Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
File: jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft (raw, json)
Hash identifier: sK5HzOsI0N2znjTQmz3ABe0YDqlqwMkTe+nqpnJWLi4=
Subject key identifier: D6:40:C8:8D:F2:45:6C:C4:C6:1D:F0:ED:C8:0A:CE:17:ED:A1:D8:D9
Authority key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
Certificate issuer: /CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Certificate serial: 0199FD3443D8E5012091AEF009830F49786E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 16:01:24 +0000
Manifest this update: Sun 19 Oct 2025 16:01:24 +0000
Manifest next update: Mon 20 Oct 2025 16:01:24 +0000
Files and hashes: 1: jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl (hash: O3uEoR8joLU/F/Hn1/z1P/Vc4uymrLZCwO19ASFj2uI=)
2: sAUuTa0NxQDQaogfsBE0spI7wLY.roa (hash: LqhsGf+sCdkce6YV0v+cako7Xiw7Niu7YnjSoKkIukg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:43:d8:e5:01:20:91:ae:f0:09:83:0f:49:78:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Validity
Not Before: Oct 19 16:01:24 2025 GMT
Not After : Oct 20 16:01:24 2025 GMT
Subject: CN=d640c88df2456cc4c61df0edc80ace17eda1d8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:0f:5b:3f:14:f2:d6:19:10:92:a2:05:bc:
32:ad:21:dc:42:47:9f:e2:a5:79:8c:fa:be:d7:54:
10:fe:b2:e3:11:df:e8:e9:c6:96:5f:a4:d7:81:d5:
b0:73:67:96:b1:5d:2f:0a:4b:7b:5b:29:0f:c5:de:
ce:c2:97:eb:3e:78:57:1f:f3:50:c2:c7:03:90:5c:
7d:65:53:22:bf:cf:6f:d4:f0:fc:b6:8a:17:05:4f:
e0:8b:85:b3:f1:df:9f:c3:08:39:80:bf:7c:b9:20:
88:d4:c6:ec:db:41:b7:82:0e:95:e9:67:6e:bf:ab:
d8:c6:04:0a:35:53:5f:8b:61:2b:fc:65:bf:be:68:
9d:fb:e4:c2:26:5a:22:4e:20:bf:44:73:aa:b6:a7:
c9:db:93:99:66:50:b8:56:54:cd:2e:eb:7b:2d:cb:
03:f2:f4:c5:66:7d:8c:8b:ac:42:bf:bb:ac:00:c3:
08:6b:76:a0:96:11:8a:ca:cf:2c:b1:c2:6f:58:fa:
04:0b:c7:ec:3f:78:4c:73:7b:13:bf:a1:e5:39:40:
25:67:cd:21:93:fa:95:78:64:4e:89:28:ad:68:49:
81:f4:1f:ae:95:b7:5f:4d:b5:39:bb:d9:dc:30:56:
ae:ad:4d:07:18:bb:0e:df:f1:0f:f3:bc:b1:f7:01:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:40:C8:8D:F2:45:6C:C4:C6:1D:F0:ED:C8:0A:CE:17:ED:A1:D8:D9
X509v3 Authority Key Identifier:
keyid:8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d6:b2:df:28:ab:30:1a:b2:23:25:6c:85:aa:ae:4a:56:08:
a3:e1:21:7d:02:cf:86:3a:3f:40:b2:fc:89:49:e3:a8:e0:64:
d0:21:bc:3a:f3:09:8e:f2:11:7b:cd:15:6d:d1:d8:85:36:8a:
6c:b5:82:6c:77:f4:da:0a:1e:94:2b:1f:5b:4c:80:ec:9e:d6:
54:35:83:81:f2:02:0b:dc:76:b4:d3:19:bf:e8:26:1d:89:d4:
85:c0:3a:58:41:53:30:7f:f1:92:76:62:ae:e7:36:3f:88:eb:
30:58:71:ee:e6:3f:c2:f9:7b:6f:f9:b6:b1:a4:5f:2a:e6:1e:
3f:be:e1:ea:64:21:77:6b:ff:27:38:72:4d:6c:79:bd:63:c2:
be:fb:38:7f:92:a4:8f:ad:e2:bc:57:8c:c1:81:11:e2:e8:b0:
de:f4:cf:7f:62:41:c4:0d:00:09:91:13:f4:b9:84:74:ff:05:
6b:24:3a:1f:41:6f:9c:d4:ce:d4:8b:ec:3c:19:cd:e9:48:46:
d9:32:47:72:12:41:da:34:7d:0e:6b:c7:2c:94:d2:e7:19:e9:
a7:c3:66:3a:61:55:ce:97:5f:4e:82:85:21:fe:29:80:ef:18:
89:d3:28:d0:4b:ec:1b:e3:90:07:23:88:77:31:b9:d1:d9:92:
af:39:53:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:41 2025 by rpki-client