
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier: NUzFzx5qqC7xmhZfaSmPou1aRjER223NEIbAkQBCn6g=
Subject key identifier: CE:99:BB:BB:95:E9:38:57:DA:A2:BA:12:42:0F:9B:CE:C4:E2:11:EE
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 0199FEEB8BAAB44B6B895191BC0892C47A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number: 07FA
Signing time: Mon 20 Oct 2025 00:01:13 +0000
Manifest this update: Mon 20 Oct 2025 00:01:13 +0000
Manifest next update: Tue 21 Oct 2025 00:01:13 +0000
Files and hashes: 1: EmWFQT9EIlKM8K10K5cWz3oRk8c.roa (hash: mVuZgTV0YIvEIlEbhmtrwLHhCh+ETHzlqM+RSaYL3ls=)
2: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: iLQtYCCvJyW0Ewx71wQ3qovOVjbH/PKvPnv3+36kyA0=)
3: vOuw-thqqsBDOxSUXEaJasEA7qM.roa (hash: 5FoG4V28mx1fz8vugdFd18SYEUDw3t0Z7vgkJvX8GgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:8b:aa:b4:4b:6b:89:51:91:bc:08:92:c4:7a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Oct 20 00:01:13 2025 GMT
Not After : Oct 21 00:01:13 2025 GMT
Subject: CN=ce99bbbb95e93857daa2ba12420f9bcec4e211ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:d1:db:57:1a:86:9d:2e:aa:93:75:08:f7:
02:5b:e3:dc:7c:c7:cb:20:14:3b:44:7a:0c:00:3e:
09:b4:21:a4:e8:a3:3d:c3:a6:ea:58:1d:32:a0:87:
88:f8:e4:b8:0e:33:06:ce:65:85:8a:d8:12:65:e5:
4e:ac:25:bd:fc:48:5e:a3:35:2b:4a:fb:4b:38:0d:
42:54:50:d5:15:c0:02:68:c7:e2:00:41:40:38:6f:
9f:fd:a6:79:d7:08:48:0d:0d:2a:d5:9a:23:51:1d:
45:41:48:c2:23:09:96:1d:e3:24:a4:28:e5:f9:ce:
41:25:98:63:73:5a:c2:7c:7f:89:1a:a2:c1:4a:b0:
bc:4f:b7:ba:88:fa:43:be:f7:df:4e:82:96:3d:ef:
a8:db:3a:b3:12:d3:72:2b:ec:d2:4b:fd:92:2f:ba:
ba:63:6b:5e:6a:27:57:c4:16:eb:5d:cf:c8:54:4c:
a7:ac:6d:61:94:ba:ff:bd:81:e3:11:4b:c8:df:10:
7c:7a:cc:27:a4:fd:d6:a6:0a:1e:54:30:57:b6:e1:
a6:3b:eb:cf:ef:06:dd:5c:47:dd:bb:d2:2b:9f:b7:
f3:28:64:29:b8:f1:e1:b1:d0:47:a6:88:4c:0a:33:
d2:7d:33:2b:65:05:e9:b5:51:d9:9b:ed:5f:8e:fe:
22:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:99:BB:BB:95:E9:38:57:DA:A2:BA:12:42:0F:9B:CE:C4:E2:11:EE
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:30:3f:b7:9d:0e:64:26:17:f7:e1:11:51:41:1d:87:15:f0:
c5:d9:fc:d8:d9:68:b3:a0:81:a6:fd:8a:56:04:12:37:9c:91:
96:ef:c4:ee:12:13:1b:b0:b4:d7:a9:c6:21:87:a6:cd:92:8b:
0f:da:ce:8d:9d:6d:26:b7:bc:ae:aa:e4:a8:7f:5e:ba:b0:0c:
9a:cb:9d:88:c3:ab:33:22:5e:19:b6:32:d6:56:f4:51:3d:6c:
1a:a2:7e:c2:35:b3:43:e4:97:a5:0f:96:9f:c3:96:85:dd:e0:
5d:1e:15:a2:fb:53:71:bc:79:57:2f:ed:76:b5:d9:20:4d:9a:
79:c9:e0:f3:27:4f:33:b0:f8:e5:9d:e9:d7:cf:e2:c1:5f:a7:
1b:dd:83:21:8e:dc:f3:81:5f:65:ae:40:b6:32:db:26:9f:86:
d4:76:da:13:4c:22:aa:07:f9:f3:e9:8e:60:ed:09:a4:11:45:
c3:41:79:03:58:27:fb:ac:a8:94:75:97:bd:4c:bc:58:ee:c3:
c6:74:02:43:ba:f8:9a:1d:1d:f9:7f:d6:1a:95:99:8e:e5:bb:
a0:6e:65:4d:9e:87:4c:39:9b:10:ec:7e:7a:2d:36:27:0e:7c:
03:19:42:b6:13:d6:4f:90:f5:7a:18:17:a2:8b:92:9e:61:d1:
b9:a2:05:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:15:07 2025 by rpki-client