Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
File: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft (raw, json)
Hash identifier: N+/KyXiccQyJO7kBjZ9ti6ig/s0uDkqkFqoFiWKBl18=
Subject key identifier: 32:28:B1:2A:22:80:06:36:D7:EB:61:68:F0:81:2B:EB:70:68:69:7E
Authority key identifier: 8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
Certificate issuer: /CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Certificate serial: 0199FC2149A2567AC23079CD51E1BEB2F9D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
Manifest number: 035C
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: a8IXKpHV3NWa7LICJ758JvcRIvY.roa (hash: X2zHQ2bSxMYP23moGooOgAvqdrG84QharuHsT6bVARw=)
2: jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl (hash: lpd86S8ata7qZDR5tb00sjccWM0MyOv82YD4HXN3zQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:49:a2:56:7a:c2:30:79:cd:51:e1:be:b2:f9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d50b3a9a0503905596c77f5802bef9fc73d647d
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=3228b12a22800636d7eb6168f0812beb7068697e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:32:2b:2e:b6:87:a0:5b:4e:4d:d0:cf:88:7d:
d4:ed:e0:70:09:1c:f2:d3:b7:9a:6b:8a:d2:09:a1:
d5:36:ce:58:1a:65:4d:f7:1a:4c:2d:57:41:72:b3:
85:c4:d1:8b:b8:7f:a6:fb:14:1b:e0:54:d2:99:9c:
15:f6:70:0d:7f:f2:48:03:36:2a:b9:0d:dc:57:98:
b0:c7:49:e2:e2:26:f6:12:a5:82:f5:80:4c:74:75:
47:5d:c1:e4:f0:49:81:8b:e0:f6:47:da:ed:58:0d:
12:1b:86:d5:50:d6:ce:f1:61:96:ed:03:81:54:2d:
00:92:b3:7b:53:db:49:c9:ee:a3:3f:fd:45:b3:0f:
cd:08:29:60:e3:88:b8:36:db:e2:09:d2:7e:d4:15:
03:2a:94:a1:d3:82:26:78:6c:75:a8:ce:ba:c2:99:
fa:a1:88:d5:28:27:72:b7:c9:ca:30:53:0e:3a:60:
dd:87:14:f8:40:39:00:77:d8:07:81:84:1e:39:4b:
53:87:04:f4:72:0c:6d:57:71:d6:6a:b0:6b:a0:69:
2e:73:45:bd:ad:f7:fc:19:c9:25:2f:a3:39:75:9f:
90:95:5f:e7:58:0f:a6:35:84:bc:53:7c:ec:25:45:
25:c4:c1:13:62:8f:81:e4:9e:47:f7:bc:44:13:fe:
78:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:28:B1:2A:22:80:06:36:D7:EB:61:68:F0:81:2B:EB:70:68:69:7E
X509v3 Authority Key Identifier:
keyid:8D:50:B3:A9:A0:50:39:05:59:6C:77:F5:80:2B:EF:9F:C7:3D:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/68d143-1237-4912-a892-cef01d877ebe/1/jVCzqaBQOQVZbHf1gCvvn8c9ZH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7d:d9:4c:f5:75:51:08:bf:87:c6:7e:c6:18:ef:c1:61:95:
63:ed:14:3d:4a:16:91:c1:57:b7:78:56:d5:34:1f:2c:1a:03:
67:e6:2a:01:22:cb:49:6b:8b:9b:75:ee:55:e9:cd:61:8d:ea:
a5:cd:b6:49:9b:4d:1d:5e:13:0c:38:76:ad:85:b1:1a:fc:98:
ad:07:1f:e0:09:49:b6:84:65:8e:ac:fb:93:96:e4:88:8f:26:
7a:0f:81:c6:be:f5:6c:0e:7a:57:17:91:ac:51:45:5f:0a:50:
b2:41:7a:27:92:ef:00:63:35:0f:da:60:b2:75:e4:d6:9a:ae:
ff:e6:e4:ae:ff:cc:c3:ff:48:ea:f1:df:ef:68:30:fe:ac:e0:
f6:6a:a0:f8:a8:9b:bb:de:64:8f:2d:7a:56:b7:d3:c1:08:c1:
af:fd:f7:8b:5c:5d:48:95:3e:80:29:e2:bc:bd:de:d5:fa:0a:
ea:af:27:9f:85:74:0c:c7:8d:7e:86:cd:bb:62:65:7f:7c:45:
58:4f:9b:7a:28:ba:62:28:2a:ff:5d:56:bd:1b:03:23:cb:43:
80:c5:a1:63:43:23:08:29:fe:a5:83:74:32:da:e8:ba:02:4f:
59:5d:4a:da:43:b5:d8:60:09:14:65:3a:29:a3:33:fc:a5:16:
bf:4a:e4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:50 2025 by rpki-client