Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft
File: jaArHaSqceZbb7m-I6ayCMJcV9g.mft (raw, json)
Hash identifier: WIjYv574UJawKCcXk5bwH7TMQosyItKPiv21sYN4ySc=
Subject key identifier: E4:11:77:89:4A:96:C7:BA:E0:00:15:FC:9A:37:AB:0D:B6:69:4B:68
Authority key identifier: 8D:A0:2B:1D:A4:AA:71:E6:5B:6F:B9:BE:23:A6:B2:08:C2:5C:57:D8
Certificate issuer: /CN=8da02b1da4aa71e65b6fb9be23a6b208c25c57d8
Certificate serial: 0199FC215358A068E61BFF3FF8BAC49C8687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft
Manifest number: 01A2
Signing time: Sun 19 Oct 2025 11:01:06 +0000
Manifest this update: Sun 19 Oct 2025 11:01:06 +0000
Manifest next update: Mon 20 Oct 2025 11:01:06 +0000
Files and hashes: 1: 1UIx6z7jU4irLxLbnLzZBvRy3G4.roa (hash: X1FeAQ5pR3l+YD3ZhmHac/oJWgd/xhCnXQiRD7DlUkU=)
2: jaArHaSqceZbb7m-I6ayCMJcV9g.crl (hash: 5b1arxEfDDjW7l84+j/gfH3CS98l/BnxKUPCnYeekPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:53:58:a0:68:e6:1b:ff:3f:f8:ba:c4:9c:86:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da02b1da4aa71e65b6fb9be23a6b208c25c57d8
Validity
Not Before: Oct 19 11:01:06 2025 GMT
Not After : Oct 20 11:01:06 2025 GMT
Subject: CN=e41177894a96c7bae00015fc9a37ab0db6694b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:68:b8:1c:3d:b8:fe:a7:fa:66:8c:14:aa:3d:
cc:7d:98:ef:f5:92:8b:6d:1e:3e:98:0a:bc:e8:2a:
3e:5e:5b:67:3d:ab:84:6b:c9:03:6d:9f:bd:32:21:
fc:2f:f8:88:91:79:99:d5:cc:bd:d0:50:3b:25:ae:
9d:f3:7c:eb:25:28:a9:e3:99:a9:8f:05:78:f7:ee:
38:3b:a4:0f:34:5c:b3:9f:05:da:b9:05:ca:ec:32:
df:66:2f:74:8a:46:cc:9e:0b:18:7d:a3:e9:8c:7f:
c0:59:3b:45:ff:bd:c5:8e:50:84:d3:50:92:af:46:
02:74:a2:cd:fc:dc:d3:95:7f:a1:f6:1e:e0:f3:a8:
67:cd:32:6a:e2:79:ee:c1:9c:e5:e2:24:0e:2d:13:
84:ca:88:c6:8e:d8:c3:af:21:bc:ad:be:3c:b4:26:
94:9d:40:20:ba:d5:9b:fd:f3:d8:5f:8c:5b:6c:c7:
f8:1c:cf:5b:ad:98:76:02:9a:84:eb:b2:bd:40:42:
0b:bd:a7:b2:b8:94:ab:cc:56:87:fc:13:00:2a:d9:
ae:08:6c:e1:b8:be:30:a5:e4:48:7a:d3:97:80:dd:
26:33:12:6f:fb:97:39:81:4e:2d:91:dc:5c:06:b6:
15:34:3d:05:30:d0:fb:d0:4f:13:83:69:04:cd:dd:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:11:77:89:4A:96:C7:BA:E0:00:15:FC:9A:37:AB:0D:B6:69:4B:68
X509v3 Authority Key Identifier:
keyid:8D:A0:2B:1D:A4:AA:71:E6:5B:6F:B9:BE:23:A6:B2:08:C2:5C:57:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaArHaSqceZbb7m-I6ayCMJcV9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/dba6c5-20e5-4073-853a-c9e29deba244/1/jaArHaSqceZbb7m-I6ayCMJcV9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a2:f7:e1:04:81:1d:76:07:38:77:3c:b3:4c:14:91:77:9e:
36:e5:23:a0:5c:4e:70:1a:58:2f:44:7c:a9:35:79:82:58:bb:
b8:3a:6f:dd:42:da:dc:aa:33:bf:d2:1d:6c:fd:40:59:7d:85:
36:39:02:d6:46:e6:1c:1d:0a:4f:87:e3:8f:f0:45:f3:b2:18:
29:c9:2b:63:36:42:6e:e2:f4:d6:0c:2a:40:5e:d7:73:93:ed:
97:3d:59:71:9c:19:48:8a:8c:01:21:35:68:1e:fb:26:4d:83:
b2:7e:ca:d4:fc:34:d0:a0:7e:46:8b:06:11:67:e8:f1:ac:14:
8d:fe:35:e0:83:2a:d3:1d:11:56:ce:20:e4:a0:b7:af:97:c6:
03:24:83:e6:e5:e4:16:d4:8e:b3:06:28:fc:91:86:73:ac:2e:
c1:8d:a1:9d:8e:0e:ea:cc:2f:bf:4a:a1:09:a2:74:ed:8b:2b:
bd:15:85:77:eb:87:28:e6:ba:36:ac:45:0f:e4:b7:01:c8:1f:
59:4a:07:4a:33:10:fe:d9:02:43:86:aa:88:18:39:bb:c2:8c:
4a:ed:e3:54:18:72:92:f7:79:66:dd:d7:b5:f3:d0:6d:b1:48:
8e:80:9a:b9:5d:89:5f:b4:a4:47:01:cd:2a:7d:64:be:a9:03:
90:96:14:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:59 2025 by rpki-client