Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
File: jjh1qArSM-nChxWYg3H3fuw_Ygw.mft (raw, json)
Hash identifier: hoWQI71+f37BkOOMhTsw/zUFmvhGuxa8Jzg8ePhKFRo=
Subject key identifier: 27:5C:A9:E6:AC:9A:5F:10:3A:D0:E2:F3:A0:7B:62:91:D9:C2:34:ED
Authority key identifier: 8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
Certificate issuer: /CN=8e3875a80ad233e9c28715988371f77eec3f620c
Certificate serial: 0199FC58655576049F1E0C6BAB4591C2626B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 12:01:15 +0000
Manifest this update: Sun 19 Oct 2025 12:01:15 +0000
Manifest next update: Mon 20 Oct 2025 12:01:15 +0000
Files and hashes: 1: 0YS8AQvr8ByNBG7KTwD6sIOGH8A.roa (hash: k8sO4Fn23jLZke1eiUIEXbtdN/A5BluF8j3tNYbaMCM=)
2: jjh1qArSM-nChxWYg3H3fuw_Ygw.crl (hash: yA+9OQYyg6boc1Dpwt4nLF3KNyeuKVFs0CmCq6iO1bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:65:55:76:04:9f:1e:0c:6b:ab:45:91:c2:62:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e3875a80ad233e9c28715988371f77eec3f620c
Validity
Not Before: Oct 19 12:01:15 2025 GMT
Not After : Oct 20 12:01:15 2025 GMT
Subject: CN=275ca9e6ac9a5f103ad0e2f3a07b6291d9c234ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:5a:44:d1:51:83:25:18:0a:9b:21:e5:16:
36:65:9a:e9:d3:d7:20:66:5a:a3:c5:9a:58:b3:a1:
3d:bb:b2:b7:0b:4e:f6:89:0e:7e:80:6b:37:3b:2f:
a6:d7:0b:0a:43:be:67:03:de:3a:83:82:90:df:cd:
22:ca:58:ec:a4:9e:6c:25:14:11:00:3b:8d:2b:eb:
c4:7e:6c:90:0c:9a:75:8a:7d:41:07:03:85:df:ec:
08:9e:5b:24:2e:e3:aa:39:80:04:ba:b6:d6:4f:ea:
c4:c0:40:d1:33:84:6f:da:e9:74:84:bd:49:a9:9e:
a3:28:bb:c5:34:94:4e:bf:13:04:c2:c5:fc:c4:9b:
3e:ab:d2:02:d2:ad:f2:b7:5a:6a:57:50:c6:10:0e:
25:65:30:9a:6b:7d:d4:42:72:4c:72:f7:5a:3b:0c:
cb:52:a9:63:67:a6:67:b2:77:62:e5:dc:15:17:eb:
bb:ca:f1:c6:6e:ee:0a:1a:93:a9:df:f8:b3:64:97:
87:b7:d6:5e:d2:0e:22:be:fc:d3:88:fc:d4:67:83:
d3:35:b8:2c:b2:00:db:a8:51:de:e6:f6:0e:53:56:
b2:19:3b:25:30:71:17:a0:ba:1a:73:47:18:4f:d9:
99:ea:ea:fa:b9:3c:33:34:2d:e3:fb:72:15:b7:34:
cc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5C:A9:E6:AC:9A:5F:10:3A:D0:E2:F3:A0:7B:62:91:D9:C2:34:ED
X509v3 Authority Key Identifier:
keyid:8E:38:75:A8:0A:D2:33:E9:C2:87:15:98:83:71:F7:7E:EC:3F:62:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjh1qArSM-nChxWYg3H3fuw_Ygw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/866599-3fa0-4230-ba9a-19c4ff1877bb/1/jjh1qArSM-nChxWYg3H3fuw_Ygw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:0c:3f:56:29:89:06:e0:1a:5b:ab:bf:28:0b:af:9d:9f:2f:
d5:cf:7a:fd:b7:79:0b:3d:27:32:72:69:50:83:ec:71:a1:61:
e0:eb:3a:4e:21:9d:84:dc:ae:b9:27:cd:26:bb:6a:1f:d7:a2:
0c:93:e0:7c:c9:fb:92:52:3a:6e:e1:5b:fa:fb:7b:b3:bb:af:
6d:07:bf:1c:c4:2d:c4:3a:8e:8b:4f:9a:13:ae:eb:f3:c9:22:
14:e4:35:cf:46:3c:ef:17:97:83:f6:c0:c4:2a:29:75:26:e9:
fa:a5:90:fa:c5:5f:9c:f7:c6:c5:d9:5e:86:82:de:27:b5:d0:
6e:ec:87:0c:1f:86:56:cf:8d:86:65:95:5a:93:ab:44:9f:3d:
61:c1:aa:e8:6f:f7:bd:e5:58:b3:b8:f1:bb:cf:c3:47:69:9b:
1f:85:59:1a:7b:99:f2:14:a9:bd:d4:9d:46:77:fb:73:d9:8e:
8c:b3:93:6c:ed:93:05:1a:95:57:b1:10:03:56:48:79:3b:9b:
98:5d:b9:71:6d:49:32:06:c1:56:32:ff:46:01:b0:05:a8:4b:
38:b8:31:29:f8:68:90:6c:dd:9f:26:3c:7d:2c:78:08:7f:61:
07:64:6a:ca:19:d8:64:ab:bf:de:f0:c0:32:fc:1e:cd:f0:c6:
cc:c3:7c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:18 2025 by rpki-client