
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
File: j-Arfu3_w4q16rRBYXLn2I6a0eI.mft (raw, json)
Hash identifier: mwNz9mCKG02u9c6CotdDbFUro3PEJ+1W8W5E9LQ1ARU=
Subject key identifier: 1B:15:E1:37:7A:8C:7E:2D:F2:D0:F5:1B:47:D0:4D:26:13:70:F4:A6
Authority key identifier: 8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
Certificate issuer: /CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Certificate serial: 0199FB7C6EF67687D61CF0BB810BFFA64D7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
Manifest number: 10CA
Signing time: Sun 19 Oct 2025 08:01:00 +0000
Manifest this update: Sun 19 Oct 2025 08:01:00 +0000
Manifest next update: Mon 20 Oct 2025 08:01:00 +0000
Files and hashes: 1: 2oXhmPmJrKT6T-roBJE29dyf8hU.roa (hash: k+a97zn87AfkOaB22DmhsTeTkt/L2YZttGTGllHrraQ=)
2: 6WP5y_QknC9iDxd6UTK4gFwVsMI.roa (hash: TTYzypwej/xXrBw/bod0A6cWitM+AquDVWckZccyLEA=)
3: P8awl1-FBznnzvpNTr4DRMiIS0I.roa (hash: 7oxXLgK4HMZatOjJ+KQ+qVSvO3gc/0/goIBoaIA0uAQ=)
4: j-Arfu3_w4q16rRBYXLn2I6a0eI.crl (hash: 5kwfcZ4TCKEKRBGfJCGZtZPoRzYSZUPvKIclLWaxVpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:6e:f6:76:87:d6:1c:f0:bb:81:0b:ff:a6:4d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe02b7eedffc38ab5eab4416172e7d88e9ad1e2
Validity
Not Before: Oct 19 08:01:00 2025 GMT
Not After : Oct 20 08:01:00 2025 GMT
Subject: CN=1b15e1377a8c7e2df2d0f51b47d04d261370f4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fb:2a:b4:6c:76:61:1d:ce:69:8b:cc:b9:b4:
b7:e6:22:e2:69:a2:5e:03:00:c9:26:32:76:fd:37:
3c:a0:ef:b1:28:85:2d:02:56:52:56:fa:2e:d7:88:
11:3c:6f:46:f4:db:17:e0:f6:6b:90:d5:48:11:a6:
ee:da:5b:b0:28:b2:ab:15:52:00:81:34:23:b9:a0:
bf:76:17:de:61:44:62:69:5d:bd:cd:06:33:bd:ac:
92:1f:2d:cb:a3:8b:56:5d:da:ff:f5:49:ec:93:cb:
77:93:d6:d3:f3:ed:ac:d8:b0:85:c9:51:e8:e5:66:
cb:4d:3e:d1:e9:ba:57:92:4c:e0:cb:1d:f5:7d:dd:
da:6d:26:33:7a:4d:8e:0b:95:2e:e8:f4:40:84:74:
39:82:64:d0:9c:13:63:d2:26:80:6b:3e:20:7a:31:
c4:b9:9a:9f:26:fb:26:99:34:87:ee:78:03:55:be:
f1:b6:e7:e0:40:14:29:6e:f9:c7:9d:46:64:37:cf:
75:71:4b:92:16:31:e0:8b:c4:17:98:c3:6f:8f:f7:
a0:9f:7b:06:fb:f3:af:12:b6:ef:e5:ef:a4:ec:67:
ed:79:18:80:31:85:61:55:12:c0:5d:af:87:06:a0:
49:d4:02:7e:19:4a:44:32:0c:0e:df:d1:4e:20:66:
8c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:15:E1:37:7A:8C:7E:2D:F2:D0:F5:1B:47:D0:4D:26:13:70:F4:A6
X509v3 Authority Key Identifier:
keyid:8F:E0:2B:7E:ED:FF:C3:8A:B5:EA:B4:41:61:72:E7:D8:8E:9A:D1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-Arfu3_w4q16rRBYXLn2I6a0eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d2c235-a1f5-4984-aadf-5146f13b71a1/1/j-Arfu3_w4q16rRBYXLn2I6a0eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:28:1f:4a:0b:8f:04:8f:b2:86:af:ec:4c:7a:81:0a:97:78:
f1:c7:12:5e:16:e6:23:32:a1:64:73:2b:95:d3:4e:f8:db:96:
57:19:d5:7b:c5:c1:47:2a:5f:af:1c:87:18:77:91:f9:6c:12:
51:ea:ef:88:69:de:99:68:4c:6d:5e:96:7e:35:35:c1:e9:b5:
e8:cc:9b:57:d0:17:a6:62:f3:08:7b:de:e2:9e:58:14:61:c6:
c5:39:92:63:2f:c4:d9:71:87:b9:e4:f1:11:a4:64:08:af:a2:
ca:5e:59:50:b4:6a:5d:da:5c:a0:c6:60:b4:b6:63:db:7b:46:
41:07:d2:eb:88:83:1f:32:23:8b:ea:f5:a4:91:c2:40:cd:bd:
77:34:b7:83:3c:d8:f5:45:0f:38:ec:ee:64:26:40:4b:b2:12:
9b:26:82:a5:93:32:d7:8c:4f:40:48:37:1f:29:96:f8:d5:2f:
04:8d:09:0b:54:7c:8f:77:60:f6:3c:c1:48:84:fd:88:a8:53:
1d:d0:c9:1f:d7:ab:e8:6e:25:c1:b3:97:88:93:23:76:57:11:
47:b9:05:eb:4d:ab:34:0d:ce:c6:d5:fc:95:2d:86:89:66:cb:
e7:b4:e0:cb:14:08:f2:f4:ec:84:50:14:92:9b:22:8b:6f:08:
fc:ba:58:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:07 2025 by rpki-client