Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
File: jJbGavMxyYW4WdQDs2l0wGMuHvI.mft (raw, json)
Hash identifier: 3bRuE4xTAvhDaqFbPrmwPzTkoJH0gbwpwY6pgHJSmYg=
Subject key identifier: 75:26:79:A8:6E:B1:AD:95:59:94:43:11:42:F9:4D:B4:39:E5:65:B1
Authority key identifier: 8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
Certificate issuer: /CN=8c96c66af331c985b859d403b36974c0632e1ef2
Certificate serial: 0199FC2196B5BC7030B8758754DDDAF5A7A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
Manifest number: 16C8
Signing time: Sun 19 Oct 2025 11:01:23 +0000
Manifest this update: Sun 19 Oct 2025 11:01:23 +0000
Manifest next update: Mon 20 Oct 2025 11:01:23 +0000
Files and hashes: 1: OV-AMO3Wew1LOASAO_xSAQJuMvc.roa (hash: pDYao8tFGgol2DLvIqm+Rs+SsksTdM4poXB//8rVKls=)
2: jJbGavMxyYW4WdQDs2l0wGMuHvI.crl (hash: ctWUJpK6m2hQ2OQLhvfrSPvXoPzy19LgQK+pvBZ7Irw=)
3: rBSzUOINd2m6Fe0adonryiHnJmQ.roa (hash: 7uuLF1A7YhEI7aXW9wxB80gtnkWtzrOwm2g4cLYcmzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:96:b5:bc:70:30:b8:75:87:54:dd:da:f5:a7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c96c66af331c985b859d403b36974c0632e1ef2
Validity
Not Before: Oct 19 11:01:23 2025 GMT
Not After : Oct 20 11:01:23 2025 GMT
Subject: CN=752679a86eb1ad955994431142f94db439e565b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:82:b0:09:b8:e5:d5:8b:fa:cf:40:57:4d:
16:b8:0d:41:c4:3c:2c:f0:4c:c6:2a:cd:17:cc:80:
2a:72:c6:17:57:ea:8e:fe:fd:4c:44:f3:fe:46:b5:
b4:aa:62:63:f5:ec:94:e1:2d:5b:cd:d4:78:fd:1d:
00:bf:1b:fe:1e:4e:8c:fa:c9:cf:5e:b7:86:8e:eb:
21:08:30:f4:1c:6c:ed:fa:19:0b:8a:d3:94:4a:1d:
19:87:75:22:cd:3a:93:e8:f9:b0:88:6f:64:06:7f:
fa:e1:40:db:7c:88:10:14:e5:24:3a:c8:39:8b:ce:
69:55:36:cb:cc:d4:c4:8b:f3:57:38:71:6e:59:06:
b3:4f:d7:1e:d8:fe:11:2d:cf:ba:93:d2:6f:fe:a5:
fb:2f:ba:0d:9f:6d:d2:3b:58:67:b1:b8:99:ce:e7:
1c:1d:57:6e:33:88:08:7d:bc:6b:b6:02:5a:f4:b7:
4e:68:1b:91:33:40:ca:d0:01:e2:ba:89:90:6d:8d:
21:9b:f5:4b:8f:a3:86:ea:2d:0d:e7:95:96:71:0d:
d5:e4:11:d3:7e:a7:dd:8d:8c:bd:b9:cc:7d:ec:d3:
11:61:bd:af:e8:d6:84:5c:0a:6c:2d:c4:e2:c9:e6:
2e:b1:b6:e3:eb:35:1b:08:96:fb:d0:6f:e2:2b:77:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:26:79:A8:6E:B1:AD:95:59:94:43:11:42:F9:4D:B4:39:E5:65:B1
X509v3 Authority Key Identifier:
keyid:8C:96:C6:6A:F3:31:C9:85:B8:59:D4:03:B3:69:74:C0:63:2E:1E:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJbGavMxyYW4WdQDs2l0wGMuHvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/97e057-0f60-4aaf-9a48-83a44310a964/1/jJbGavMxyYW4WdQDs2l0wGMuHvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3a:a7:17:03:39:80:3e:46:b2:d2:1a:59:b3:4b:c2:88:7f:
3b:93:8e:50:8f:31:59:68:75:38:e2:2d:ba:99:39:f8:66:a6:
87:f5:28:dd:07:79:e3:d4:41:5b:85:89:47:63:4d:96:b5:d4:
5a:a9:10:2d:7f:3d:d8:4b:42:ff:9a:68:32:b4:38:fd:28:e4:
d2:c3:3d:3e:2f:36:87:5b:34:01:c4:09:28:58:83:5f:26:ba:
6d:c1:39:59:ad:f8:9c:93:89:21:aa:8f:f0:2d:70:88:ab:1b:
a9:a0:19:d7:7e:8d:93:6a:5c:4c:bc:06:ff:4f:e2:dd:39:85:
43:8c:02:3d:e4:ba:b9:64:60:d4:90:2c:80:e2:29:91:c1:fa:
ca:76:a2:f3:10:ae:28:c7:b9:ec:3b:ee:bc:81:5f:3f:8b:22:
e8:43:78:1b:c2:ef:dc:96:6f:ff:5e:3f:cb:13:4f:25:95:a8:
6a:44:42:fd:6c:ce:f4:ac:a4:8c:87:04:9a:b0:50:4b:2f:71:
09:e3:3e:a0:38:34:cf:ee:63:07:53:69:e7:e8:96:e7:55:16:
90:3f:10:48:77:3f:1b:96:61:73:0f:d1:fe:f4:19:87:2d:c5:
97:2f:ed:1e:e4:92:2d:d9:68:40:75:7d:d4:18:21:9c:70:c3:
5b:a5:f8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:55 2025 by rpki-client