Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft
File: j493R7eqBqdUJRZiDt45nQHlx-Q.mft (raw, json)
Hash identifier: hBY65wwSbdTggZxHr5PMhrvAowZ4P2QreaXhC8dQil8=
Subject key identifier: 17:A3:29:76:2F:FF:A5:FE:6D:81:9A:D4:07:E5:F8:25:F9:6E:37:1A
Authority key identifier: 8F:8F:77:47:B7:AA:06:A7:54:25:16:62:0E:DE:39:9D:01:E5:C7:E4
Certificate issuer: /CN=8f8f7747b7aa06a7542516620ede399d01e5c7e4
Certificate serial: 0199FAD86B0FC0BB884EF0793A93F129E11B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft
Manifest number: 20
Signing time: Sun 19 Oct 2025 05:01:51 +0000
Manifest this update: Sun 19 Oct 2025 05:01:51 +0000
Manifest next update: Mon 20 Oct 2025 05:01:51 +0000
Files and hashes: 1: j493R7eqBqdUJRZiDt45nQHlx-Q.crl (hash: 3qGZS/LE3AEXmsCB9nvhzZKOeI1grkn+nK9kDYK6+Pg=)
2: ziCwa1ZpRucLQqC8RsqB-EGT_f8.roa (hash: LDs5gDGAS/QA8OuoaiSZeVmSdeDBB4mdwdOvMRTKuLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:6b:0f:c0:bb:88:4e:f0:79:3a:93:f1:29:e1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8f7747b7aa06a7542516620ede399d01e5c7e4
Validity
Not Before: Oct 19 05:01:51 2025 GMT
Not After : Oct 20 05:01:51 2025 GMT
Subject: CN=17a329762fffa5fe6d819ad407e5f825f96e371a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:7c:36:2f:31:71:58:d2:26:2b:7f:8f:70:
98:5b:9a:6b:47:78:90:53:6e:db:42:58:59:89:a6:
66:47:e1:f1:e1:6f:3b:7d:97:9a:40:fb:71:5b:0a:
df:55:c1:bf:6b:54:fb:fe:8b:04:62:cf:e0:93:4c:
80:21:6a:6a:ad:5c:96:1c:05:84:78:cc:0f:a9:4a:
b8:5c:58:9c:af:09:71:7b:b0:ac:a5:44:33:b4:07:
d2:5d:69:7e:74:ec:e0:74:cf:5c:99:4d:76:b1:91:
fb:d6:36:e6:6d:08:ee:91:62:62:eb:bf:e5:bf:23:
de:e8:c4:fa:39:97:ca:bf:6a:bb:c8:a9:00:3b:f2:
86:fc:dc:ed:d5:eb:d2:20:50:01:ad:d1:b6:03:1e:
c9:b8:3c:ae:41:a2:60:87:5c:16:53:62:2c:4b:0a:
90:6f:fd:7e:6b:02:aa:d4:81:4b:0e:86:35:3e:98:
66:f0:61:71:36:3f:21:1c:24:df:55:bd:b7:98:c5:
9a:9b:1b:b3:4e:75:32:91:ea:bd:8a:25:ca:ed:df:
c8:fd:d1:7f:27:bb:ec:ca:37:9e:94:92:f5:00:7e:
97:ed:2d:be:6f:13:9b:d6:87:e2:93:16:72:fe:68:
fc:2c:c5:21:11:c8:09:c3:ea:06:42:7c:7b:0e:20:
e8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A3:29:76:2F:FF:A5:FE:6D:81:9A:D4:07:E5:F8:25:F9:6E:37:1A
X509v3 Authority Key Identifier:
keyid:8F:8F:77:47:B7:AA:06:A7:54:25:16:62:0E:DE:39:9D:01:E5:C7:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j493R7eqBqdUJRZiDt45nQHlx-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7beb9e-0141-4825-9a18-cbe475d32c63/1/j493R7eqBqdUJRZiDt45nQHlx-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:4c:a0:a4:1d:06:05:39:a0:26:e9:47:7b:70:01:f2:0e:c0:
d1:5f:d1:ec:7c:2a:ca:2d:72:98:f2:4c:01:d4:20:fe:4c:9a:
ea:56:cb:9f:70:c3:3a:f9:57:c6:b8:f4:81:e1:ae:c6:46:df:
c3:e6:f4:e9:ed:7c:9e:fd:b9:77:60:8f:cb:ee:95:56:ac:d4:
74:42:a9:57:77:c2:e6:c1:0e:b4:79:b0:4c:f8:e8:7f:0e:e8:
af:34:98:0e:11:03:f4:4f:6f:30:8d:40:f5:44:b6:b1:39:bf:
76:3e:4d:9a:41:fc:bf:09:b9:ce:47:8f:d5:75:e6:37:e9:d8:
ba:f5:cf:f8:e1:73:2d:4e:d6:0a:a8:8f:5e:56:c6:2f:f3:e4:
a5:ce:2b:19:61:5f:89:82:4a:0f:a2:d6:99:6b:2c:47:48:ba:
94:4f:67:a3:e7:4c:bb:8a:54:11:f8:71:e7:72:1e:8b:ab:6b:
b9:5a:05:f7:d1:e8:4b:3a:e2:9b:84:a1:23:0c:b4:aa:ce:06:
65:b3:e2:f6:e1:43:a2:86:82:1b:27:c5:81:81:46:a1:94:63:
88:1e:5e:b2:d6:a5:72:be:8d:7d:dc:73:a7:6e:8d:7d:b6:b2:
cf:31:0a:ba:c3:d7:21:7d:58:79:52:16:75:5b:fa:d6:0d:04:
40:bc:b6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:10 2025 by rpki-client