Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
File: Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft (raw, json)
Hash identifier: lggltSNvi1UAJsyM0xcfzGcXhrmaIH+KaEC2mSbafrQ=
Subject key identifier: 6A:68:77:67:DD:4C:21:08:8B:B1:78:6E:DC:85:38:E3:0F:AB:10:13
Authority key identifier: 26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
Certificate issuer: /CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Certificate serial: 0199FB7CB746E8D9E56AEFF0C5B165284B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl (hash: mP8Y0UGaaYVfbBq/CKFGHogyqrD/ZsyxiQiP8fQQbqY=)
2: JsFuF67j5QQhkERyLc9f-ELIcO4.roa (hash: Jr+i8Pi7L5/o/8dCQ8fKEW/EXyo8XR/bahrVO/hjd9g=)
3: k4opLHE596mDmmleF3IyTuI3JYo.roa (hash: FNLuUm2MqOPcBwdnPkx8HwmBWDjGjRFM7nXpuuRMMIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b7:46:e8:d9:e5:6a:ef:f0:c5:b1:65:28:4b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bab8c6915851f4efd40274f742509b7ac7e22e
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=6a687767dd4c21088bb1786edc8538e30fab1013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:33:58:e9:ac:77:da:55:ba:60:2c:e5:8e:
a6:f2:fb:69:40:fd:ae:b8:54:0f:fe:42:71:4f:46:
bc:9c:ad:7d:18:d5:39:0e:2a:6d:36:0b:1b:dd:24:
22:64:21:aa:7a:22:78:0b:87:fd:30:72:38:aa:bd:
c1:a3:c6:b4:0b:de:1d:e9:ec:23:58:22:89:a8:3f:
5d:6b:97:bf:4c:80:27:9e:ae:3d:67:84:48:e5:fa:
77:ef:c7:bf:cf:e8:03:8d:49:a3:ee:c6:de:41:eb:
aa:d3:48:e8:c5:71:1b:b8:7f:33:8e:5c:f4:f7:2a:
71:ed:b0:9e:6c:60:23:69:b2:74:fe:b2:22:de:25:
13:bd:1d:fd:ae:4d:50:52:ba:86:7d:5d:65:28:1c:
50:7c:f2:ab:5a:a7:28:17:77:5b:1d:e5:16:c0:0e:
1f:33:04:39:cc:71:fb:3d:86:16:11:c0:73:46:01:
48:b9:d5:4c:41:64:22:e9:32:0e:f0:15:1f:e9:6e:
15:0e:d7:21:c0:af:67:e2:a5:b2:6b:dc:bc:2c:8d:
fa:d0:07:a9:fb:fd:b3:3f:b2:27:d7:4d:0b:db:3c:
11:e2:bc:42:08:ad:b6:bd:0e:2f:65:b9:04:dd:cd:
eb:ec:18:c5:98:e4:02:d5:54:65:d8:58:e5:5d:00:
ae:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:68:77:67:DD:4C:21:08:8B:B1:78:6E:DC:85:38:E3:0F:AB:10:13
X509v3 Authority Key Identifier:
keyid:26:BA:B8:C6:91:58:51:F4:EF:D4:02:74:F7:42:50:9B:7A:C7:E2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jrq4xpFYUfTv1AJ090JQm3rH4i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a166a7-7d07-409a-aed0-639315dca580/1/Jrq4xpFYUfTv1AJ090JQm3rH4i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ea:01:ed:38:5e:4d:8a:fe:a8:03:83:cf:14:0f:4a:66:e3:
50:d5:9a:24:57:ab:b0:73:ad:16:fe:49:10:65:4f:db:49:19:
f6:d9:02:eb:24:09:e4:6c:76:94:53:78:9d:76:ce:4b:78:b6:
d6:18:b9:cb:6e:e1:bd:44:41:9f:0a:37:97:8d:4a:68:6b:0a:
27:82:63:26:84:78:39:78:81:b1:4c:fc:4e:cd:6a:e5:b9:ba:
a0:ea:82:b0:19:8d:15:ed:90:4d:13:73:bf:79:70:c9:24:6d:
e1:55:96:98:90:e1:95:de:d6:00:c4:6b:fd:67:04:38:48:19:
2a:0a:f1:40:7d:55:c0:cc:74:92:e7:89:9d:d0:12:88:be:2f:
ae:7a:6a:d4:68:da:2c:d1:fe:33:e7:76:80:cf:4b:75:68:1f:
fb:7f:09:a1:c1:08:b2:ec:84:f6:a8:b4:b7:70:bb:2b:75:6d:
d7:d9:52:d3:1f:07:db:a0:68:cb:d1:f7:eb:a7:9e:91:f5:c4:
f6:1b:2f:59:fc:ce:ff:b4:13:00:c0:7b:7a:d7:10:41:dc:8e:
51:9e:2c:2d:57:59:7a:7b:ff:bd:c5:58:15:78:e4:6f:47:64:
a9:0c:3a:4b:0f:00:49:5b:54:03:da:9a:db:f6:84:62:20:cc:
cd:81:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:32 2025 by rpki-client