Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
File: jImAGxmqlyitT2u3GFwR8UudjXw.mft (raw, json)
Hash identifier: G3u7gxZpugnyiIIJUdR2dUXH13y0a2zbAeqE4pyqjZA=
Subject key identifier: 87:8A:B0:F0:B5:82:D7:D2:AC:50:C4:C6:37:42:98:F8:F8:C1:0A:F3
Authority key identifier: 8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
Certificate issuer: /CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Certificate serial: 0199FFC728F6119693FBB76C07947D699365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 04:01:06 +0000
Manifest this update: Mon 20 Oct 2025 04:01:06 +0000
Manifest next update: Tue 21 Oct 2025 04:01:06 +0000
Files and hashes: 1: jHt_1MNQirxASDmqQViticPF-ps.roa (hash: PWOLXQilLHy5JAj1j3MO8KwTsebKycEVRdXXWLZvuq8=)
2: jImAGxmqlyitT2u3GFwR8UudjXw.crl (hash: zYZ73Ix/xuVXWeOFL2leR1XB10JWFgjcEjsRyRrMAIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:28:f6:11:96:93:fb:b7:6c:07:94:7d:69:93:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c89801b19aa9728ad4f6bb7185c11f14b9d8d7c
Validity
Not Before: Oct 20 04:01:06 2025 GMT
Not After : Oct 21 04:01:06 2025 GMT
Subject: CN=878ab0f0b582d7d2ac50c4c6374298f8f8c10af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:f9:fb:ab:85:a7:e0:7d:db:78:c1:f0:b9:
ec:35:f0:37:9d:30:3b:0d:55:28:e0:7f:73:dc:a5:
3f:7c:94:4e:fd:8f:10:8e:cc:4d:75:01:91:5f:43:
44:c0:40:e5:ac:80:16:8d:66:a3:80:2f:43:38:61:
41:36:17:68:db:d1:5a:93:75:67:ab:b5:e3:2a:61:
20:1f:a7:26:8a:49:b9:f1:ee:87:89:5e:75:59:5a:
89:86:3d:ab:ab:6f:73:71:89:27:20:9e:a2:f6:be:
1c:e1:bb:11:d8:2c:cd:3e:12:e9:bc:bb:f4:35:07:
1b:7e:fb:33:f4:03:37:56:ba:e3:3f:3c:c9:7d:2d:
a8:ef:59:cb:6d:be:08:89:82:bb:a8:6a:e3:ee:0a:
56:3f:0a:88:48:b8:87:1b:ca:56:cd:36:81:c5:3d:
bd:1d:e7:e7:ac:96:bf:52:9a:ee:7e:0c:7d:2c:9d:
d0:c8:d2:db:91:9a:1f:9f:71:1a:63:f3:6b:8f:80:
ef:42:f1:91:36:f8:ef:50:bb:9c:ee:2f:7b:f1:91:
2c:3c:65:1a:65:e7:da:4f:6f:83:b7:01:c9:27:61:
6e:d5:86:3e:b4:c6:72:cf:f0:76:ed:67:38:2a:a3:
a8:ea:0a:57:01:1e:86:e7:57:94:21:6c:27:18:ef:
1c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8A:B0:F0:B5:82:D7:D2:AC:50:C4:C6:37:42:98:F8:F8:C1:0A:F3
X509v3 Authority Key Identifier:
keyid:8C:89:80:1B:19:AA:97:28:AD:4F:6B:B7:18:5C:11:F1:4B:9D:8D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jImAGxmqlyitT2u3GFwR8UudjXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3066ca-e017-4f61-adc5-728e9967daca/1/jImAGxmqlyitT2u3GFwR8UudjXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d1:19:2a:c5:22:76:06:ba:07:22:0c:d5:ce:be:37:5e:b5:
b4:99:e4:00:2e:14:04:ef:26:be:d4:68:63:a3:b9:06:47:7b:
e7:bf:82:85:14:56:15:30:50:b0:80:07:39:97:53:b3:1a:77:
d2:4b:84:70:6d:21:cc:72:dc:3a:1e:cc:d9:84:71:a1:c2:7b:
7a:b9:20:22:1b:be:64:d0:c5:84:8b:72:d3:d7:89:b1:5b:af:
f6:6d:96:2b:63:a8:69:68:1d:6a:57:a1:df:aa:f3:bd:42:33:
a1:09:36:d3:38:58:38:3e:6f:27:bd:c6:a0:25:21:b4:b2:f1:
d6:52:9d:92:91:31:4d:96:f4:49:b4:cb:72:9a:fc:34:6d:dc:
6f:62:94:6a:75:87:ff:20:12:b8:40:54:07:9c:b8:b3:3a:3f:
78:3d:e7:ac:f3:42:63:6a:42:c0:05:ff:7a:80:71:b9:83:0b:
45:ec:ba:3d:6b:0c:01:fe:45:8e:da:2d:f0:cb:fd:b3:d7:ce:
bf:e3:df:42:d8:b7:2c:5f:77:f5:e0:f9:8b:18:0d:da:97:61:
4d:45:62:96:cf:2a:ad:9d:5e:31:19:92:c0:58:e3:6d:e9:71:
cb:63:79:b5:14:28:b9:22:d7:3f:f9:0f:f8:72:1e:60:96:0f:
91:8f:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:03:30 2025 by rpki-client