Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
File: rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft (raw, json)
Hash identifier: SkItfz+W8om9jlQj/JUx/wfqL6fYUBldt52TCgZ+5Dc=
Subject key identifier: 00:AC:D5:92:5E:A1:5C:FF:2F:C6:FD:88:D6:17:A4:12:A3:01:D4:91
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 0199FBEC1E5338BFA48FA92C9531EA1776FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
Manifest number: 05B0
Signing time: Sun 19 Oct 2025 10:02:59 +0000
Manifest this update: Sun 19 Oct 2025 10:02:59 +0000
Manifest next update: Mon 20 Oct 2025 10:02:59 +0000
Files and hashes: 1: DLu57DZ9WcMMQAmctMKhjMYOA_8.roa (hash: AHuCNcId9Lo6xFcInpQkBT6Qmu0yRSdhlMD93oKCtcM=)
2: S0aXQwzEMfO_byK88_PAIYF0E0Y.roa (hash: zkNEouDr8/eydtpoAL8WuNQuUPE88TuaPOB3fN49Myk=)
3: rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl (hash: hISvxKkW0BLBGZjtWvfeOZZHAaVR3Ulls9QdTs7Kt54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:1e:53:38:bf:a4:8f:a9:2c:95:31:ea:17:76:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Oct 19 10:02:59 2025 GMT
Not After : Oct 20 10:02:59 2025 GMT
Subject: CN=00acd5925ea15cff2fc6fd88d617a412a301d491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:82:64:23:47:30:6e:10:2a:4d:a1:fa:59:af:
62:97:16:4f:88:da:8c:92:b4:3c:b1:64:04:50:f5:
f7:55:76:26:57:7e:da:31:d1:51:26:73:88:1e:c4:
f6:8c:88:fb:dc:b7:10:9d:e0:69:15:0e:68:65:9e:
0a:21:60:04:e3:83:9c:92:ff:b0:cc:53:00:38:7e:
1d:93:29:c2:b0:d2:33:d9:08:ef:f1:a9:d0:c6:c0:
f8:75:b2:16:30:10:75:9f:98:18:47:30:91:8f:f1:
b4:ab:9f:41:e8:f3:4b:87:46:37:77:bf:5c:21:f2:
36:6d:72:17:57:66:4b:5b:b2:ea:a9:4e:04:03:e0:
f5:79:be:6a:81:55:d8:a2:65:14:f1:c7:ef:c1:0b:
83:d5:59:59:6a:33:24:e9:4f:ae:e8:b3:65:39:8f:
94:b9:73:62:dd:1c:b4:b5:ba:85:a1:2c:d0:ec:b3:
86:42:98:3f:90:83:a7:2f:75:80:df:a2:a2:e9:c1:
34:f4:2b:6b:0b:34:44:2d:95:06:18:9c:f8:f9:9a:
52:52:55:c2:57:52:ce:eb:0c:d2:3f:8d:9c:88:11:
bc:ec:94:02:b1:78:a9:7d:8c:81:35:6a:b1:6e:45:
90:8d:2a:42:16:94:1b:6b:44:5b:8d:b1:41:80:fa:
cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:AC:D5:92:5E:A1:5C:FF:2F:C6:FD:88:D6:17:A4:12:A3:01:D4:91
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d5:82:b4:96:09:24:68:b6:09:9c:8f:2d:fe:80:c2:ad:5a:
2d:2c:0f:41:07:63:c7:e6:e2:98:19:cf:84:d2:de:89:fb:a5:
72:51:d6:c5:d0:17:d8:dc:8d:6d:a2:78:84:87:c5:70:b3:ef:
d5:e2:2d:e2:5d:d2:0f:7b:fb:9d:01:c7:63:11:a3:4e:f3:e7:
f4:36:a8:04:18:7f:89:71:29:c7:cb:6b:7a:2d:f4:27:85:ff:
c7:42:ab:10:6d:b4:18:22:54:3f:ed:7c:9c:f4:08:d0:a3:a6:
d6:7a:bf:38:b5:86:0c:40:75:7b:f7:cb:5f:0c:7c:8a:06:98:
ec:5a:ed:43:d9:cb:62:2f:3e:26:2d:76:04:6a:1e:2c:82:d8:
8d:3a:ec:44:db:35:df:e1:d3:e3:19:86:23:df:81:36:1f:2e:
8d:de:93:b5:17:ee:cb:c1:76:f5:3d:f0:74:76:26:f2:ca:4e:
41:21:f7:42:60:ce:3f:82:94:22:1d:cf:8c:ef:d5:e5:4e:75:
aa:d5:8b:46:c3:f8:02:07:6f:52:3d:b8:99:c4:e6:da:0c:88:
f9:52:49:5b:c6:75:ad:7b:33:9b:5a:9c:01:e9:83:5e:b8:5c:
bb:ca:83:a2:72:de:52:70:bc:60:3d:d0:77:0c:20:a7:d8:fa:
d0:68:18:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:17 2025 by rpki-client