Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
File: jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft (raw, json)
Hash identifier: zaM4676Dac/0T38Ejia8HvJu4I0/x/jXy5Qf6UrcwMQ=
Subject key identifier: 3A:7F:FC:9C:29:9B:23:3C:FC:FC:BC:16:FA:8B:80:EA:8E:08:4F:38
Authority key identifier: 8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
Certificate issuer: /CN=8d64e43c75bdc511d524f0c85d009cba76956144
Certificate serial: 0199FCC6857302A2C73261F0EA931785EAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:32 +0000
Manifest this update: Sun 19 Oct 2025 14:01:32 +0000
Manifest next update: Mon 20 Oct 2025 14:01:32 +0000
Files and hashes: 1: 2yAjk7p-dI9kSCjYCsJZz8pos8c.roa (hash: fOiEsiSjcE44S/scd+A8XElk8QWI1IgEkT2nPRQh9k0=)
2: WgQVJKeVLT_kgntaKcqG82tQ5Ac.roa (hash: 51Ibz0/tlPs1DjPAcM3P0vri4IWZhMdelX47aEpOyXk=)
3: jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl (hash: ua8hrYvyOfk3WTvHOSkliq8cFLkyzRCKUvs7ysg7B/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:85:73:02:a2:c7:32:61:f0:ea:93:17:85:ea:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d64e43c75bdc511d524f0c85d009cba76956144
Validity
Not Before: Oct 19 14:01:32 2025 GMT
Not After : Oct 20 14:01:32 2025 GMT
Subject: CN=3a7ffc9c299b233cfcfcbc16fa8b80ea8e084f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:29:c7:a6:bc:2d:7c:37:6d:d4:49:8a:ce:
90:3b:a0:44:4f:ad:0b:22:0d:eb:23:23:ba:49:35:
d0:87:81:be:56:73:8c:b7:54:c7:96:c8:a0:a6:e1:
16:8a:75:20:17:e9:ae:da:f9:62:13:96:13:92:44:
f9:de:62:73:8c:2f:d4:b9:da:ad:4c:3d:5e:59:4c:
0d:5c:0d:d7:ab:89:23:7f:80:eb:28:b7:b2:fe:f1:
0d:9b:f1:7f:40:e9:c8:1f:63:a4:68:41:67:43:33:
6e:e0:95:d1:60:f7:08:ba:a0:7f:f4:eb:e4:db:88:
0c:6a:22:da:1c:81:df:d0:f3:e1:ec:16:0d:ec:5b:
4d:6b:95:b5:57:7b:1a:99:bd:5c:99:ad:13:07:3d:
16:29:e1:96:6c:83:73:14:5a:8a:01:f1:e7:00:77:
cb:b9:95:09:b4:90:cd:b5:f6:ad:52:9f:c5:a3:18:
3f:72:c3:ad:b2:f2:77:69:64:98:09:05:f0:40:0d:
f6:c5:a0:48:fd:0b:67:e1:89:ef:9f:32:ff:4b:35:
fd:61:fa:79:ab:49:fd:39:22:f5:5d:9c:76:44:57:
fb:94:43:83:d7:b8:00:70:9f:26:41:8c:8d:f5:0a:
ea:69:96:08:8e:3f:1e:5d:06:2e:1e:16:eb:f7:c4:
d3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7F:FC:9C:29:9B:23:3C:FC:FC:BC:16:FA:8B:80:EA:8E:08:4F:38
X509v3 Authority Key Identifier:
keyid:8D:64:E4:3C:75:BD:C5:11:D5:24:F0:C8:5D:00:9C:BA:76:95:61:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWTkPHW9xRHVJPDIXQCcunaVYUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6f9b09-a59e-4f90-87c7-72448352b807/1/jWTkPHW9xRHVJPDIXQCcunaVYUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:0b:8e:7a:3c:a0:25:74:5b:d0:f3:7d:1a:99:da:b7:8b:c5:
f0:9d:c6:62:18:44:9f:d8:9c:ab:5e:85:b6:40:d9:2f:25:34:
63:a5:0f:f1:6b:7f:f9:78:ec:25:c2:2d:c1:19:40:64:0a:fa:
e3:08:99:53:e9:a7:ae:e9:d9:46:ce:83:02:c7:32:d7:07:75:
49:59:8d:92:47:bc:11:96:39:88:4b:5d:13:3f:3c:a6:2b:7b:
79:3f:a8:9d:89:05:a1:bc:60:cb:18:96:ce:3e:d0:46:9b:54:
6d:4c:27:e8:c1:04:ce:41:c4:19:da:ce:d7:07:5b:4e:c4:35:
1d:89:f4:8f:d0:a0:15:d8:c2:cc:25:62:60:22:60:dd:a2:5d:
72:64:03:7d:76:f8:41:e3:ad:21:cd:d4:03:e1:14:17:f1:cb:
f1:42:f9:18:6c:8f:cb:a6:1f:94:b5:78:c8:12:b8:88:f9:f1:
7a:da:af:7e:bd:26:dc:60:0d:ee:f5:56:8a:a4:35:fa:9d:ec:
1a:a8:08:95:c2:29:ee:40:8c:68:4a:0d:3a:03:58:78:5c:d5:
7b:e9:17:20:c6:c1:27:c0:8d:ab:b3:50:44:be:dc:a9:6a:48:
c9:5d:0e:e3:74:98:6b:c9:4b:6c:21:da:77:64:d3:60:48:3e:
39:32:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:40 2025 by rpki-client