Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
File: jq3tC4P6TjHOCghA60KbqKnxjjk.mft (raw, json)
Hash identifier: Tr/807YEZPHPm8npN/XViqhaScUz0gWNBxy2NxIqF60=
Subject key identifier: 3D:CE:EC:3E:36:0A:07:73:AE:82:63:0C:AA:54:FF:25:D9:F4:1A:B0
Authority key identifier: 8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
Certificate issuer: /CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Certificate serial: 0199FCFD42C30EA028C8BC93CDADA6B0F2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
Manifest number: 06E8
Signing time: Sun 19 Oct 2025 15:01:20 +0000
Manifest this update: Sun 19 Oct 2025 15:01:20 +0000
Manifest next update: Mon 20 Oct 2025 15:01:20 +0000
Files and hashes: 1: jq3tC4P6TjHOCghA60KbqKnxjjk.crl (hash: 2QfxXd5ijFc8ODZETdiOWjyxio7wHBSLfaXjvY3b3jo=)
2: pAz0-dsD8datcNprkdVykW3ZGCA.roa (hash: Tv4/pMl+ZJ0e0Jj2mEhL2iCUyQzPqWtASPxgV3PS+hA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:42:c3:0e:a0:28:c8:bc:93:cd:ad:a6:b0:f2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eaded0b83fa4e31ce0a0840eb429ba8a9f18e39
Validity
Not Before: Oct 19 15:01:20 2025 GMT
Not After : Oct 20 15:01:20 2025 GMT
Subject: CN=3dceec3e360a0773ae82630caa54ff25d9f41ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:bc:fb:42:2c:91:c3:ad:9b:aa:6b:18:ce:
91:30:c7:14:37:50:9b:dd:89:ba:25:9b:b6:f8:e1:
46:f2:e6:80:64:4a:a2:94:49:03:50:32:c1:09:2c:
c8:d2:40:05:a2:89:d1:43:c5:d7:16:05:90:f7:0a:
7d:fc:f3:2c:ef:cb:36:8f:17:58:c8:25:c3:90:e4:
4a:8b:a0:56:b8:a3:dc:a0:a5:97:99:1d:60:8d:e7:
75:71:17:b2:ac:be:93:87:8c:0a:de:a9:5f:9f:b2:
b5:18:c2:ee:88:ed:44:ee:4f:bf:26:9d:01:ee:1e:
01:68:ef:95:72:9b:bd:86:3c:7c:68:79:4c:b3:c6:
39:43:29:ee:b7:ef:80:9e:b3:b2:7a:26:31:9b:98:
fe:c8:3c:50:56:b2:37:40:97:e3:e9:76:4a:d8:da:
35:b9:80:ca:91:e4:39:98:60:9d:3f:84:1b:f1:d6:
db:27:01:b1:ce:5c:ff:fa:6c:8a:17:4a:c8:21:aa:
2a:03:50:f1:73:40:4a:2c:94:38:dc:6e:f6:01:4a:
15:b6:b4:69:d4:65:3d:d3:75:4a:62:1c:5b:f6:18:
36:67:88:95:cd:3a:0b:8a:b7:d1:5c:74:53:51:ec:
02:70:20:4d:cd:5f:7a:90:9b:64:c7:eb:96:5a:02:
e1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CE:EC:3E:36:0A:07:73:AE:82:63:0C:AA:54:FF:25:D9:F4:1A:B0
X509v3 Authority Key Identifier:
keyid:8E:AD:ED:0B:83:FA:4E:31:CE:0A:08:40:EB:42:9B:A8:A9:F1:8E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq3tC4P6TjHOCghA60KbqKnxjjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c22c08-56a7-42d4-bea5-877dda192379/1/jq3tC4P6TjHOCghA60KbqKnxjjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2c:0e:18:bc:e7:09:cf:77:32:f1:60:1f:12:70:89:1e:e2:
4c:40:be:f6:90:9f:80:b4:5f:dd:69:68:b1:f5:81:41:bd:83:
a0:bb:f4:c6:36:50:a7:c3:93:e8:f2:bd:a7:63:f4:dc:a6:d6:
20:60:95:c2:18:be:13:2b:62:1f:27:6b:f8:5f:bf:f0:77:9e:
fb:05:dc:3f:7f:81:88:a4:8a:c3:7e:44:9a:13:c8:f9:c0:a2:
ba:68:e4:0b:84:75:28:9b:a9:5b:1c:92:b4:f2:d1:2a:21:86:
61:5f:bb:13:b7:e5:69:c1:1c:2d:f8:d5:f3:7b:d7:0a:3d:ca:
c3:8e:f8:9f:09:c0:bf:19:de:56:9c:68:b8:23:7b:e9:71:a6:
ce:60:25:5e:ef:ca:84:d8:01:6c:5d:44:42:f0:c5:08:a7:5a:
d2:31:64:b4:b2:8a:db:61:0f:5b:23:ce:b1:44:79:80:ab:d6:
a6:fc:56:fa:5c:49:d7:8d:d5:70:55:20:ee:6b:18:f4:36:17:
59:36:8d:03:4d:43:0d:7d:99:71:1a:30:d6:01:c8:13:67:53:
47:ee:ff:50:66:34:bb:92:f0:8f:58:43:6f:34:45:37:6b:0f:
05:ce:7b:29:e3:75:8d:e9:23:8b:cd:29:7f:01:38:29:68:c4:
4b:41:9f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:10 2025 by rpki-client