Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
File: jvZFdw0pFEAtbJW42vUff_4Sdys.mft (raw, json)
Hash identifier: LiaSlbhAeSYuUDDdbHRDVZUYOx5nbYSvVGcKAbINcRw=
Subject key identifier: 52:43:58:DE:23:9B:96:B1:71:1A:45:9F:78:03:3E:2D:75:13:46:9A
Authority key identifier: 8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
Certificate issuer: /CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Certificate serial: 0199FBEC3123D37CAEAE1C2522C62425F928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
Manifest number: 0ACE
Signing time: Sun 19 Oct 2025 10:03:04 +0000
Manifest this update: Sun 19 Oct 2025 10:03:04 +0000
Manifest next update: Mon 20 Oct 2025 10:03:04 +0000
Files and hashes: 1: I6XJQzPuO4BQutj9l3SUjZVMBQs.roa (hash: SpNx9acwJnfAUoxlUrPZol91rF8aW3VEekG+fCM8uiI=)
2: jvZFdw0pFEAtbJW42vUff_4Sdys.crl (hash: JPZ92n8v112jxBvxgkokkDc7iVsDdad/MyzbLwekWyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:31:23:d3:7c:ae:ae:1c:25:22:c6:24:25:f9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ef645770d2914402d6c95b8daf51f7ffe12772b
Validity
Not Before: Oct 19 10:03:04 2025 GMT
Not After : Oct 20 10:03:04 2025 GMT
Subject: CN=524358de239b96b1711a459f78033e2d7513469a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:fc:ed:29:04:83:44:58:b2:ae:d2:d2:85:
4a:42:0a:d6:6c:88:b6:04:51:26:7f:1c:7c:4f:93:
d7:83:5d:5e:38:88:18:75:5f:db:36:6d:c9:67:2c:
e5:56:9c:fd:32:c4:de:d8:78:9f:90:81:38:f0:da:
36:aa:3c:ab:c9:f5:35:15:cb:6e:47:4e:fc:3c:38:
d9:94:69:22:26:bb:88:d2:01:cf:e0:be:93:3c:b6:
25:67:dc:8f:60:bb:1c:75:96:b0:0c:02:00:e5:77:
45:e0:a5:c1:cb:a6:16:21:4e:2f:d8:4a:43:51:41:
45:c9:fa:c5:63:64:7a:6d:1d:b9:3e:44:0b:78:4a:
51:45:ad:f9:93:a9:ac:fa:83:73:53:09:54:92:7b:
56:64:dd:d4:2b:e2:ea:2c:d8:3e:aa:72:d1:21:2f:
b1:f2:be:61:aa:12:ff:da:43:81:22:22:d2:f1:ac:
2c:48:6f:f9:26:8d:4c:ed:72:95:5b:4c:d6:c6:25:
16:a4:60:2e:df:96:37:e7:6e:88:96:58:46:a6:15:
89:81:76:b4:ce:66:a4:35:85:c3:e1:df:1d:48:d3:
22:e6:46:fe:c4:4a:84:04:67:1b:cc:4f:ef:d7:d0:
8b:b5:94:7d:50:9a:a6:9b:b7:dc:cc:47:7b:a4:37:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:43:58:DE:23:9B:96:B1:71:1A:45:9F:78:03:3E:2D:75:13:46:9A
X509v3 Authority Key Identifier:
keyid:8E:F6:45:77:0D:29:14:40:2D:6C:95:B8:DA:F5:1F:7F:FE:12:77:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvZFdw0pFEAtbJW42vUff_4Sdys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b0975c-2573-4d0a-b8d9-656957f3867e/1/jvZFdw0pFEAtbJW42vUff_4Sdys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d6:67:93:26:2f:c8:4f:3d:2c:c5:10:19:42:92:34:be:3b:
fb:b1:fb:6f:ee:85:4a:ba:05:fb:03:9c:9a:b3:97:75:af:06:
8b:76:4d:f9:e2:bb:f3:a6:2e:5a:ef:8b:ca:0b:03:e1:55:80:
53:e8:ba:2e:9d:18:30:d6:3a:d5:af:25:5d:7f:0c:e6:f8:dc:
32:6e:59:ff:6d:9c:53:17:c0:ea:a8:95:d5:ae:73:85:37:d3:
77:a6:1f:90:9c:19:e2:93:13:87:40:b1:11:8c:4a:bd:10:dc:
4f:1d:1b:90:7c:fb:1f:ed:ed:6c:19:e2:3c:91:2d:72:0c:14:
4a:16:4b:33:ec:03:10:30:d0:1e:3b:12:d3:ee:28:c0:b8:4b:
3b:bf:cb:26:97:f0:f3:88:b5:6a:01:f3:c0:d2:db:1d:11:48:
d5:d2:e2:e1:f8:f6:dc:f3:58:c6:0e:1b:71:a4:f9:2e:b6:16:
b4:7a:02:44:7f:17:81:1d:6f:33:2f:18:d3:0b:a6:ff:0b:5d:
5a:b8:89:8b:04:ae:a6:2b:61:b5:dd:d0:b8:db:71:3c:a7:51:
00:0e:c2:96:83:ab:82:d9:fc:59:d5:ee:3f:23:1e:37:63:d3:
8f:74:1e:c7:75:f1:e4:da:6e:ab:2d:09:cb:ef:c6:3e:3c:ca:
d1:80:51:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:23 2025 by rpki-client