Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
File: jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft (raw, json)
Hash identifier: g6HSOd7M7jE6wfxNVfzXLrUgO2UPnqk8PFdMPVPLfdU=
Subject key identifier: E9:14:52:94:DE:12:0C:B8:2E:D6:14:43:54:3D:AE:FF:09:5E:06:8C
Authority key identifier: 8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
Certificate issuer: /CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Certificate serial: 0199FDD9641C00B968E81001BBA4DAA8D93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:46 +0000
Manifest this update: Sun 19 Oct 2025 19:01:46 +0000
Manifest next update: Mon 20 Oct 2025 19:01:46 +0000
Files and hashes: 1: grXRQpT1aZeaC-n0N849AfZZ_V4.roa (hash: x7JYnVR7QlEIld9EwbA1Mq0qnt4Qvkq7/cYHdkassRc=)
2: jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl (hash: ZKtKUyiheQVmwDkH53ORMtguqsIDFQzg5QE0NYliBsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:64:1c:00:b9:68:e8:10:01:bb:a4:da:a8:d9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f041d669ea6c41170d6f81409c0ffdc28e56907
Validity
Not Before: Oct 19 19:01:46 2025 GMT
Not After : Oct 20 19:01:46 2025 GMT
Subject: CN=e9145294de120cb82ed61443543daeff095e068c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cb:06:34:e8:92:f6:5f:e7:3f:e9:50:e7:61:
18:41:e5:a2:24:63:bb:75:f0:43:bc:54:e3:f4:87:
3c:54:21:cb:84:e4:4e:e0:01:d2:c6:23:5c:f3:99:
4a:8b:1d:0e:bd:e2:4e:39:1a:1a:5f:6d:df:5a:7d:
1c:98:c4:10:59:18:d2:88:b1:3e:53:19:03:42:57:
1e:18:ca:e4:00:65:18:d8:ec:1f:aa:d1:8a:95:b4:
9a:d1:28:f7:2f:4e:b9:c1:c7:30:f0:87:1a:14:e6:
47:b9:28:fc:a8:ad:30:17:3d:a6:a2:80:a1:46:39:
9e:30:7a:52:3d:78:fe:f3:66:f5:35:3c:c1:0d:25:
61:02:64:70:72:9b:42:e9:7f:e4:59:1d:16:4c:c7:
cc:da:7b:a5:ca:8e:6c:3c:a7:b2:08:b0:93:e3:81:
21:28:71:50:ae:c7:09:16:2e:57:11:1a:f2:f8:e4:
32:99:55:1a:c1:d8:f0:b3:82:b2:e4:aa:80:95:58:
0e:0c:a5:2d:bb:03:9b:81:cb:2b:b2:70:49:06:6a:
93:37:af:b4:55:df:ba:b5:13:f9:d6:de:16:a4:3c:
23:1c:88:49:17:65:da:61:57:89:84:50:7a:d0:d8:
ca:c2:55:81:aa:5c:db:0f:84:52:33:58:d0:99:b6:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:14:52:94:DE:12:0C:B8:2E:D6:14:43:54:3D:AE:FF:09:5E:06:8C
X509v3 Authority Key Identifier:
keyid:8F:04:1D:66:9E:A6:C4:11:70:D6:F8:14:09:C0:FF:DC:28:E5:69:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwQdZp6mxBFw1vgUCcD_3CjlaQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/1a8cbd-72cf-4a1c-83d2-c23eaed4d125/1/jwQdZp6mxBFw1vgUCcD_3CjlaQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:41:61:6d:3c:4b:94:0c:73:ce:74:09:0f:32:1c:e4:b2:cf:
fd:ce:e5:e5:76:e4:0a:f8:20:44:d5:0e:85:ad:33:ba:b5:e3:
80:ac:e9:69:25:d5:64:8b:70:7c:59:a8:d6:53:00:7c:e6:6f:
3c:4d:cc:94:40:72:77:41:ac:36:4f:07:81:e4:c5:7a:2f:07:
bd:96:b0:dc:1c:95:19:fe:61:96:cc:3a:8e:11:d8:9f:c3:0e:
d2:93:4b:21:c9:c2:42:5e:0c:7b:24:0a:06:61:9a:92:37:b2:
b0:34:01:dd:77:6d:fa:a2:2d:a3:29:78:a4:7b:e8:dd:9e:9e:
88:3e:e8:60:23:36:44:cd:a6:ef:31:fd:6f:13:87:5a:0c:c3:
6a:09:94:b7:04:93:00:ef:a0:13:9c:33:1e:6f:44:ef:24:e6:
44:64:b2:f1:68:70:3b:3c:c7:60:e0:49:bb:74:2a:33:c3:9b:
98:5b:82:24:d1:7d:cc:b3:bd:8b:72:cc:d7:c1:55:f1:fc:ba:
a2:4d:fa:fe:cd:c7:81:99:56:b3:5d:ad:fe:16:16:ad:b8:a8:
8d:4c:5a:fc:c9:27:bd:b6:9d:19:27:17:86:02:a7:8a:24:bc:
5c:31:6c:03:59:a2:3d:c0:5b:7e:2c:d3:75:50:d8:4e:88:0a:
6c:10:20:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:28:43 2025 by rpki-client