Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
File: jjUN1thC69Td0IytQdj_gWv9__g.mft (raw, json)
Hash identifier: vAFW1B+N2ZWqu7t75nHJYcDGAZLzi5ZHfXSZXiV/UWU=
Subject key identifier: D0:18:34:50:0A:86:1B:33:B0:74:C1:76:B3:14:00:CA:1A:00:06:96
Authority key identifier: 8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
Certificate issuer: /CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Certificate serial: 0199FB0EFDD7BB20A76AFE15A54314B8C0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
Manifest number: 0F55
Signing time: Sun 19 Oct 2025 06:01:27 +0000
Manifest this update: Sun 19 Oct 2025 06:01:27 +0000
Manifest next update: Mon 20 Oct 2025 06:01:27 +0000
Files and hashes: 1: iVIbS2LxmtBFtz1_IM2nGzPQpUE.roa (hash: tzf09d7UopXNcvR8NL3fhh4Pys9GVj3aQxT6Ly8ih98=)
2: jjUN1thC69Td0IytQdj_gWv9__g.crl (hash: MLL0jiBoQJBSIIA+9f0LwtaJj88AHDhwl+bCqhDw4Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:fd:d7:bb:20:a7:6a:fe:15:a5:43:14:b8:c0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e350dd6d842ebd4ddd08cad41d8ff816bfdfff8
Validity
Not Before: Oct 19 06:01:27 2025 GMT
Not After : Oct 20 06:01:27 2025 GMT
Subject: CN=d01834500a861b33b074c176b31400ca1a000696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:15:0e:d2:00:9c:02:a9:6a:b7:af:49:15:
48:c1:8c:48:e9:e9:9e:37:e8:d6:7f:27:2a:1a:01:
fb:c9:66:2a:aa:a9:e2:a2:08:42:2a:2c:0d:6a:70:
6e:cf:3e:21:7b:4c:d2:4e:74:5d:70:36:49:15:8e:
a2:21:ba:21:c3:e4:1e:54:e0:c8:5d:f5:72:b1:01:
67:25:3a:61:7b:90:1d:78:ae:0c:5b:47:be:48:df:
79:0a:05:e8:1b:58:c5:a0:d7:e6:d9:f7:d3:47:9f:
d6:ba:3e:30:cd:ca:2f:5c:cc:0b:ae:a1:f2:36:6c:
df:da:7c:90:ce:e8:99:85:73:a6:3d:92:df:30:8f:
83:a7:aa:30:7d:ae:28:d0:15:42:7f:6b:80:62:0f:
bb:ac:6d:29:96:64:c6:9c:a1:1a:d0:c7:3f:3a:be:
e2:84:a2:cf:7d:ff:f6:b6:3a:fa:65:e1:6f:05:ed:
ac:eb:d1:e3:45:6d:e8:05:da:bb:70:de:ea:a1:b2:
ce:6b:34:8a:9d:a2:59:35:47:f8:38:83:bf:27:5e:
11:f6:a8:19:f8:12:ff:e3:1b:67:25:12:09:33:19:
24:1a:ac:36:25:f8:25:c8:b3:dc:f9:a5:19:82:ca:
ef:8a:aa:a3:66:f0:f3:4c:6c:cc:92:6e:0d:5d:4d:
ab:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:18:34:50:0A:86:1B:33:B0:74:C1:76:B3:14:00:CA:1A:00:06:96
X509v3 Authority Key Identifier:
keyid:8E:35:0D:D6:D8:42:EB:D4:DD:D0:8C:AD:41:D8:FF:81:6B:FD:FF:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjUN1thC69Td0IytQdj_gWv9__g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf2e1-3392-4b6e-9597-21f3f26484d9/1/jjUN1thC69Td0IytQdj_gWv9__g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:8a:81:dd:13:ef:7f:2f:24:ab:b8:da:bd:80:e2:23:cd:33:
73:5c:66:a1:fb:c4:8f:d5:c9:38:e4:fc:ad:a7:6e:ea:66:dc:
78:c8:72:cd:98:bf:23:28:10:5f:65:df:41:0f:29:ff:89:86:
a1:6c:2e:0c:69:ee:89:ce:d4:8c:1a:5d:60:b5:f2:59:2d:7f:
77:cb:85:db:3b:50:cd:3a:84:94:27:23:a0:89:d9:01:d0:f8:
55:bb:e3:34:76:77:0b:67:fe:2c:93:54:72:39:4f:16:d4:7c:
d8:1f:7c:7d:03:5c:93:c0:e5:01:08:ed:9a:93:b7:0a:fd:1f:
fd:06:d7:77:aa:06:5c:51:2e:e8:b2:70:10:77:3f:05:70:09:
63:b6:5a:26:34:94:b0:04:93:74:b4:8f:80:88:c2:c2:24:f5:
b9:ea:d8:b2:43:e1:75:10:4f:92:ce:ad:eb:1f:99:88:0d:47:
9a:52:dd:fd:2f:f1:3a:c8:76:1c:fa:b0:97:4b:7c:b5:01:b1:
0b:10:3a:52:3e:b2:23:54:f5:3a:23:c1:f9:0c:c5:c6:4f:2d:
cb:05:8e:e2:b4:6c:5c:d3:ad:74:31:68:f9:97:1c:4a:cb:aa:
a1:e7:f7:65:cc:52:c5:5a:40:bc:3a:c1:e9:3d:0c:14:3a:2b:
07:30:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:58 2025 by rpki-client