Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
File: jxVuaflETCsGaHJWCFtqek6Yh_Y.mft (raw, json)
Hash identifier: xo6WTD4FfftBT4HjBc9fDSwpX9ULfgJUqNqNueF7FkE=
Subject key identifier: 18:C7:0E:17:15:AF:C3:25:BA:83:5D:17:44:B0:44:33:E3:CB:19:CE
Authority key identifier: 8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
Certificate issuer: /CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Certificate serial: 0199FE101D8C0BE81337ECE6A5B33724B4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
Manifest number: 0A8D
Signing time: Sun 19 Oct 2025 20:01:32 +0000
Manifest this update: Sun 19 Oct 2025 20:01:32 +0000
Manifest next update: Mon 20 Oct 2025 20:01:32 +0000
Files and hashes: 1: gENnBMD7CFnpDe73cGovXB6cewg.roa (hash: rDcPDp/N1UMZLBWpv8SmAqXs5rg//NGw82tfNx9i/r0=)
2: jxVuaflETCsGaHJWCFtqek6Yh_Y.crl (hash: Tosv/bDETjkrGOWk2rlHVDmEiiVIjul4Vqw2Nq8U0vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:1d:8c:0b:e8:13:37:ec:e6:a5:b3:37:24:b4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Validity
Not Before: Oct 19 20:01:32 2025 GMT
Not After : Oct 20 20:01:32 2025 GMT
Subject: CN=18c70e1715afc325ba835d1744b04433e3cb19ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:f4:96:c3:26:ac:d3:ce:cb:05:73:37:4a:
01:1c:b4:89:ba:7a:3c:e5:21:f3:db:3a:9f:dc:33:
f5:ab:0e:a0:69:0a:83:23:37:e3:d6:34:70:ef:9a:
c3:b4:7c:6c:50:0b:10:af:f8:39:2d:52:e8:28:ac:
ec:a7:3d:de:ec:aa:e5:19:af:62:f8:5d:02:02:6b:
26:ec:0a:d2:d2:f1:52:6f:c9:f3:cb:ff:de:28:1d:
6e:35:04:02:91:bd:c7:08:39:e2:9f:be:58:59:f6:
7e:0e:f4:23:40:2b:31:10:8c:eb:97:fd:74:73:0a:
45:d5:dc:37:33:2f:49:75:77:98:32:e7:55:44:fd:
0f:58:1d:78:b9:72:b2:cc:47:30:8f:93:8a:79:6e:
1c:3c:66:d2:0f:21:f7:0d:2c:db:67:b8:5e:2e:b4:
ae:68:94:4c:ec:d4:ed:aa:00:43:3e:a9:a5:10:98:
61:a5:14:81:b2:c6:20:2d:33:ca:f2:2c:d3:84:40:
29:c8:fb:7f:06:6e:85:e2:f2:5d:b5:62:10:53:ef:
d5:67:68:4e:f2:8b:30:5c:e9:49:bb:76:7d:63:d8:
2f:46:bb:28:25:ad:2c:7e:43:9f:f4:39:88:d6:54:
4d:23:2d:28:b7:6b:31:07:f9:59:ff:11:a6:2c:9c:
d4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C7:0E:17:15:AF:C3:25:BA:83:5D:17:44:B0:44:33:E3:CB:19:CE
X509v3 Authority Key Identifier:
keyid:8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d0:b9:7e:7a:8b:aa:38:26:87:a0:45:20:bf:a6:d8:30:8e:
67:f2:fa:d9:5f:76:d1:03:07:e2:23:9e:4f:29:72:20:bc:32:
0d:11:28:a7:0e:52:fb:06:7b:51:83:3b:e7:3c:1d:d6:fb:3b:
98:50:a9:b3:66:d5:eb:39:46:40:53:10:b6:39:87:86:16:b3:
05:75:d6:73:70:20:58:a2:d9:9c:e3:3c:4f:9c:eb:8b:a6:21:
bb:4c:94:8c:d4:d5:68:6f:bf:43:ca:92:31:66:da:5a:41:0b:
77:e3:bc:34:5c:5e:64:c2:f9:9d:c3:bf:f9:92:6c:44:19:77:
2e:aa:0c:88:ff:93:96:8c:eb:73:14:5c:84:40:72:a5:27:3b:
d9:26:0d:92:7a:52:41:af:14:ed:51:e6:4c:ab:b3:e8:07:2c:
b2:85:ac:bf:8f:59:4e:4e:cd:1b:fa:13:69:f6:88:89:47:82:
80:00:41:bf:7e:03:01:e8:89:a0:f0:0e:89:74:b2:38:b8:55:
bc:5c:18:b6:76:90:31:07:a3:c0:54:8d:41:d3:de:33:6b:ac:
59:00:7f:e4:5d:22:c5:84:b7:8b:5c:2f:46:9a:dd:38:f9:07:
4a:c6:80:82:a7:d0:21:a1:6b:c6:a8:06:d7:b3:ee:cb:4c:4e:
bc:c4:3f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:28 2025 by rpki-client