Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
File: jaA-DQIO_JRMHuva7lQn02W3AHY.mft (raw, json)
Hash identifier: N7fsDK33ZgZOG4zRsfy38bn+DVzR5RyANY1vW4om3J0=
Subject key identifier: 1C:54:F8:41:BF:22:CF:E6:09:64:92:39:2C:A4:F3:D6:EE:87:FE:52
Authority key identifier: 8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
Certificate issuer: /CN=8da03e0d020efc944c1eebdaee5427d365b70076
Certificate serial: 019A006C352168F166A41213153DF103C970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
Manifest number: 16E9
Signing time: Mon 20 Oct 2025 07:01:22 +0000
Manifest this update: Mon 20 Oct 2025 07:01:22 +0000
Manifest next update: Tue 21 Oct 2025 07:01:22 +0000
Files and hashes: 1: jaA-DQIO_JRMHuva7lQn02W3AHY.crl (hash: vNESSSYc6WOduUCrUSeVRJwnv7tZv4rjscrNTo8KLPg=)
2: z839WIkF-YRPS5QNYpBIYDtN3Cw.roa (hash: zP6mCwiE2/gg1MEmkXLbZLBNeMsMnTOwcbXXhGjusFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:35:21:68:f1:66:a4:12:13:15:3d:f1:03:c9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da03e0d020efc944c1eebdaee5427d365b70076
Validity
Not Before: Oct 20 07:01:22 2025 GMT
Not After : Oct 21 07:01:22 2025 GMT
Subject: CN=1c54f841bf22cfe6096492392ca4f3d6ee87fe52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:47:18:cd:78:4b:70:c9:00:d6:50:f2:cc:
b1:e6:bf:29:23:d5:38:15:48:d3:23:7a:d4:ca:f0:
5c:32:0e:d1:8c:d2:d5:49:c4:e3:0d:09:e8:07:53:
eb:4c:44:d5:82:1e:08:cc:c0:bc:bb:78:4c:f4:32:
41:91:5a:d9:1a:9c:1b:36:ca:18:92:08:31:f8:93:
a3:c5:d2:dd:a9:4e:f0:7a:50:78:99:ee:29:67:16:
b9:d7:44:2f:f2:9a:1d:dd:80:ec:97:b2:3b:7e:30:
f8:f0:a7:37:c4:6c:ad:63:ca:40:0d:c3:6f:d2:10:
88:ca:c7:8f:18:90:3e:6c:75:67:c8:58:c1:56:64:
1e:5f:e3:e8:d6:9f:6e:4b:38:e3:23:40:15:81:90:
a9:7d:b6:4b:6b:63:b5:c7:07:d9:0f:d4:50:78:4b:
52:90:91:82:40:54:e5:34:74:d3:93:71:c4:29:13:
0c:09:ed:b8:19:d9:1a:42:b6:ea:90:70:4c:01:5f:
d4:92:86:80:5e:0f:b9:aa:7a:f2:24:3a:84:c5:35:
4b:53:79:d1:20:85:e0:69:14:55:47:6f:0c:b3:da:
b3:cd:2e:61:61:3e:7a:91:f3:9f:ee:4b:a8:54:72:
a0:9f:fb:72:c1:39:41:84:89:39:d1:e5:a5:d5:5f:
dc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:54:F8:41:BF:22:CF:E6:09:64:92:39:2C:A4:F3:D6:EE:87:FE:52
X509v3 Authority Key Identifier:
keyid:8D:A0:3E:0D:02:0E:FC:94:4C:1E:EB:DA:EE:54:27:D3:65:B7:00:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaA-DQIO_JRMHuva7lQn02W3AHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/562112-ad44-4d71-9cb9-fb7d7dca34a7/1/jaA-DQIO_JRMHuva7lQn02W3AHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:1b:af:90:7c:53:f6:5f:90:66:23:bd:f4:07:57:f5:06:fd:
6e:11:1f:ee:e0:4c:92:fb:8d:eb:5f:37:85:c2:4e:8a:11:e5:
20:9b:31:d8:23:b8:18:8e:f0:cf:eb:cc:38:f8:0f:80:de:b5:
b4:8d:69:15:49:fb:02:12:b4:79:4c:ac:dc:09:f1:a5:72:6c:
6a:e7:47:c9:80:3a:fb:62:e1:b9:bf:6a:7d:7d:f4:fd:3c:d4:
a0:96:19:99:b6:f1:5f:29:aa:e4:54:6c:24:c6:ec:35:be:be:
fd:89:85:15:37:0c:fb:5c:c3:ce:0a:ed:04:0e:59:a7:40:b3:
d4:55:a4:02:d5:b5:84:cf:fa:28:6d:ad:67:66:df:2b:65:f8:
eb:1e:81:6f:90:ce:1b:f9:90:f1:45:19:9b:76:f0:ac:7f:50:
b3:94:cd:3a:91:ac:49:eb:41:a4:ef:72:39:21:cd:24:ba:80:
ed:46:06:93:23:e5:17:b8:f4:5d:44:ec:88:c7:82:61:e9:c8:
07:99:34:25:5d:89:ec:47:07:f9:ff:33:67:ba:2c:66:26:53:
db:97:de:6d:00:02:f9:ac:ff:06:9b:7a:82:21:cd:cb:1d:c5:
ab:1f:66:54:9b:96:b2:22:65:77:2f:96:cc:18:ac:7a:64:72:
cd:42:eb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:58:58 2025 by rpki-client