Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
File: jlVrUrjk5wn6Vpta43LG4oJm8jI.mft (raw, json)
Hash identifier: zRMnL2LqUBWTx+BH4NP4Q/GXdUEVIrlFeMfuRPNpau8=
Subject key identifier: FA:B5:03:BE:FE:C5:7E:97:3B:31:3E:DD:E2:39:5D:F5:55:97:64:84
Authority key identifier: 8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
Certificate issuer: /CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Certificate serial: 0199FEB54220513D550F2AE2FE36A2E7A059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
Manifest number: 096F
Signing time: Sun 19 Oct 2025 23:01:55 +0000
Manifest this update: Sun 19 Oct 2025 23:01:55 +0000
Manifest next update: Mon 20 Oct 2025 23:01:55 +0000
Files and hashes: 1: OL1d446I3yxzCjYzKmvnNJ7y4OM.roa (hash: JsE4VCK3qUktBFupzIAgFOT4HayiXvdUAIXOsvhciFE=)
2: jlVrUrjk5wn6Vpta43LG4oJm8jI.crl (hash: /TVjXyDg8dHNo7T4xq0B7NNiSzIPXarCtjgny59J9GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:42:20:51:3d:55:0f:2a:e2:fe:36:a2:e7:a0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e556b52b8e4e709fa569b5ae372c6e28266f232
Validity
Not Before: Oct 19 23:01:55 2025 GMT
Not After : Oct 20 23:01:55 2025 GMT
Subject: CN=fab503befec57e973b313edde2395df555976484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:59:0b:6e:83:70:53:8f:0f:91:cb:af:1f:
f2:0d:4d:7c:b4:b8:35:40:f9:21:16:59:bc:c6:cd:
d7:dd:f3:be:a5:da:61:5e:83:fe:ba:00:18:71:aa:
74:c8:d8:35:f0:e2:f8:bf:bd:2c:42:0e:02:b5:98:
4f:b3:37:b3:f9:2a:31:0a:4c:ee:53:13:04:4e:ee:
d2:31:dd:13:0a:c8:43:e4:a9:6e:d4:1b:f4:4e:a7:
d6:90:ad:19:41:a4:4a:72:6a:54:bf:5b:68:7a:5e:
fe:1b:d1:20:b4:48:76:f5:c5:ba:a0:fa:cd:8f:c3:
50:a7:b1:40:f6:11:31:dc:bf:0c:d2:b9:69:9b:f7:
b2:ba:0d:b3:96:be:6c:87:2e:e1:0d:03:4a:41:f5:
01:bb:c6:83:87:da:3c:38:dc:94:fc:23:6d:a9:34:
aa:b5:c3:9c:74:9c:85:e4:41:59:1e:7d:ae:6e:d3:
f7:95:54:16:c9:4f:76:22:e1:01:a1:f1:f3:92:dd:
a0:ea:44:20:99:be:fa:58:b5:b9:64:1b:c8:55:11:
82:52:7f:d3:44:b1:5c:02:44:eb:8a:b5:3b:79:ed:
70:75:4f:44:70:64:0b:a1:8a:33:27:34:25:06:e0:
81:69:b1:fd:47:fb:65:ea:9f:be:40:48:65:90:9d:
37:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B5:03:BE:FE:C5:7E:97:3B:31:3E:DD:E2:39:5D:F5:55:97:64:84
X509v3 Authority Key Identifier:
keyid:8E:55:6B:52:B8:E4:E7:09:FA:56:9B:5A:E3:72:C6:E2:82:66:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlVrUrjk5wn6Vpta43LG4oJm8jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/88f2a5-27e8-4671-a8d3-cde702c0ec8b/1/jlVrUrjk5wn6Vpta43LG4oJm8jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5f:31:44:01:ec:b2:93:55:16:04:61:11:f4:ce:22:81:5e:
2c:9f:fa:cf:b9:4d:c0:5e:0c:76:03:c7:bf:c8:4f:26:14:92:
ba:34:26:01:83:30:75:62:15:73:c4:84:5e:74:49:05:52:64:
47:3f:6c:e4:aa:05:64:77:77:ee:08:b7:f8:f8:0d:44:55:18:
f8:4d:95:66:7b:33:eb:14:ab:0d:d7:80:d9:30:23:ac:1e:fb:
70:23:09:ad:6c:9e:17:88:88:a3:ca:a2:be:6d:85:e7:a0:4f:
fa:d9:8e:6f:78:d4:43:7f:b9:d5:5b:20:14:0d:89:99:7b:d2:
ae:8c:75:36:f4:0b:a7:b9:3c:a0:c2:27:97:17:a9:f9:ec:c2:
50:24:14:db:cc:15:80:fe:91:3b:f3:9d:34:8c:50:f0:70:59:
8a:a8:7d:27:3a:04:f7:8d:64:cf:45:01:88:49:ae:3b:b1:82:
9c:49:dd:23:7b:db:82:39:72:80:13:67:c5:ef:36:75:8a:ab:
65:20:79:89:bb:05:61:40:b3:9a:80:5e:c8:83:a0:91:06:0b:
1b:81:62:b7:68:e1:c1:eb:ea:6a:9a:44:77:e4:c4:df:a5:2a:
2a:05:d3:f3:ec:57:a2:4e:e7:6b:fe:cc:25:c8:2a:01:4c:ef:
08:18:ff:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:35 2025 by rpki-client