Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
File: J-lCeLPhkBhjrdYde98tJzzxNAw.mft (raw, json)
Hash identifier: On49riGNXAqio1b7b+ymf+0GH9jFnBceVVtP4C/0B9Y=
Subject key identifier: 07:1C:78:6A:DA:94:BF:BE:8D:9F:0C:95:21:CB:73:34:ED:AA:0F:5E
Authority key identifier: 27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
Certificate issuer: /CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Certificate serial: 0199FDD9A4C1D1D172D65A19E269A039BA04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:02:02 +0000
Manifest this update: Sun 19 Oct 2025 19:02:02 +0000
Manifest next update: Mon 20 Oct 2025 19:02:02 +0000
Files and hashes: 1: 7oIgDgDNpX6XAW4lQ5qq69olmro.roa (hash: 3Y/w0AZ9JHVMQciRUgte6R4EVpLThqmwyOoyqP/qwcw=)
2: J-lCeLPhkBhjrdYde98tJzzxNAw.crl (hash: 0tX9LtfpgbUT6UxxFMuSDpDwZLU+D2Fj/zaQ4BsvAYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a4:c1:d1:d1:72:d6:5a:19:e2:69:a0:39:ba:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Validity
Not Before: Oct 19 19:02:02 2025 GMT
Not After : Oct 20 19:02:02 2025 GMT
Subject: CN=071c786ada94bfbe8d9f0c9521cb7334edaa0f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:db:8c:d0:a4:0c:8c:35:1e:bb:06:12:c9:75:
f3:b8:32:cc:d0:c1:7f:0e:5a:88:d0:99:6c:9a:e3:
34:64:eb:99:18:1b:b8:16:7e:c5:9a:ed:b6:88:dc:
c2:d0:7c:f0:c0:3e:b7:c7:b3:3d:d2:56:0c:ea:cc:
20:44:9c:09:8f:78:89:de:f2:76:38:18:3c:c6:66:
7e:77:c4:52:d9:03:82:bd:b0:e8:c7:c1:4c:fe:da:
ff:cb:d0:4c:4d:66:89:75:87:ca:38:ab:99:e4:c8:
7a:3f:f3:89:e7:e8:e5:a1:0a:92:d9:1e:6c:9a:ff:
70:cc:66:fa:07:2c:0e:25:78:d9:48:fb:89:a4:e1:
e1:ae:0d:3b:c7:c2:6d:71:a8:9b:97:9e:32:ba:8e:
f5:a6:54:2a:ce:a9:cb:6a:cc:fc:f4:e3:eb:61:f4:
fd:cd:f7:29:ea:c7:cd:54:2f:52:eb:8b:6d:81:8a:
b6:ee:db:da:3d:86:36:65:13:5f:e4:f6:35:1e:5b:
cc:7f:82:8b:d3:28:10:26:e9:d8:86:82:5f:bc:f3:
16:6e:4b:c4:e7:c9:d8:11:eb:b6:d1:f7:6e:32:ae:
55:8d:74:cd:77:9a:71:39:da:65:40:4d:fc:3a:c5:
13:a0:9b:5e:56:e8:2a:6b:d0:b2:3f:05:38:01:8b:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1C:78:6A:DA:94:BF:BE:8D:9F:0C:95:21:CB:73:34:ED:AA:0F:5E
X509v3 Authority Key Identifier:
keyid:27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:91:19:54:b8:d1:4a:c2:12:e0:ba:85:5b:3b:97:43:11:75:
d2:da:a4:ac:d1:dc:87:fa:67:66:ac:e3:6a:7e:77:fc:3e:81:
db:7a:7c:dd:ff:48:ff:55:41:fc:df:df:c3:52:f0:ef:f1:b5:
29:e9:0b:c1:b1:58:35:20:1c:9b:e6:b3:7c:88:fa:dd:85:f1:
4f:b8:06:04:f8:0d:7c:c7:1e:2d:37:4e:db:2e:13:bd:74:a5:
ef:e5:87:e5:47:9c:79:3a:03:4d:56:82:df:8f:57:c4:7b:dd:
1f:54:c8:0e:2e:88:7a:18:05:91:dd:45:11:d4:40:6d:b3:2e:
07:ea:aa:30:1c:2d:53:97:cf:6a:12:a3:81:91:39:c4:82:bd:
61:27:61:c9:19:70:36:b3:ff:be:e9:53:16:b2:3f:80:f3:73:
db:34:ba:1c:0e:b2:0a:84:6b:95:3f:f5:15:db:9d:c8:f3:11:
50:01:c8:54:4b:78:a5:f2:13:3d:91:6b:ce:53:2e:97:64:cc:
b1:29:40:69:37:ba:32:ec:1a:d2:ee:c4:82:50:04:85:b0:3a:
a9:97:84:6b:48:b2:c2:ff:f3:ba:bc:5d:68:23:60:11:9e:06:
5d:63:70:28:2b:9e:32:d9:70:64:e0:6e:a6:e5:da:f4:cc:b5:
a7:78:7e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:52:58 2025 by rpki-client