Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier: 0nFog2w3Qy2H5LVcllkRnGJDDsoxfYZ9VutqPXQbkIQ=
Subject key identifier: 0C:F8:8E:93:6E:79:03:82:B3:E4:6E:FA:FB:E4:5C:24:E5:D9:A2:03
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial: 0199FC8F6F2D7C362F160DF98C8F11D92662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number: 1596
Signing time: Sun 19 Oct 2025 13:01:22 +0000
Manifest this update: Sun 19 Oct 2025 13:01:22 +0000
Manifest next update: Mon 20 Oct 2025 13:01:22 +0000
Files and hashes: 1: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: ZQagLvBiNHncV9HqOOeUXv+4tutTLj/Lks7Wyr3hiZk=)
2: orkmW_eZCcL4kmC7TM2XcG_njxM.roa (hash: WZm+hYZMy+CXUU6Z/uI/WhkL+3h0cGl03UVgN4cUA58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:6f:2d:7c:36:2f:16:0d:f9:8c:8f:11:d9:26:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Validity
Not Before: Oct 19 13:01:22 2025 GMT
Not After : Oct 20 13:01:22 2025 GMT
Subject: CN=0cf88e936e790382b3e46efafbe45c24e5d9a203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:1e:d4:90:b3:10:cc:5a:c3:f4:5a:69:e0:
43:9e:0b:5b:20:94:e2:28:e8:5b:2f:45:6b:4f:e9:
f0:fa:8e:33:f8:b0:30:a0:77:ba:9e:d3:0d:ed:86:
72:21:28:76:3f:13:08:41:5b:7a:b7:2f:51:6e:ee:
6c:5d:13:21:30:08:42:8e:01:48:9a:29:ca:47:8f:
a8:dd:de:45:87:25:86:0f:d7:ed:17:9e:c6:16:11:
fb:57:90:ff:b0:c5:73:eb:43:2e:82:f8:6b:96:97:
dd:96:13:65:e4:fc:d2:72:e7:3b:ac:c0:59:b2:f1:
60:c9:41:d7:e7:8a:b4:ac:8a:2a:78:70:0d:d2:ac:
c8:6c:d0:db:3c:2b:d8:41:2e:79:06:0d:cf:97:07:
1e:50:9f:a5:f2:32:90:1b:53:8d:13:e6:27:b3:1a:
fa:4d:11:d2:7b:60:56:46:7f:4c:2f:c1:63:12:73:
83:3c:ff:fc:b1:bc:4a:8f:bd:f2:0c:ae:eb:ba:fd:
cb:27:77:36:e0:9d:a5:19:4e:ad:a5:e1:2a:99:e3:
74:d4:d6:bd:9c:e5:11:89:39:ef:b2:5f:4e:4a:98:
ba:cb:07:6a:78:30:0e:54:16:51:e9:cf:88:cc:24:
53:8f:63:b8:d5:e9:86:9e:8d:38:ce:91:90:fc:70:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F8:8E:93:6E:79:03:82:B3:E4:6E:FA:FB:E4:5C:24:E5:D9:A2:03
X509v3 Authority Key Identifier:
keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d4:21:99:61:2b:02:00:63:2b:4b:6d:08:5e:b3:98:18:4f:
6e:e1:e2:4c:8d:13:ca:8f:89:eb:5e:29:fd:14:a0:6e:20:5c:
5b:60:44:bc:b0:27:6d:8c:ae:f0:91:06:2b:69:18:5b:c2:6b:
49:9a:43:fd:34:07:38:43:fb:f9:f3:e3:2a:9f:e4:c0:96:2f:
b4:10:a8:7d:d0:e6:52:43:19:9a:ed:17:fa:b1:9a:63:63:a8:
86:6a:53:6b:07:48:ce:6c:39:00:54:9f:ae:f7:70:9f:5e:83:
eb:55:d8:22:dd:b8:1c:41:43:c9:a8:00:98:28:00:5b:bb:b1:
41:06:38:98:0b:c5:f8:c4:b0:81:c1:68:b0:89:aa:84:b7:97:
9e:42:1b:3e:55:70:9b:dc:08:8c:84:60:09:2e:a2:b4:2b:37:
a0:82:ae:c2:8b:b9:fe:7c:2d:2d:a0:f3:36:e4:50:bb:04:88:
34:23:5a:70:ee:bc:9d:4f:df:37:88:d9:fe:72:33:58:b6:f6:
d8:31:c1:62:a3:fb:fa:ee:38:e7:b2:ae:f6:47:f4:c6:a7:d7:
04:63:90:82:56:d4:c3:3f:06:bd:45:30:6d:6f:71:31:05:c5:
e3:b9:52:c5:ff:58:20:86:12:26:30:eb:63:0b:59:e0:d3:dd:
1b:04:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:31 2025 by rpki-client