Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
File: _JvrAZLQ00al5oWKp0SwQ0_tMYk.mft (raw, json)
Hash identifier: B3qyhFNi5ljxxRQ4OZXU18rDxNeOp3NzIIrpKRcRXHc=
Subject key identifier: 06:F2:EE:83:B0:38:CC:79:88:40:CC:4A:96:9E:F7:A4:CE:78:A8:C0
Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
Certificate issuer: /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Certificate serial: 0199FD6AD8AE268769D419E2B3A38E7BAD37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
Manifest number: 16A3
Signing time: Sun 19 Oct 2025 17:01:01 +0000
Manifest this update: Sun 19 Oct 2025 17:01:01 +0000
Manifest next update: Mon 20 Oct 2025 17:01:01 +0000
Files and hashes: 1: FasPE0L4fE1899bsu_j-7tmu6ok.roa (hash: Qhda7nOss3uAhstVaL86g/VtZIZV1OO3A8B7YvZv5Tg=)
2: _JvrAZLQ00al5oWKp0SwQ0_tMYk.crl (hash: sTWi07IwWIbZjaCosRiAyn3CvUmjVKHwk0ug7wFcOME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:d8:ae:26:87:69:d4:19:e2:b3:a3:8e:7b:ad:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Validity
Not Before: Oct 19 17:01:01 2025 GMT
Not After : Oct 20 17:01:01 2025 GMT
Subject: CN=06f2ee83b038cc798840cc4a969ef7a4ce78a8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:d1:f2:96:fe:b8:ce:24:9b:38:61:86:3b:
13:80:7c:c2:75:34:b9:73:3b:9e:97:1c:c9:d1:65:
94:d8:ac:b8:07:78:1c:b5:ce:72:80:fa:11:e2:f2:
fa:bd:8c:b6:32:26:3d:10:c8:6d:d0:d0:3a:b8:37:
a6:c4:ef:6b:d0:e0:c9:ba:67:ab:64:2b:4d:2e:4a:
c8:e5:1c:00:d4:38:81:5c:75:52:52:37:95:68:67:
be:00:56:3e:58:9e:ac:33:5e:d7:9e:96:af:d7:d6:
a9:be:2c:66:09:5b:6d:aa:9a:81:df:dc:2c:3e:35:
1b:a6:a1:b5:9d:8b:7b:a4:1e:ca:df:1d:ca:18:ba:
f4:ee:8f:a8:18:4c:59:84:68:9e:1f:9c:11:d1:01:
c4:aa:13:6d:70:ae:46:e4:a4:a2:63:3b:5b:90:d3:
6f:43:80:c0:1e:53:a0:e2:a4:1a:d7:64:59:d0:62:
49:80:be:dc:26:6a:80:e9:5e:b4:dc:43:20:83:60:
03:14:e1:d8:a8:f1:6b:c3:0e:a0:1e:6e:0f:33:87:
83:33:36:f8:36:e9:e2:a9:aa:fe:00:18:49:ba:b6:
10:df:46:87:9e:5a:ff:48:38:c9:97:dd:2b:7c:9c:
2b:3f:b6:3e:c5:bd:e2:73:aa:b2:bd:9c:04:38:55:
ae:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F2:EE:83:B0:38:CC:79:88:40:CC:4A:96:9E:F7:A4:CE:78:A8:C0
X509v3 Authority Key Identifier:
keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0f:d6:4d:a9:a1:c5:c5:1f:58:8b:a0:d7:98:97:21:11:a6:
03:c8:2b:98:4e:df:75:eb:ce:6e:c2:d4:b8:32:d9:bc:0d:ce:
0d:3e:0d:84:d0:e3:4f:2a:68:12:69:b7:ef:ff:89:0a:02:2c:
1c:b2:f3:02:aa:68:b1:df:e9:3f:94:e4:76:00:55:46:c5:b2:
f0:67:82:70:e0:0b:ed:83:fd:6a:ad:90:68:d3:7a:56:b4:d1:
e2:53:06:6e:71:d3:39:dd:12:2b:6a:ca:16:df:fc:b6:2c:9b:
36:e7:dc:7d:ff:92:9a:6c:d9:0b:3c:bd:56:b9:32:f3:ad:7f:
26:70:1e:bc:50:b5:d5:4b:e3:46:5b:e1:47:fb:02:40:ba:ca:
3d:41:08:12:6a:21:b2:c3:11:02:76:77:80:b0:a6:39:c1:5a:
a7:da:9e:9a:93:fc:36:35:cc:d4:81:bf:cf:b0:52:d0:fe:f2:
ff:ce:0b:c7:3f:ac:7b:97:f0:2f:2d:30:b6:6b:4c:d3:0b:db:
d6:36:f4:3f:b7:2f:10:18:b4:a1:13:68:e2:4f:ff:e6:6d:3e:
a4:e1:c0:51:b4:8a:5b:26:02:72:d5:d3:25:e8:5d:35:26:29:
a6:29:39:f5:82:3d:63:c7:64:92:f8:a6:99:8b:ce:20:99:d1:
28:8a:df:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:35 2025 by rpki-client