a:88:0e:e1:07:24:45:ad:76:a2:0e:99:
a0:ca:93:7a:09:c8:e2:0c:85:0e:b7:d2:67:27:67:
3b:14:12:dc:ea:0c:36:ab:f8:9a:b5:fc:83:98:bf:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EE:60:B7:8D:31:9E:D4:4B:3B:A5:34:34:3D:81:E1:76:BC:F5:8D
X509v3 Authority Key Identifier:
keyid:FC:98:31:37:04:2F:C8:C4:92:17:07:D4:EB:6D:A5:F6:C4:A7:9A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JgxNwQvyMSSFwfU622l9sSnmls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/421c80-ed3a-47fd-8d2c-224f10a981fe/1/_JgxNwQvyMSSFwfU622l9sSnmls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f0:28:49:ad:63:cf:11:eb:b0:85:5b:b1:c0:97:75:4f:b3:
d6:3c:64:ad:d3:d9:5f:9c:cd:8b:ee:cf:bc:c4:61:30:9c:52:
68:01:ed:10:51:79:06:d1:39:2e:fa:06:ab:7c:ad:22:dc:a6:
3b:cb:be:7c:e7:ef:83:2b:31:5e:87:8e:90:65:b9:50:db:ea:
6e:fc:4d:fc:75:63:b5:5c:8d:99:ae:de:b4:e8:ff:32:3a:fd:
1e:5b:67:00:08:30:bf:3d:c0:41:4f:c4:5f:3d:ed:01:35:19:
5c:e9:48:40:2c:b9:cd:d0:64:07:3d:2b:8a:78:07:17:71:fc:
41:3b:93:4d:c5:74:61:fd:a0:54:39:00:ba:35:fe:21:65:c9:
6d:71:52:90:a9:1c:9a:04:b5:30:1c:23:7d:db:f6:7a:a3:c0:
61:53:bd:61:d1:51:c9:b9:33:26:ee:47:37:9a:b7:b0:ea:4e:
e3:29:79:ab:6c:ee:bd:41:c2:c8:57:d6:ae:59:9d:1c:c5:7e:
85:9d:f7:ec:6e:dc:54:f7:a1:f2:f6:37:98:0a:3a:e3:a5:45:
a3:01:36:5c:bc:74:e0:8c:fc:ef:e3:0a:f0:e9:3a:8e:f9:75:
b9:5f:1f:81:25:b6:2d:d7:21:52:61:fb:92:40:ba:3e:e1:1b:
b6:70:56:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:10 2025 by rpki-client