Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
File: mJut_SoX_KO5NaNo4uA61W1uO2I.mft (raw, json)
Hash identifier: Rni4XICNmwAD1OL85SayVyIOYA5efLBuynTB+Pa3owI=
Subject key identifier: DB:61:77:18:EA:68:A8:E0:EE:DB:2A:D5:9C:68:F8:2B:0A:CE:4D:6B
Authority key identifier: 98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
Certificate issuer: /CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Certificate serial: 0199FCFD4E4FD5D79BCBA8E77D70EA2CEAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 15:01:23 +0000
Manifest this update: Sun 19 Oct 2025 15:01:23 +0000
Manifest next update: Mon 20 Oct 2025 15:01:23 +0000
Files and hashes: 1: mJut_SoX_KO5NaNo4uA61W1uO2I.crl (hash: y14Kq74z/lKQnsMZNitit9Kr+mVL8tDWcJCuGSTWLmY=)
2: ruJJQ56Vhu1olZiih1SCGIZreKo.roa (hash: IJHmJIP1ayDC0tbuVGoo3w6OOoLmUwDSxcxdW/4Pcy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:4e:4f:d5:d7:9b:cb:a8:e7:7d:70:ea:2c:ea:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=989badfd2a17fca3b935a368e2e03ad56d6e3b62
Validity
Not Before: Oct 19 15:01:23 2025 GMT
Not After : Oct 20 15:01:23 2025 GMT
Subject: CN=db617718ea68a8e0eedb2ad59c68f82b0ace4d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dd:2e:be:bf:93:bb:c0:10:d0:2b:77:f4:58:
ec:53:25:d5:30:5c:f3:d3:06:b7:cd:56:6f:5b:6c:
bc:cc:cf:4a:c0:55:7b:74:45:25:ce:12:0f:05:e3:
d1:6c:26:bd:83:a1:e0:76:49:a2:86:31:81:d2:51:
06:5b:8b:90:bc:60:9d:dc:aa:8e:56:4d:bc:ba:fa:
9d:6e:85:c7:b8:5c:83:29:8d:6f:47:cb:55:5b:7c:
6b:c2:78:f4:d9:c5:80:f4:5d:04:9f:4a:94:45:b4:
01:3c:61:b7:7a:26:76:ae:0f:23:09:47:f7:cf:d0:
21:db:c4:20:33:87:31:da:33:c5:f7:20:2c:a7:90:
dd:41:ef:a5:ca:5c:b4:fe:78:d7:28:f6:03:c4:6a:
0d:ad:7d:a4:d5:27:d3:35:7f:76:7c:c9:ce:18:54:
92:c5:0a:b3:4f:61:cc:1b:95:57:a3:9d:f0:4b:60:
a2:27:3e:cf:8d:11:8e:55:65:e3:80:ca:0c:eb:52:
ea:7d:08:d7:89:5f:0f:4b:36:cb:b4:1c:af:f4:a7:
72:2f:37:4d:91:05:5e:f1:e6:85:aa:bd:5d:20:1c:
26:d4:c3:e7:5e:22:13:a2:63:c0:10:c3:cc:04:4d:
ab:03:4a:39:ea:44:aa:be:91:22:eb:a0:c6:f4:52:
1f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:61:77:18:EA:68:A8:E0:EE:DB:2A:D5:9C:68:F8:2B:0A:CE:4D:6B
X509v3 Authority Key Identifier:
keyid:98:9B:AD:FD:2A:17:FC:A3:B9:35:A3:68:E2:E0:3A:D5:6D:6E:3B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJut_SoX_KO5NaNo4uA61W1uO2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/688007-2b24-44b9-80f4-a62850feebb5/1/mJut_SoX_KO5NaNo4uA61W1uO2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:09:66:f9:26:7d:d3:2d:d7:47:bc:60:5c:7b:be:c0:6f:0c:
6f:dd:4a:78:8b:c7:fb:fa:f3:75:1c:bd:2e:bf:5e:76:1f:a0:
c6:3f:3f:13:06:c9:cf:03:94:42:2c:7d:af:50:70:b7:e6:4f:
a7:e9:b7:2e:ab:56:6e:78:5c:c8:72:87:6f:d2:d0:42:be:9b:
89:1e:33:17:9b:c5:9c:e1:4c:9a:f6:7c:14:b4:4d:0c:11:ae:
23:ce:b0:c7:be:fe:a2:64:89:90:7b:5b:de:86:7e:34:b1:e9:
85:88:c6:56:8e:fb:a4:9c:af:cb:32:c5:f9:6a:42:d4:1a:a2:
b3:b6:64:20:d6:30:51:e6:35:99:93:45:92:ad:96:c8:64:0a:
a8:f1:6e:c9:a7:c4:17:5e:e6:c8:be:34:c7:b2:90:d7:13:26:
62:55:59:cc:d9:26:c6:ed:30:5a:43:8f:24:78:0b:37:2d:96:
2f:c6:11:17:20:d0:c8:94:ef:84:ac:ff:e1:1e:70:8b:e1:08:
cf:f8:c3:bd:0f:41:ce:bf:6e:bf:c8:1a:cd:f1:cf:3e:f0:4a:
16:9e:09:2f:d3:c3:4e:64:65:0c:fc:b3:d2:96:f7:dc:96:34:
25:0c:f3:4c:f1:de:cc:6c:eb:86:64:a6:b5:60:56:49:93:51:
54:9e:16:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:13:38 2025 by rpki-client