
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
File: jsSmfb7XRE3dJ-gA-2whATpbEcY.mft (raw, json)
Hash identifier: Clmddgjf09QkB9DgLlyxzL/0dCwzjh8xfp7m8T9IYx4=
Subject key identifier: EA:91:60:ED:AB:3A:2E:A3:03:31:9B:38:4B:BE:8B:E3:07:19:E1:2E
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 0199FB7C85716E17AE50A15F0B62504EC09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
Manifest number: 1413
Signing time: Sun 19 Oct 2025 08:01:05 +0000
Manifest this update: Sun 19 Oct 2025 08:01:05 +0000
Manifest next update: Mon 20 Oct 2025 08:01:05 +0000
Files and hashes: 1: V9xIuDHmhh7U3tTkSVryBJA5CVk.roa (hash: eyLpVtUoY/mctnpBoqtxHHGp6ollciBlit2BNgnLLmE=)
2: jsSmfb7XRE3dJ-gA-2whATpbEcY.crl (hash: fpm6dPX/0fQY0sqkro56lTv8lMDHDSRGAMzcQPQbJUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:85:71:6e:17:ae:50:a1:5f:0b:62:50:4e:c0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: Oct 19 08:01:05 2025 GMT
Not After : Oct 20 08:01:05 2025 GMT
Subject: CN=ea9160edab3a2ea303319b384bbe8be30719e12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:fc:d2:51:64:c5:61:22:10:1e:72:55:b9:
76:67:1b:74:95:52:fb:39:17:b5:87:93:1b:80:a8:
92:b1:f7:9e:45:c1:39:df:20:47:ea:79:9e:83:77:
d8:59:c1:2c:a2:fc:56:e0:18:f3:da:1a:35:aa:76:
41:6f:cb:b4:2e:af:c4:f2:cd:81:07:d4:e3:8b:a2:
14:65:55:90:f4:69:d5:17:a9:99:83:c2:45:27:54:
87:7f:33:3c:de:73:04:c4:ce:0e:6b:dc:7c:e3:b1:
41:fb:7b:a8:b4:bc:e8:08:4a:ba:a1:bd:4a:18:5c:
53:71:48:f7:76:8f:79:11:3a:a7:a5:1b:c1:42:12:
43:db:8b:2b:84:0a:9b:65:5b:c0:39:b5:77:5b:47:
b6:b5:32:3b:26:64:a1:20:be:e0:d1:c5:fd:ec:23:
dc:c4:dd:43:4e:1f:5f:1f:c3:59:cf:2d:ef:5c:63:
f2:31:94:ac:68:78:1d:89:a7:a5:5e:71:a5:93:6f:
8c:b2:8b:7e:bc:27:27:b4:23:40:dc:94:86:2d:44:
6e:19:fd:11:ed:66:28:15:50:e2:19:40:96:60:32:
6b:e3:b1:51:05:fd:ef:c7:f5:aa:cc:25:40:52:60:
e0:85:d9:46:00:15:64:f7:98:2f:41:da:c9:cb:35:
1c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:91:60:ED:AB:3A:2E:A3:03:31:9B:38:4B:BE:8B:E3:07:19:E1:2E
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f5:56:bf:b9:e2:19:c0:5a:00:7c:4d:30:ea:30:27:cf:f2:
62:4b:87:14:49:4e:bd:1c:ff:cc:1b:c0:7c:68:ff:51:a0:d2:
95:46:c9:fc:a0:e1:5d:15:16:a4:e0:6c:4f:2d:54:f0:a6:19:
ff:f8:ec:ff:58:50:c8:79:f1:2f:a7:ed:ee:50:73:70:bf:7c:
e2:45:1c:c7:6d:b6:60:9d:b0:7d:15:f1:11:47:9e:8b:58:c9:
85:61:57:1e:c4:4b:2c:bb:de:0a:57:a3:1e:94:33:6e:20:f5:
71:4b:bc:aa:c0:2c:a3:41:f8:d0:7b:93:25:d0:53:53:be:12:
d3:e4:b3:e9:48:e6:d8:ea:44:66:e7:ff:0c:dc:0a:2d:88:13:
44:59:58:27:a5:6f:3d:22:4b:78:49:ee:99:35:1d:b5:76:3f:
89:90:b9:c7:bf:60:c1:81:9b:96:d8:6c:df:13:8a:21:ed:bc:
04:04:ff:6c:fb:85:f5:97:8b:1e:98:e9:f0:8d:4d:ff:90:b0:
d4:86:f1:b0:de:61:24:74:f0:5e:28:04:d8:50:b5:31:74:e1:
93:2a:8e:98:23:98:b7:c6:ea:04:73:76:df:ee:bc:80:ad:a9:
d7:bb:eb:9b:1e:05:63:2f:1b:a0:41:e8:76:31:af:e3:28:ee:
87:95:74:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:49 2025 by rpki-client