Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
File: jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft (raw, json)
Hash identifier: GLa1zsBXCL0u6BRdSGQ82qc6TIyfV1yOcXs381G1TZk=
Subject key identifier: E2:14:28:60:F3:72:BE:30:78:AD:01:1E:1F:85:C5:DB:B5:76:59:49
Authority key identifier: 8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
Certificate issuer: /CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Certificate serial: 0199FD34088CA3CC4E6539BCA7F6CFEA00EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
Manifest number: 0B61
Signing time: Sun 19 Oct 2025 16:01:09 +0000
Manifest this update: Sun 19 Oct 2025 16:01:09 +0000
Manifest next update: Mon 20 Oct 2025 16:01:09 +0000
Files and hashes: 1: 1RkFk6kOyZCZ0G93_QFK7wOQ0jE.roa (hash: dMUuv6OdwNCSIK7eZl1fAYrgrlFJZc1L1gPUfpLpqmg=)
2: J54Y1IoCU6EUYDsQwZq0KC6RsFc.roa (hash: xhKFAcEbOSjBXoqtlWbGh1EqEqQx5jRVKa/Fp/J2eqc=)
3: jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl (hash: Jc+5GqGFtGkDUYyr8qR06xDitknZzSYMlCGDnDte0Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:08:8c:a3:cc:4e:65:39:bc:a7:f6:cf:ea:00:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca8a4d42a0196df7cc0e14f597cf5660d63c09f
Validity
Not Before: Oct 19 16:01:09 2025 GMT
Not After : Oct 20 16:01:09 2025 GMT
Subject: CN=e2142860f372be3078ad011e1f85c5dbb5765949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:0a:fa:68:46:e6:09:bd:0f:fc:73:05:2c:
af:41:75:cf:5c:14:06:76:83:db:f8:f2:eb:9a:26:
4e:f7:9f:dd:04:e4:45:63:ff:04:7d:d5:4c:8e:43:
32:6a:c6:2e:88:0d:bc:73:95:54:a3:cd:90:e6:b4:
16:26:29:d4:f2:92:db:bb:49:d3:aa:8d:28:cf:75:
09:bc:82:31:1b:dc:c7:71:0f:64:ba:ae:b5:ee:63:
e6:56:c1:08:23:27:33:70:38:27:bf:b8:65:c9:41:
02:8a:bd:c7:54:3a:99:34:5e:e9:b9:f4:4a:01:41:
b6:14:e0:41:81:24:5e:27:ad:f2:58:75:aa:47:24:
2c:29:6b:9e:88:d5:fd:3c:9d:b4:49:2c:f6:be:9f:
80:d3:28:50:ac:b0:a0:94:80:c7:bd:ee:6d:c2:57:
6e:c3:5b:01:2e:52:fe:fd:d7:09:f8:0c:e6:e2:5d:
70:93:37:b0:77:74:af:0e:4e:02:fa:0e:7b:bd:8a:
55:11:a3:1c:89:07:64:8e:98:81:aa:d8:5d:ff:12:
2e:14:81:06:ff:36:eb:04:82:8f:1b:ce:dd:f1:6f:
fc:a2:f5:47:bb:a8:e3:b8:54:2f:23:53:92:3c:0e:
2f:63:18:7a:1b:b3:1a:e2:7b:03:45:ad:29:41:f1:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:14:28:60:F3:72:BE:30:78:AD:01:1E:1F:85:C5:DB:B5:76:59:49
X509v3 Authority Key Identifier:
keyid:8C:A8:A4:D4:2A:01:96:DF:7C:C0:E1:4F:59:7C:F5:66:0D:63:C0:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKik1CoBlt98wOFPWXz1Zg1jwJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bb0480-66ad-4288-b8d3-1004c1e50dfe/1/jKik1CoBlt98wOFPWXz1Zg1jwJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4a:eb:fb:33:3f:a2:24:0e:be:84:af:e0:3e:08:3a:56:37:
59:9f:f0:28:74:e4:a0:26:b7:55:8d:b5:0d:73:df:d3:89:af:
f9:c3:b7:68:dc:5f:b0:72:4c:d1:e0:4b:7a:9e:39:31:29:94:
ea:bb:24:1b:fe:ae:30:31:93:18:78:dc:45:56:97:be:fc:db:
5c:1a:16:65:52:eb:fc:dc:f9:b6:86:62:bf:e8:61:c7:a6:ff:
84:d1:a0:ba:fe:20:44:15:55:5f:b6:7d:78:36:80:56:56:9a:
4f:6a:d0:61:03:cf:cb:dc:da:41:dc:ec:da:fb:f8:7a:5b:1e:
36:fd:d7:3c:32:a3:04:f9:f6:68:ca:4b:c0:8c:91:7b:a5:e9:
e1:3d:52:38:b7:2e:8a:e0:a3:72:53:63:c7:ba:fa:c0:73:d2:
c3:9d:5a:32:5d:e1:92:0d:b8:9d:a5:4c:dd:d1:4f:21:31:44:
30:3f:8a:a8:d4:e6:59:53:c4:55:8c:b2:3d:1f:75:27:4a:11:
df:80:1f:cf:ab:7b:61:fd:ff:84:a7:08:74:4a:5f:e1:a2:3a:
65:1f:3d:9c:93:d9:6e:85:c4:61:e5:84:bc:5f:de:6a:06:89:
08:55:cc:a1:79:64:27:7d:49:28:e7:8a:4e:77:c9:9c:bb:21:
48:a0:a1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:30 2025 by rpki-client