Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
File: JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft (raw, json)
Hash identifier: iyGLdUCQF5fybWMNn3gQIi3k6TNzocQmvUYVfQCv8yg=
Subject key identifier: 2A:10:E9:F8:02:CE:8D:5D:5B:18:28:78:0A:45:0B:FB:5E:C7:A7:6A
Authority key identifier: 25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
Certificate issuer: /CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Certificate serial: 019A00D9DDB43510F12F2E4BF36EA100012A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
Manifest number: 02CC
Signing time: Mon 20 Oct 2025 09:01:09 +0000
Manifest this update: Mon 20 Oct 2025 09:01:09 +0000
Manifest next update: Tue 21 Oct 2025 09:01:09 +0000
Files and hashes: 1: 1-nkTyOMqH94a8OlfukcDf7YbkNc.roa (hash: Z6uvUYmhirGQlJwClrs+HtNhQJGa2PNo7VCbu68pXz8=)
2: JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl (hash: 1LGN8rQTMQ56nRz+kBNn1cO5QdYwj2E3yC96WToCrhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:d9:dd:b4:35:10:f1:2f:2e:4b:f3:6e:a1:00:01:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25b1a223b7e73fd23462c204e60e9d4815cf763f
Validity
Not Before: Oct 20 09:01:09 2025 GMT
Not After : Oct 21 09:01:09 2025 GMT
Subject: CN=2a10e9f802ce8d5d5b1828780a450bfb5ec7a76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7c:6b:e3:56:f2:d4:92:0b:c2:24:54:9c:52:
ba:64:c4:a1:f5:15:5f:82:ee:f6:c6:82:e6:df:01:
68:28:4b:5f:64:6a:0c:7f:0a:c2:40:0c:0b:e0:d1:
4e:e6:67:66:e8:71:7c:bc:f1:88:60:61:28:67:f8:
9b:03:c9:97:f2:12:d3:58:c8:b7:90:f8:c6:55:14:
28:b0:93:59:ae:9b:b8:4d:b3:b9:3f:4d:39:ed:ad:
bb:20:61:cf:51:cd:1a:31:92:32:3e:74:a9:7d:98:
80:3b:6e:0e:9b:30:3f:54:3b:d1:02:35:8c:2a:ae:
02:a6:63:1e:f8:14:12:f0:19:ed:73:d6:83:6d:fe:
e5:64:e0:9c:4e:89:56:31:a6:5c:f0:ec:77:c5:7b:
34:59:f6:c3:15:9e:04:d6:8a:85:55:da:1f:90:b2:
a9:3a:4f:cc:c3:ca:bc:fe:13:0b:e3:64:e4:b8:7b:
15:d8:02:c9:9d:7d:b5:1a:95:ef:83:df:15:fc:96:
8a:d7:0d:b0:f4:29:25:94:4a:d6:12:eb:88:ce:5f:
58:72:4e:ae:62:c3:4d:d3:7e:99:a0:4b:52:60:11:
77:82:d4:47:f0:25:5a:14:92:f3:76:21:04:98:b9:
9c:dc:a9:bb:24:89:4b:e5:08:6e:a3:06:38:e2:8f:
fa:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:10:E9:F8:02:CE:8D:5D:5B:18:28:78:0A:45:0B:FB:5E:C7:A7:6A
X509v3 Authority Key Identifier:
keyid:25:B1:A2:23:B7:E7:3F:D2:34:62:C2:04:E6:0E:9D:48:15:CF:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbGiI7fnP9I0YsIE5g6dSBXPdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e90c8-2b83-4715-9933-a73f0b7418ab/1/JbGiI7fnP9I0YsIE5g6dSBXPdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6d:fa:e9:af:ed:71:81:b9:10:b8:92:af:90:91:fa:68:39:
6b:14:cc:fc:98:1a:39:4d:a7:03:e4:5f:2d:83:c1:5d:a6:d0:
71:4f:be:44:13:62:d7:05:67:3e:5d:1f:79:67:40:82:e2:6c:
13:7e:cb:3a:50:7c:32:11:31:95:75:c0:9f:7e:1a:15:58:a5:
93:65:1d:8e:e6:f9:5c:42:a9:f7:e9:7f:5c:54:ca:c8:e6:79:
4a:69:76:e8:17:d1:ba:ee:9e:38:ba:b7:55:be:01:7c:84:db:
f0:81:bc:12:69:ac:f0:3c:9f:5b:3b:5c:dc:25:2a:a3:51:c9:
73:6a:d0:5b:be:9d:e6:fc:7e:f5:ba:0b:42:8d:53:7f:96:8f:
90:c5:e0:c8:0e:e6:8c:0d:b8:57:22:35:a0:94:f1:ed:df:34:
e3:fe:ff:5f:a3:ea:9a:01:65:7a:db:89:87:18:ac:51:6c:80:
e1:e0:46:99:e0:2b:f7:81:2a:e9:50:a8:ae:f9:7d:a2:3f:52:
aa:2d:1e:cd:a7:0f:aa:51:18:a6:30:d1:d0:81:b6:7a:fe:91:
3e:de:77:90:ac:f8:03:65:38:02:2f:c4:c1:08:6d:05:ce:ba:
21:02:ce:a2:1c:b3:68:89:0b:0c:de:c3:ae:77:3d:87:c7:3f:
4b:a7:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:49:42 2025 by rpki-client