Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: sXYOSKuIBGPWoANAiraiS7yKqxWE/yVh0Y2nyljwgVk=
Subject key identifier: CF:22:AB:16:75:60:19:7D:4C:7A:AC:F6:50:8B:82:0E:CC:A4:50:0C
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 0199FFC832503284887BA59F70D3A9370D09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 1010
Signing time: Mon 20 Oct 2025 04:02:14 +0000
Manifest this update: Mon 20 Oct 2025 04:02:14 +0000
Manifest next update: Tue 21 Oct 2025 04:02:14 +0000
Files and hashes: 1: LSJWw_ptvazCnhCar9l_Y1TpHAM.roa (hash: wjRArMMbVUG2mvjIwU1Y1QgYT+m8+bZU67i+Zotaojs=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: UrgakTCgx68x1HAiqAf4Njz2me6rKkkU+znkCfnHQg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:32:50:32:84:88:7b:a5:9f:70:d3:a9:37:0d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Oct 20 04:02:14 2025 GMT
Not After : Oct 21 04:02:14 2025 GMT
Subject: CN=cf22ab167560197d4c7aacf6508b820ecca4500c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:da:6d:cc:12:57:7b:ef:a3:7d:1a:9b:12:ba:
e5:e0:ed:d9:c2:38:15:72:3c:dc:03:51:ac:91:40:
7a:c2:19:50:4c:ca:23:ec:76:ee:33:60:79:e9:f1:
72:95:8a:5b:43:79:df:15:4c:6f:95:e7:06:d2:3c:
4b:e3:5d:84:5d:92:5a:ee:52:68:c7:a2:89:b3:56:
3f:8a:71:19:c1:b8:cd:02:a0:a6:5b:69:93:a1:03:
ff:9f:e9:b2:cb:2b:f4:a8:54:a8:21:e6:1b:aa:12:
5b:3c:f5:0f:f7:8b:32:09:fa:f8:8f:c2:1d:70:34:
9a:f1:bc:80:9c:ee:23:f1:57:5c:ac:be:d4:02:35:
14:a9:66:7e:8a:71:4d:fa:9a:87:8d:55:55:fe:66:
16:a0:74:bd:76:8f:b1:0a:bb:b2:cb:f0:01:30:ba:
0a:00:ec:2a:eb:d0:4e:bc:0c:b9:a9:fa:51:7b:f2:
1e:6e:4b:f3:26:a3:7d:93:ae:67:50:48:03:8f:62:
8d:19:ae:68:38:67:eb:ed:95:03:b5:43:db:fe:fa:
24:b3:e6:cf:d4:30:aa:6f:39:a4:67:3e:5d:e5:e8:
e7:9b:52:9c:cc:60:07:d8:6a:7f:35:35:38:f1:31:
f4:09:0f:e4:a1:1f:35:41:c3:e8:9d:12:c7:9f:00:
8e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:22:AB:16:75:60:19:7D:4C:7A:AC:F6:50:8B:82:0E:CC:A4:50:0C
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:f9:06:cd:85:17:e6:85:cb:6b:83:dd:8b:56:63:aa:74:4c:
73:fa:21:1c:f9:a4:c9:00:63:37:6c:f5:87:c5:2d:96:b7:b5:
e1:38:d1:c5:85:95:2e:c1:94:76:cd:89:a6:74:dc:14:1e:5d:
6b:98:85:54:48:19:69:77:25:89:37:91:15:b3:5b:89:c2:9f:
d5:68:8f:47:5e:36:a1:42:05:6c:82:dd:78:d2:81:85:24:b2:
6e:25:34:9b:a8:7b:01:fe:ca:a7:f9:29:5f:ca:5d:20:0b:c4:
bf:1b:46:bf:67:dc:d0:fb:66:fe:bb:9a:53:ec:6e:71:7e:8c:
60:93:94:f4:36:02:0e:09:b7:f7:8a:9a:d1:35:54:15:31:8f:
91:ba:aa:8f:9a:ad:c1:94:0f:e8:2f:b4:cb:53:31:68:a7:62:
cb:d2:c4:dd:a0:d8:4f:96:99:3d:67:14:4d:f4:d9:4c:2b:12:
38:56:9e:fc:48:99:06:d7:b8:50:84:56:60:3c:3d:0a:ff:49:
87:e9:52:32:11:3c:e8:0c:5b:69:35:04:ff:ac:f3:65:65:c0:
36:18:7b:f6:bc:f7:3b:0c:9e:39:5e:f7:7a:6e:8b:9f:87:a8:
ab:36:ca:91:b6:30:cc:9c:25:e5:62:dd:ce:4c:1e:87:93:b5:
ae:a0:b0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:01:23 2025 by rpki-client