Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
File: _jsDhSYKxm8hxD9at4usaC6M5U8.mft (raw, json)
Hash identifier: KlCBhZL/gFv7Ll33EY56PsecDo/bkVT4zKEtsGFbiCU=
Subject key identifier: B9:60:B4:C0:B3:78:02:18:B2:B8:B2:78:E3:BC:5E:84:7D:01:F2:BC
Authority key identifier: FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
Certificate issuer: /CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Certificate serial: 0199FE7D8F3721AE17454C4055DFCB305D1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 22:01:05 +0000
Manifest this update: Sun 19 Oct 2025 22:01:05 +0000
Manifest next update: Mon 20 Oct 2025 22:01:05 +0000
Files and hashes: 1: Kvwz7Otgc_2cfxtWv-qyiSeDnkI.roa (hash: /Av0G+E+eRmfEHS46xLPNhTCJCoxta+3DzTycHIkaZ4=)
2: _jsDhSYKxm8hxD9at4usaC6M5U8.crl (hash: LV5Cq/IhVMGULvFAiN+ScNY89wiFqddeUdWKdchvv3Q=)
3: jgkRdzS5JB9PWD_oFwdbOGdk6x4.roa (hash: pk7j7TBSzPnMDTNnJGvz2FoxttkV1MmZfvsZ3NtTMUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:8f:37:21:ae:17:45:4c:40:55:df:cb:30:5d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe3b0385260ac66f21c43f5ab78bac682e8ce54f
Validity
Not Before: Oct 19 22:01:05 2025 GMT
Not After : Oct 20 22:01:05 2025 GMT
Subject: CN=b960b4c0b3780218b2b8b278e3bc5e847d01f2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:a3:e3:94:83:d9:6e:ac:98:69:55:c0:6e:
4f:b0:6b:31:1b:10:a4:44:24:c5:d1:18:9a:0b:36:
fd:de:66:05:2c:69:55:82:36:c4:18:19:33:af:53:
2f:b7:2b:87:77:dd:fa:70:73:2f:12:18:0a:2d:76:
52:1d:70:be:53:23:aa:03:74:1a:5e:d5:62:9c:7d:
87:d4:23:a5:73:e2:6d:a0:ac:8e:23:aa:2e:bb:5a:
ed:d2:68:ca:e8:78:fb:2c:e9:07:71:6e:ee:41:f2:
7b:82:5b:bd:e0:f8:e7:ad:41:be:e3:7a:9b:ef:ec:
a7:e9:fc:5c:c1:ac:ae:81:2d:1a:63:31:a4:f1:34:
3e:c5:09:47:08:13:28:57:44:9c:53:4b:38:4d:a0:
4a:e0:b9:c3:f3:5d:23:f8:36:8f:40:3a:e7:5e:e5:
9d:c7:ad:92:24:18:ea:0a:5b:46:6d:96:d3:b3:ec:
9f:42:59:0d:bd:ba:bc:b7:8c:82:46:91:5a:cf:b4:
91:13:df:72:20:34:76:a1:88:66:4f:d2:ef:c8:4b:
9c:10:44:66:1f:1b:dd:39:b1:68:01:cb:93:76:28:
67:ba:6e:54:af:74:da:ad:47:31:67:13:41:17:8e:
00:c8:e1:d1:39:b8:b7:61:81:05:6e:39:9b:ab:94:
56:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:60:B4:C0:B3:78:02:18:B2:B8:B2:78:E3:BC:5E:84:7D:01:F2:BC
X509v3 Authority Key Identifier:
keyid:FE:3B:03:85:26:0A:C6:6F:21:C4:3F:5A:B7:8B:AC:68:2E:8C:E5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jsDhSYKxm8hxD9at4usaC6M5U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a2ffd9-745d-4e7d-b2b2-75033f8f7210/1/_jsDhSYKxm8hxD9at4usaC6M5U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:66:2e:1b:cc:94:43:c4:bd:56:fe:ed:41:59:2b:7d:72:99:
64:df:ca:18:97:a5:f1:fc:29:e3:50:fe:74:9d:cc:03:4e:f6:
ff:10:f2:6b:01:bc:ad:95:65:bb:db:60:be:16:ea:9a:bc:06:
4b:af:83:70:a4:6f:8b:70:8f:7d:48:85:0a:8f:96:84:d8:d9:
92:35:cc:10:aa:b5:72:0e:46:b1:93:4b:42:7b:4c:e4:82:ed:
67:ea:3c:fa:fb:22:00:4f:bf:a6:d8:17:0d:dc:61:19:4e:ed:
69:1d:dc:f6:50:dd:62:51:9b:49:0c:1a:35:f5:53:0e:4b:5c:
b7:ff:7e:df:31:46:d4:d2:e3:53:3d:b0:ae:3b:5b:77:1f:8d:
f1:f7:2a:12:56:12:d4:93:18:51:18:c8:d0:fb:b1:ea:46:70:
1a:1a:ac:29:2c:d9:be:6e:5b:b4:13:78:ee:9c:49:d8:1f:5c:
40:3e:86:09:25:d5:0b:36:52:cc:48:49:5e:da:2c:4f:bf:f6:
0c:c6:a2:63:38:52:07:95:04:02:e0:ea:39:a6:07:ad:8f:99:
83:58:1e:61:25:cc:a0:2f:a1:90:a4:ce:1d:25:d3:84:dc:6d:
55:cc:4a:8b:97:d5:00:2f:e3:ef:e3:e4:1a:2c:2e:07:02:94:
25:80:33:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:23 2025 by rpki-client