Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
File: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft (raw, json)
Hash identifier: YzTOVHurs3L5e5V5U37Q84Sf10wC5UvkJN3NNVXdWs8=
Subject key identifier: 89:94:64:03:59:DA:D1:C9:89:34:33:48:FF:31:92:A6:43:0A:B3:25
Authority key identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
Certificate issuer: /CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Certificate serial: 0199FAA1656A28D374169864AD98BAF5ECAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 04:01:45 +0000
Manifest this update: Sun 19 Oct 2025 04:01:45 +0000
Manifest next update: Mon 20 Oct 2025 04:01:45 +0000
Files and hashes: 1: SsNmEumrZoLnkUxPH11EPrhNmyk.roa (hash: 0HSYGP/bwpx8ANNjYNZbYCnBbaPMMqoPY47xOsCKXpw=)
2: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl (hash: 5y3A+BXPFtslMsMKRTPQTz/4kOk4UwOoSdX7MMKWPDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:65:6a:28:d3:74:16:98:64:ad:98:ba:f5:ec:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Validity
Not Before: Oct 19 04:01:45 2025 GMT
Not After : Oct 20 04:01:45 2025 GMT
Subject: CN=8994640359dad1c989343348ff3192a6430ab325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:f6:a3:d4:ff:63:58:22:81:6c:cc:84:88:
54:ce:6c:e3:93:aa:5d:24:8f:c5:81:ec:1e:6a:fe:
09:65:71:0e:64:a8:6e:07:be:fd:c0:40:c8:19:75:
97:20:bf:9a:bd:fe:a8:f2:e7:23:83:4c:1b:92:40:
1b:73:2c:12:f0:de:33:cd:30:98:7d:a5:46:4f:00:
34:da:c8:c9:0b:77:90:84:82:c7:e9:64:1d:14:c2:
0f:ff:cf:af:7f:d8:03:40:ee:d3:d4:b3:28:6e:8a:
4c:33:e1:f7:bb:64:79:35:7a:41:d8:40:3a:b5:b5:
12:49:b0:c7:a5:8a:9d:be:bd:07:f4:fc:14:4e:42:
24:87:62:fd:f5:ae:22:a1:12:d7:59:31:95:17:a1:
4b:61:a4:20:ff:56:4b:32:33:b0:1e:5e:cd:2f:b6:
f3:7d:37:db:49:f8:45:99:ab:80:c0:c8:9f:09:06:
37:c6:e7:bd:cf:ab:eb:74:a5:21:c1:af:49:bb:0d:
1f:a0:4d:ab:2a:05:f0:02:6f:63:ad:a2:2f:83:86:
d6:b9:20:be:8b:a9:ce:a2:1e:a9:72:3f:e7:fb:5a:
d2:87:0b:cc:eb:28:5d:ba:40:c8:6e:0a:20:02:de:
5a:97:a7:97:a6:34:67:65:47:09:e5:48:57:df:00:
11:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:94:64:03:59:DA:D1:C9:89:34:33:48:FF:31:92:A6:43:0A:B3:25
X509v3 Authority Key Identifier:
keyid:8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:dd:8b:55:27:14:ab:50:0a:e3:37:75:4c:e8:30:32:ca:b5:
b6:5d:fd:32:36:4a:48:b0:77:32:a8:34:31:ac:19:69:b5:d5:
6b:82:bb:36:56:ca:66:e9:e5:78:a4:14:f1:86:9c:df:63:c7:
1f:4d:38:1a:41:d2:6f:79:05:05:80:ea:f4:c9:61:15:ca:9b:
cb:f1:b1:4b:8f:f0:63:12:45:61:97:a1:36:b4:8c:35:61:6e:
f7:f7:67:5b:12:5b:5d:ae:1c:4e:60:c8:01:66:3b:96:06:bd:
05:b5:92:b7:ce:1d:7b:fd:f6:74:76:10:1e:5f:7c:5e:61:70:
60:31:ab:01:be:c8:07:96:52:1b:04:15:36:4c:db:38:ed:16:
ff:e9:4d:af:cd:b4:14:36:5f:1e:81:91:96:ba:ee:e5:cf:5e:
80:32:48:0f:64:0e:6a:55:6a:ff:59:10:5c:c2:36:e6:94:d3:
71:9a:17:b5:55:46:66:97:8f:b0:9a:2f:35:6c:45:24:e6:70:
ed:dd:33:8c:ae:bd:e1:f4:bf:c6:14:a5:8c:c8:1f:73:97:90:
7d:c4:53:36:34:26:86:19:c0:a4:f9:f4:d3:a0:b9:69:7f:d0:
25:60:7d:9c:f4:dd:01:ed:01:02:fe:b6:04:e0:5c:6a:62:80:
8d:eb:b7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:33 2025 by rpki-client