Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
File: josQcRMXY6rasfKU43zVCtrAk5w.mft (raw, json)
Hash identifier: W04uJBr83Mg1fADgYHc4boOdbn6N7kR6lXGA4IP0WYk=
Subject key identifier: 0D:E4:26:94:26:4C:2B:D2:CF:50:63:24:B0:31:B3:25:33:EF:B3:73
Authority key identifier: 8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
Certificate issuer: /CN=8e8b1071131763aadab1f294e37cd50adac0939c
Certificate serial: 0199FF22B8DE6711A2A9B7DF7362E6A2B626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
Manifest number: 145A
Signing time: Mon 20 Oct 2025 01:01:29 +0000
Manifest this update: Mon 20 Oct 2025 01:01:29 +0000
Manifest next update: Tue 21 Oct 2025 01:01:29 +0000
Files and hashes: 1: 3H7i_vFx5kv1rmREwXCmTM5oMqw.roa (hash: hMtleRQFOxKLJtL4y1szjPfSERJkDY1m3qfGe4WIw2I=)
2: RsZOcDmkBIUPjHAIBtXdE1isEIo.roa (hash: YV+XRYidOStCwFSLI7pqeek9g91t1Wq016mp7gDOMSA=)
3: josQcRMXY6rasfKU43zVCtrAk5w.crl (hash: FY62wAE4BF4jT9uxLcDr+M9sG3K1xy8l3M4bjhrk6uI=)
4: oelP10O0hKN0MJjmizXtRBBnIm0.roa (hash: Kv4VxSnM51++YGnfrGOwbQ9f/51H5VRCwP22x4tg44M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:b8:de:67:11:a2:a9:b7:df:73:62:e6:a2:b6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e8b1071131763aadab1f294e37cd50adac0939c
Validity
Not Before: Oct 20 01:01:29 2025 GMT
Not After : Oct 21 01:01:29 2025 GMT
Subject: CN=0de42694264c2bd2cf506324b031b32533efb373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:66:bb:83:af:13:b3:bf:b5:ca:00:fe:13:
6b:e2:04:c5:57:f1:76:52:89:8c:b5:60:aa:9e:aa:
50:52:2d:ce:4c:26:a9:af:6f:f0:77:1e:ab:28:3b:
b3:62:e3:cf:67:b5:6c:b0:cb:10:88:ce:8d:67:25:
56:fb:6d:87:88:17:46:e0:24:d9:c7:38:54:09:35:
64:00:4b:48:c0:af:8e:f0:0e:07:04:13:8a:5b:33:
2b:cc:de:ca:74:83:6c:b2:a2:56:d7:c9:d8:14:99:
80:bb:9b:4e:28:ba:39:03:ad:bb:94:54:f5:39:3a:
b7:fa:e1:20:33:71:ff:97:17:38:33:dc:b7:84:ff:
3b:62:80:bb:ed:7a:50:ba:c5:5f:81:11:d9:23:b0:
6b:ce:96:5b:aa:79:1d:c8:4c:f8:92:93:f1:07:80:
1e:6d:d3:2c:ac:40:91:b1:6b:93:da:17:d9:f6:c0:
bb:dc:8b:b8:1d:1d:64:e3:ae:97:2e:3e:b7:fd:90:
cc:d8:0e:92:f5:d3:6f:c8:64:63:c1:a3:9c:36:4a:
c9:26:7f:98:27:35:02:52:df:a8:8f:1b:ae:d1:04:
35:28:2a:c1:23:d2:3f:92:2a:62:07:04:7d:4f:9e:
25:7a:6a:78:3f:a9:26:f0:fc:57:c8:24:0a:c5:e8:
65:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E4:26:94:26:4C:2B:D2:CF:50:63:24:B0:31:B3:25:33:EF:B3:73
X509v3 Authority Key Identifier:
keyid:8E:8B:10:71:13:17:63:AA:DA:B1:F2:94:E3:7C:D5:0A:DA:C0:93:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/josQcRMXY6rasfKU43zVCtrAk5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33339f-6d98-4b5f-ab60-1c94cb7dfeb3/1/josQcRMXY6rasfKU43zVCtrAk5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7c:8c:6c:bb:09:91:0c:ff:ed:bc:9d:de:27:ef:a9:e1:96:
1a:b7:44:da:ea:9d:46:b5:86:78:4c:27:76:46:27:e5:30:c5:
b9:b1:2c:71:76:0d:03:67:3f:70:24:58:6b:14:6b:3b:89:d4:
21:b6:06:f0:65:40:b9:e5:f0:94:ed:b3:d9:94:b6:a4:ab:d4:
aa:96:c9:bd:e5:83:34:e0:d8:44:42:76:c6:c9:eb:1b:05:ba:
e3:b7:61:53:55:46:f7:40:19:85:8a:79:b4:e3:18:ac:fa:4d:
8e:80:7e:f0:2b:71:b0:57:b9:e7:56:ec:85:c2:5c:70:83:6b:
d5:9e:fc:b2:23:91:42:1d:ba:4b:83:41:f4:48:e3:da:64:7e:
6f:1b:7a:f7:a7:9a:48:28:df:2f:c0:67:57:91:a4:e2:d6:7e:
1f:9d:76:a1:0b:a7:14:42:56:a6:c1:30:92:5f:ab:fe:ee:a8:
36:9e:18:26:ee:b3:a1:6e:4f:21:6e:34:c0:f0:ae:b6:aa:e5:
f2:34:35:bc:34:9f:70:fc:ad:74:42:0a:5c:28:97:33:97:cc:
70:09:68:73:bd:41:15:59:f0:01:19:cc:a3:3d:d1:4d:c9:71:
04:a5:ba:71:ae:81:20:5c:bc:8e:69:d5:83:eb:bd:18:c4:6a:
95:00:05:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:58:51 2025 by rpki-client