Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
File: j5voJHXSWAjiFOmlyieRNHwR2rY.mft (raw, json)
Hash identifier: 23slF7FAgOEj+KSdkmJtCFeaW3M4l0+1eya2OqRqRwU=
Subject key identifier: 7F:7D:DC:0C:4B:E6:75:F2:E6:41:9F:E9:A6:6B:9C:6C:86:45:4C:08
Authority key identifier: 8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
Certificate issuer: /CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Certificate serial: 0199FD349427131D1392B22DF943D465A6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:45 +0000
Manifest this update: Sun 19 Oct 2025 16:01:45 +0000
Manifest next update: Mon 20 Oct 2025 16:01:45 +0000
Files and hashes: 1: j5voJHXSWAjiFOmlyieRNHwR2rY.crl (hash: IvxnNgi4FAwUV7P4bsUWxKzPZDx+BeKPX5Wl+WGljHo=)
2: ys17eRZKf5P4ptEUO7CgY8DVnRY.roa (hash: CelwNs3p1o5270NUJj8ZM/1/+n0plK08szDLjDEXAmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:94:27:13:1d:13:92:b2:2d:f9:43:d4:65:a6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9be82475d25808e214e9a5ca2791347c11dab6
Validity
Not Before: Oct 19 16:01:45 2025 GMT
Not After : Oct 20 16:01:45 2025 GMT
Subject: CN=7f7ddc0c4be675f2e6419fe9a66b9c6c86454c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:f1:4c:9e:8f:d2:b8:0e:dc:b4:2c:0e:cf:
b9:1b:3f:ec:64:fb:81:ab:56:40:fe:36:d1:4e:8b:
05:e2:c3:a5:18:b3:49:51:fb:c5:82:26:7c:40:13:
bd:28:ae:6a:b4:3f:6b:28:ad:72:e1:55:0b:33:62:
2f:50:f3:07:d1:e6:75:d9:29:c4:e6:45:b7:b4:8e:
d7:40:31:43:8d:f4:ea:c6:c6:89:ba:1d:e8:00:77:
f2:41:33:c8:8f:b6:40:0e:c7:49:8c:d8:f4:27:40:
f9:a2:61:16:01:31:9d:88:2f:51:c2:6f:17:43:b6:
81:19:ba:0a:ed:44:63:1c:d7:49:3b:1e:1e:cd:12:
4c:84:32:da:88:12:13:d7:81:08:3b:96:04:9c:bd:
28:ae:7e:54:aa:a1:9b:fa:9d:d0:e5:e6:42:8e:6b:
50:7a:68:7c:fc:75:09:ce:00:85:93:2e:7a:bb:c1:
fd:45:e2:61:04:92:7f:b9:3e:46:7d:e5:d6:32:11:
e7:36:63:a3:c8:b4:8c:d0:4b:9d:78:94:07:5f:7e:
6c:a6:6e:a3:fb:02:f8:9d:ce:0a:20:7e:ad:23:fe:
84:32:5d:c1:23:aa:cf:83:9f:e6:30:9f:11:2f:95:
6d:28:21:86:c2:99:2b:90:4f:93:f3:be:db:08:25:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7D:DC:0C:4B:E6:75:F2:E6:41:9F:E9:A6:6B:9C:6C:86:45:4C:08
X509v3 Authority Key Identifier:
keyid:8F:9B:E8:24:75:D2:58:08:E2:14:E9:A5:CA:27:91:34:7C:11:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5voJHXSWAjiFOmlyieRNHwR2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e13b1c-7553-42cf-b8c5-ca10a488c715/1/j5voJHXSWAjiFOmlyieRNHwR2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7a:ba:22:38:4e:c8:70:6e:2f:d6:a3:cc:1e:ce:8e:c2:f4:
8c:b5:a1:22:69:f6:ca:96:55:6b:d1:bf:2f:5b:74:66:dc:be:
3c:06:a1:44:7e:29:ae:34:bd:cb:6e:fa:fa:70:24:cd:2d:4e:
ce:bf:f2:7d:8c:31:81:bc:e0:6e:dd:32:f0:7c:4f:fb:31:da:
8e:08:c5:96:36:a5:99:15:22:9e:03:36:3a:59:ce:5b:71:2b:
83:37:88:30:d0:53:7a:78:9d:58:f4:11:4e:2b:94:24:c2:23:
89:67:5b:f2:8c:31:5f:7e:70:41:9c:e7:4a:88:67:07:8e:e7:
73:40:80:e4:9a:2e:f8:3d:05:7f:55:f6:80:21:bd:fa:a4:5a:
9e:06:83:d5:23:e2:c2:9b:67:50:28:2c:82:40:b7:f2:e8:2d:
b0:a8:70:c7:5c:79:1a:e7:af:d9:80:cd:83:d5:47:f1:22:59:
7f:0e:73:7f:5d:77:c6:01:28:94:63:4f:1d:1a:6d:ca:8e:1c:
f8:64:30:38:3a:ad:08:f0:26:da:85:6e:33:5b:33:2e:ce:80:
2c:a8:3b:79:cd:a6:a6:4e:12:68:9f:7c:dc:83:58:eb:a0:11:
a3:08:92:30:e7:da:15:47:c2:57:83:e0:d0:39:5f:86:a4:79:
b2:1b:ef:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:44 2025 by rpki-client