Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
File: jntpkn3SG7nhRV-ojtiO0kfHGNo.mft (raw, json)
Hash identifier: 8DcATsFVh1o1F0PtLGjKMk1wpdCkgeULq/ut6maVSF0=
Subject key identifier: C5:52:F6:C3:F6:E0:23:0E:8E:6B:26:82:7E:51:2B:B8:0B:3D:89:74
Authority key identifier: 8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
Certificate issuer: /CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Certificate serial: 0199FC219FC4AC57FCDC15258A0A97E09613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
Manifest number: 1450
Signing time: Sun 19 Oct 2025 11:01:25 +0000
Manifest this update: Sun 19 Oct 2025 11:01:25 +0000
Manifest next update: Mon 20 Oct 2025 11:01:25 +0000
Files and hashes: 1: 9oNER91IB-H_6dQzFG4aTa1cjVM.roa (hash: oK/++MF9suyvds/jQSLAoISxJwhmMBspKaCD4mfLYUA=)
2: jntpkn3SG7nhRV-ojtiO0kfHGNo.crl (hash: eFBq0B54tW6bNcmm3npMvt4nCQ+ijCDAIqNAZPCdJ7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:9f:c4:ac:57:fc:dc:15:25:8a:0a:97:e0:96:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7b69927dd21bb9e1455fa88ed88ed247c718da
Validity
Not Before: Oct 19 11:01:25 2025 GMT
Not After : Oct 20 11:01:25 2025 GMT
Subject: CN=c552f6c3f6e0230e8e6b26827e512bb80b3d8974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:7a:ab:94:07:de:34:f8:54:64:e4:e3:75:
ea:b8:e9:df:4e:ee:fe:80:89:fd:7c:ba:f0:21:64:
01:b0:f6:d0:72:41:4e:cd:86:da:6f:19:49:40:19:
ee:4e:0f:6e:80:ee:ec:59:77:6b:ef:52:ba:c1:f5:
24:13:ba:21:1b:f0:f1:32:cc:f4:96:95:07:ea:f4:
30:96:a6:ff:8d:f0:28:85:4c:25:1e:9f:42:59:7d:
67:40:60:13:6b:95:32:30:02:62:53:34:52:45:67:
4b:76:ae:5a:f4:71:04:55:87:70:1d:a3:e9:76:44:
a5:17:dd:0e:26:2f:1f:f1:ff:91:a8:1a:07:ad:44:
22:44:e6:ab:4a:3d:7a:25:b8:1e:bf:ef:87:34:bf:
78:2c:b8:5d:82:6e:ca:c1:54:62:e0:1a:b2:60:ca:
3f:75:78:a6:be:e4:01:80:d4:aa:f7:bc:c1:df:35:
e7:ea:32:b7:f7:ee:ca:35:84:82:23:29:f4:fe:07:
cc:a4:b8:bf:ef:cf:8e:9f:f3:f2:b4:31:4f:5d:3d:
45:58:a3:ee:60:8f:2e:78:d4:0c:b4:41:09:ff:40:
56:43:d0:aa:08:71:f2:f1:e0:17:68:9a:26:21:2b:
11:b2:e3:36:2a:eb:ce:28:00:5e:1a:5e:69:4e:cb:
98:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:52:F6:C3:F6:E0:23:0E:8E:6B:26:82:7E:51:2B:B8:0B:3D:89:74
X509v3 Authority Key Identifier:
keyid:8E:7B:69:92:7D:D2:1B:B9:E1:45:5F:A8:8E:D8:8E:D2:47:C7:18:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jntpkn3SG7nhRV-ojtiO0kfHGNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/46edcb-caaf-4d65-85c1-c0292f58b72f/1/jntpkn3SG7nhRV-ojtiO0kfHGNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9c:99:64:d6:d1:89:05:7c:85:29:0f:07:e9:0b:18:52:64:
14:16:5b:53:89:43:61:de:a5:64:b1:38:16:2a:fe:c4:cd:b9:
9d:d6:c9:de:ec:3f:7f:b6:a2:3e:6f:f2:8b:cb:f9:8a:a8:6d:
44:7d:9e:75:25:79:2e:f1:4a:a2:bf:54:dc:cd:18:13:8c:80:
37:2e:54:ff:f5:df:f4:e7:8d:61:79:04:a3:ee:e1:0f:e3:5c:
22:4e:04:5f:59:d9:ce:d9:37:cf:23:ae:32:82:5a:e2:d3:37:
de:bd:a1:5f:d6:42:fc:46:b4:da:75:ee:06:26:5c:cd:90:d7:
d1:3c:b6:fa:c3:0a:88:3b:69:21:05:6a:0b:e8:43:62:0e:ff:
8d:5e:da:09:7c:64:30:ee:9b:a8:29:19:ff:fb:05:ba:cd:e4:
b0:5c:0d:6f:a0:35:60:40:dd:59:60:99:6b:9c:62:d2:14:48:
55:ec:04:36:7e:7c:ea:45:27:d6:5f:36:b4:43:dd:50:fe:95:
aa:21:d5:b4:c4:ff:ac:1e:6b:2d:e0:32:1a:96:c9:e6:7d:a6:
4f:3a:0f:fd:67:4d:04:8e:d2:9a:b6:bd:49:6a:9f:21:77:03:
08:b3:6e:83:6a:88:cc:ad:13:54:79:b0:b7:28:ce:98:40:84:
48:0f:5b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:19 2025 by rpki-client