Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
File: j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft (raw, json)
Hash identifier: ORRsTr0oLLSE+Lp8YUd3v4ZqweRWOAtdj2rd8qT79FE=
Subject key identifier: 34:C1:F1:BE:86:67:6E:52:6A:1A:01:9F:81:48:99:04:3F:47:8D:6E
Authority key identifier: 8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
Certificate issuer: /CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Certificate serial: 0199FCFD90EF1BA42FB34E06202C1376B6C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 15:01:40 +0000
Manifest this update: Sun 19 Oct 2025 15:01:40 +0000
Manifest next update: Mon 20 Oct 2025 15:01:40 +0000
Files and hashes: 1: 10WRObO3tmaDpYMoBfmVIGzlnrU.roa (hash: n66l+JhsIf8xYrrxl7QWiJVsW0qqjRpUm2OsP46Hyms=)
2: j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl (hash: imd5ZKEXRuGJBhoz35/akSAhonZfd5a1HXYs0g8wZPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:90:ef:1b:a4:2f:b3:4e:06:20:2c:13:76:b6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ff1c98d3a77824e236b2c4cdd9378c0509a3de8
Validity
Not Before: Oct 19 15:01:40 2025 GMT
Not After : Oct 20 15:01:40 2025 GMT
Subject: CN=34c1f1be86676e526a1a019f814899043f478d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:64:37:5f:70:c2:02:de:10:34:f3:99:45:
34:28:69:81:26:8f:02:cb:d5:56:ae:0e:68:11:92:
26:f2:79:f3:ec:5f:ca:bd:62:67:3b:43:8d:6c:30:
0b:3f:ea:e4:bc:10:25:3f:9d:b6:b9:b5:0b:bf:c4:
88:64:2f:79:cd:b3:9d:9e:3c:39:8b:84:0f:13:2a:
2b:48:30:31:18:24:19:d5:33:87:a2:0d:e1:29:89:
1e:1e:00:5d:80:7e:bc:56:31:39:10:06:ae:02:21:
8d:33:12:69:84:33:01:ba:e2:5b:94:30:ab:c7:eb:
5d:3c:12:07:24:6f:9c:9d:33:75:d8:b3:d3:f7:b6:
17:33:70:89:5e:6f:83:0f:57:b3:21:fb:23:ea:c1:
ae:78:ab:fb:b6:90:5b:dd:c6:e6:89:1b:ff:0a:6f:
bd:5b:c6:70:22:cf:20:62:4f:c3:a6:0a:8d:28:c0:
92:d9:f1:fd:42:6e:c9:a1:76:29:dc:fb:49:64:f7:
d9:ad:60:b5:77:d5:1c:ec:4e:e7:36:d7:cb:03:9f:
3d:e5:eb:3d:5b:45:0d:ed:b6:48:32:80:8b:44:9c:
80:3a:42:b8:8c:31:49:76:fd:46:bb:56:9e:92:e4:
8c:87:0a:f4:b8:dc:3a:1c:cd:be:ab:57:69:30:f4:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C1:F1:BE:86:67:6E:52:6A:1A:01:9F:81:48:99:04:3F:47:8D:6E
X509v3 Authority Key Identifier:
keyid:8F:F1:C9:8D:3A:77:82:4E:23:6B:2C:4C:DD:93:78:C0:50:9A:3D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_HJjTp3gk4jayxM3ZN4wFCaPeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d505a5-243d-4619-a6fa-fbd703ee6c93/1/j_HJjTp3gk4jayxM3ZN4wFCaPeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1c:16:53:68:58:cb:a5:6e:c6:b3:69:d5:11:09:63:db:c0:
5c:9f:3e:cd:fa:75:8c:b3:d9:47:9d:43:3c:d5:59:0e:7d:2e:
a6:fd:5d:47:d5:d7:8e:d9:96:7a:e6:b8:31:27:7c:41:1e:2d:
38:2a:9c:81:11:1e:fb:a3:d8:ce:80:14:4e:dc:1c:6d:c0:68:
38:de:64:49:cf:da:e1:cd:5f:01:0d:f8:a0:a8:aa:5a:89:93:
92:79:f2:0e:f6:8e:71:95:c8:9d:5a:9d:d2:56:2f:41:2f:0b:
81:5b:be:53:d6:cf:e6:49:e8:1f:5b:af:96:78:f7:80:55:f5:
81:3f:88:70:c6:19:52:46:94:20:97:bd:e9:78:03:cf:4c:95:
ca:21:f5:5b:53:bf:9e:cc:29:0b:30:fe:29:52:c6:d0:12:dd:
45:2b:e3:d6:ab:2b:81:4e:03:33:84:cb:62:f8:6f:d8:8a:24:
bc:52:d2:17:63:a4:88:32:70:82:44:f9:5c:12:00:3a:72:58:
a7:c7:61:c0:e5:3a:fd:ff:ea:f9:11:25:c8:0c:e0:9c:01:e4:
36:7d:ab:58:bb:07:7e:da:67:a2:a7:33:e5:3f:fc:49:48:32:
a2:48:7f:bf:52:49:58:bc:b5:5e:bc:ad:07:b3:65:04:81:c7:
28:6f:d0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:51 2025 by rpki-client