Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
File: jDTik43WiEm7QG6et5yJPmwSx4o.mft (raw, json)
Hash identifier: CF5wCxXzGC5FZ9MLihqO946wj1GrYBrupyCzgp1Ql3A=
Subject key identifier: 96:56:EE:78:18:57:A6:91:03:E8:92:9A:2E:51:15:66:13:36:0F:6C
Authority key identifier: 8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
Certificate issuer: /CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Certificate serial: 0199FC59024B633FD92026E252B1E62B1B57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:55 +0000
Manifest this update: Sun 19 Oct 2025 12:01:55 +0000
Manifest next update: Mon 20 Oct 2025 12:01:55 +0000
Files and hashes: 1: _xcIQcrm4noRq8C0ZoCPTZiOCWs.roa (hash: +umQkbTDLA3XudEv4u8EibqqHd0r0Zew/gszN5k+/5Y=)
2: jDTik43WiEm7QG6et5yJPmwSx4o.crl (hash: 2l6Ah6N9xpcZQsv6hJ9Czn+ZNP7jHD6M3iZe54iRJEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:02:4b:63:3f:d9:20:26:e2:52:b1:e6:2b:1b:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c34e2938dd68849bb406e9eb79c893e6c12c78a
Validity
Not Before: Oct 19 12:01:55 2025 GMT
Not After : Oct 20 12:01:55 2025 GMT
Subject: CN=9656ee781857a69103e8929a2e51156613360f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:c5:89:46:a3:f4:f4:79:1a:bc:8b:38:fd:
cb:5d:a0:be:d5:98:19:79:0b:d1:b7:06:cd:3d:a5:
bb:f3:72:75:04:2d:4c:50:b7:5e:74:9d:26:85:37:
90:df:74:fd:fc:f7:11:64:10:b5:22:34:b8:78:26:
72:28:b9:a0:f8:19:6e:8e:16:4d:af:1d:c5:5a:5e:
2b:58:ac:9b:88:6e:a6:e3:3d:97:09:e2:8c:2f:2b:
5f:e8:83:b4:6d:08:bf:b4:98:35:28:d2:b6:df:eb:
b6:5b:02:22:3d:84:1d:f4:37:b8:1a:fb:68:82:d4:
1a:45:ba:80:47:35:66:12:8e:47:c7:ed:b1:ee:47:
d7:22:c5:03:f2:24:47:5a:b2:32:59:cf:31:e6:c5:
28:04:13:6f:81:3b:f2:53:ec:3b:48:5a:93:b7:15:
61:65:4c:d7:b0:ef:71:5b:0b:21:ee:23:c3:e5:32:
be:9a:01:f3:da:be:c1:87:09:bf:8d:c7:78:02:65:
88:71:54:66:1b:02:f5:40:6b:9e:ec:16:7c:1c:6b:
33:ef:f6:59:2b:da:a8:1b:d1:67:0a:ba:a5:c4:2d:
37:31:94:1f:54:1a:c7:1d:c3:4a:4a:0e:71:2e:ce:
b9:ad:54:86:f3:ce:00:85:6d:ea:01:c0:b8:17:2d:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:56:EE:78:18:57:A6:91:03:E8:92:9A:2E:51:15:66:13:36:0F:6C
X509v3 Authority Key Identifier:
keyid:8C:34:E2:93:8D:D6:88:49:BB:40:6E:9E:B7:9C:89:3E:6C:12:C7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDTik43WiEm7QG6et5yJPmwSx4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/320797-b810-4f8e-8e7c-83c38b777478/1/jDTik43WiEm7QG6et5yJPmwSx4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b8:04:59:73:63:b5:50:41:2e:c0:c7:78:0e:6c:92:e6:4e:
ff:c7:cf:08:5d:07:51:d2:75:ec:ca:82:62:e4:62:36:e1:94:
7d:1e:3b:c8:e6:c3:fb:f5:26:e3:63:7f:9b:81:70:25:c3:e3:
21:b4:5f:c2:6f:1e:0e:f7:b3:26:f5:a7:27:20:80:fa:ed:71:
02:ba:4d:70:7c:7b:22:da:a0:46:71:4c:69:1b:8b:47:45:64:
f0:e3:67:02:69:ed:c3:c1:fd:b4:ab:9b:83:fd:b8:c5:5e:2f:
10:fa:6e:e6:cc:bb:a7:a0:02:21:76:0d:19:db:85:5e:48:06:
a6:52:30:5d:8d:1a:7a:46:90:59:b5:c0:3c:ac:54:96:2a:9e:
da:64:dc:ba:fc:64:f3:ef:bb:47:63:d1:a9:02:4f:15:17:95:
8f:8b:f6:13:f6:33:69:ec:0f:54:0b:29:1c:05:ae:ff:4c:48:
42:8a:38:87:64:f9:aa:6a:a0:2e:9b:a7:55:30:c0:bf:cd:4e:
0f:c0:e7:e1:4d:96:ae:f4:aa:6c:b2:23:f7:7a:85:aa:7d:47:
e1:48:d8:35:ad:a9:9c:08:cb:ea:aa:b4:0d:72:85:5c:ef:9b:
f7:cf:81:fd:57:5d:4a:cc:0e:d1:02:a4:b7:87:ef:d3:b0:5e:
90:2d:cb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:52 2025 by rpki-client