Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
File: j9OPtNO5osfI__WXcYyQW54vhM0.mft (raw, json)
Hash identifier: zwlB1d7DTpg81G9pJmbEPFI2p89GEz2cYFrp3I8lB/A=
Subject key identifier: 97:A8:74:AE:14:EB:18:56:83:D9:24:31:3E:06:1C:2F:D1:2F:71:D9
Authority key identifier: 8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
Certificate issuer: /CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Certificate serial: 0199FDD9F3F0427A6F0486340A33FA025E7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:02:23 +0000
Manifest this update: Sun 19 Oct 2025 19:02:23 +0000
Manifest next update: Mon 20 Oct 2025 19:02:23 +0000
Files and hashes: 1: j9OPtNO5osfI__WXcYyQW54vhM0.crl (hash: 92Hq90xEMk4UxsdDNSr7YTVvYyhGuOjgGOULIyresUA=)
2: vckMl2OKOufIYLA6xJgut9gT3f0.roa (hash: onDVG2ZFT5wXt5G5Co8mfB4Yy/QhekuAbPP/p4mZSXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:f3:f0:42:7a:6f:04:86:34:0a:33:fa:02:5e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd38fb4d3b9a2c7c8fff597718c905b9e2f84cd
Validity
Not Before: Oct 19 19:02:23 2025 GMT
Not After : Oct 20 19:02:23 2025 GMT
Subject: CN=97a874ae14eb185683d924313e061c2fd12f71d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:cc:2f:c0:9a:97:13:8e:56:35:fd:34:fa:
10:e5:2d:d2:2a:be:f3:7f:82:01:50:ab:78:16:f3:
8c:23:97:85:cb:85:d6:0b:83:4f:f3:5d:cf:fb:df:
cb:1d:77:07:b4:60:86:49:56:05:81:25:19:41:37:
f1:90:d9:c4:e1:fb:33:5b:28:39:cc:7a:dd:d6:b0:
05:7e:7b:93:d2:2d:f6:8e:c0:0d:81:d8:dc:57:88:
91:d3:bb:89:aa:c4:25:b5:55:61:0b:db:0b:af:ff:
16:95:91:fa:d9:c0:47:5c:07:72:83:35:6c:ef:dc:
d6:14:79:80:48:7f:1a:7f:3c:dd:2b:e1:a8:6e:55:
6f:f8:17:da:4d:ec:a9:0f:b3:67:63:ac:5e:c6:73:
54:f3:2a:16:b3:19:fc:65:c9:a4:4f:90:e9:18:bb:
c3:f1:ac:ba:7e:d3:90:c0:80:aa:8d:68:9d:80:66:
d3:c0:df:b4:1f:a2:32:bd:06:55:82:3c:91:2b:88:
58:7c:c1:94:3d:f7:17:27:97:df:25:9f:af:8e:ea:
10:60:a4:7c:2c:a9:d8:c8:7c:19:07:57:cd:61:8b:
78:c1:97:85:8a:25:36:7b:1b:02:54:5b:f9:7d:a2:
0a:54:20:70:dc:6b:ea:10:82:2d:c5:95:0b:c4:73:
db:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A8:74:AE:14:EB:18:56:83:D9:24:31:3E:06:1C:2F:D1:2F:71:D9
X509v3 Authority Key Identifier:
keyid:8F:D3:8F:B4:D3:B9:A2:C7:C8:FF:F5:97:71:8C:90:5B:9E:2F:84:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9OPtNO5osfI__WXcYyQW54vhM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/beaf9d-5b28-4df4-b67d-6a7fa82296c9/1/j9OPtNO5osfI__WXcYyQW54vhM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:df:55:2b:d1:d0:fe:7a:b8:a9:7c:12:59:71:52:10:82:d2:
06:78:dd:94:4b:99:08:b4:d1:7c:a0:5c:60:a4:ee:56:ce:46:
d6:fb:9a:7d:00:4a:b3:2d:e3:7c:b8:5a:7a:f5:65:85:34:41:
ec:3d:36:74:6e:54:6e:96:11:c6:3c:7f:df:5d:19:31:55:46:
3c:ac:87:29:1b:1b:fe:71:61:b8:a3:db:0f:30:e4:a1:8c:59:
4f:68:75:85:8c:6e:b7:de:94:13:c9:bc:e3:3c:a6:7f:59:9b:
9c:dc:29:1f:85:c7:6b:3d:50:36:95:f8:ca:7f:5e:28:63:45:
d4:ef:4b:99:66:69:45:27:7c:d8:a4:1f:74:98:e0:17:2c:9e:
49:d1:84:6a:86:5f:c1:74:6c:0d:c9:2c:19:2e:1b:86:4d:72:
3d:d4:5b:25:2a:45:0c:f3:a1:3b:90:1b:e3:a2:49:ab:a0:c1:
87:35:04:f8:ab:97:c2:bc:09:ed:92:b3:e2:5c:9c:f3:12:d0:
59:01:7f:cc:2e:c4:37:5b:d3:c3:02:cc:93:2c:ca:59:1d:b6:
86:70:49:aa:3d:77:d4:57:3c:eb:d8:db:e4:0f:76:6d:5b:df:
a7:ba:cc:2e:ad:77:af:8a:6b:55:b8:c2:37:6c:49:64:62:66:
81:6e:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:54 2025 by rpki-client