Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
File: jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft (raw, json)
Hash identifier: Q2XmCrHzFJ/voLxDRzsK4Gw2BYmPtwgLcJWBcPX6le0=
Subject key identifier: DF:B0:4E:4C:38:7B:08:E9:1A:4D:33:F1:4A:DD:84:CC:EA:E1:42:12
Authority key identifier: 8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4
Certificate issuer: /CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4
Certificate serial: 0199FCC60F7EFCFCD0C685398B17E43C4F84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
Manifest number: 1403
Signing time: Sun 19 Oct 2025 14:01:02 +0000
Manifest this update: Sun 19 Oct 2025 14:01:02 +0000
Manifest next update: Mon 20 Oct 2025 14:01:02 +0000
Files and hashes: 1: 4OlXHZjPNi_ZrlyOHLrnACz2H5w.roa (hash: WcKTWMqR73pqlk4NefweGCzhLoO2KaXXmg8w4iimJxY=)
2: jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl (hash: 0UXv2oB7tL4l1mkdHK/N9aupMXi1TR7vxaW0fpQIfaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:0f:7e:fc:fc:d0:c6:85:39:8b:17:e4:3c:4f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dd09817dfea4c66c9418f9f3906f1d0e07cc9d4
Validity
Not Before: Oct 19 14:01:02 2025 GMT
Not After : Oct 20 14:01:02 2025 GMT
Subject: CN=dfb04e4c387b08e91a4d33f14add84cceae14212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ef:e5:07:71:12:9a:ea:e1:55:07:1e:c9:eb:
4d:6c:ac:13:ff:26:87:ff:a0:aa:52:87:5c:72:92:
ac:97:98:44:33:65:61:92:4d:ff:ba:06:e9:3e:ea:
e9:6b:fc:18:fa:ca:c0:c9:79:82:13:b7:9d:c4:24:
58:ea:cd:46:ca:6b:ee:b0:5f:57:99:6c:9d:4b:7b:
f2:95:04:46:e1:e2:a4:96:a8:fa:d1:87:46:30:4a:
b5:70:be:b3:1d:7f:dd:e1:b8:a8:02:93:8a:d8:67:
7f:83:f0:88:eb:60:b5:71:db:72:1b:c4:ce:04:85:
8d:b6:8d:c6:c2:5b:b9:bb:bf:84:d5:64:af:b3:fb:
40:ec:78:d6:d9:93:d1:7f:57:c1:a7:a3:b7:14:f7:
0d:97:f2:24:1e:3b:b5:da:8c:44:54:39:bf:36:b4:
8c:99:f4:19:3e:d9:2c:49:a1:4a:0f:41:2d:43:c7:
05:42:64:07:f3:be:0c:29:7d:a7:8f:be:c4:02:95:
9e:1b:ee:eb:ce:80:5e:5b:6f:07:b2:3a:13:db:3e:
73:bd:1f:16:bb:a6:6f:f7:5f:bc:9d:0e:40:17:a8:
7f:0e:27:3d:77:57:e2:6c:ed:13:a1:de:e2:bf:19:
d5:16:31:cd:18:41:80:e0:c8:2a:bc:bb:cf:e0:40:
b9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B0:4E:4C:38:7B:08:E9:1A:4D:33:F1:4A:DD:84:CC:EA:E1:42:12
X509v3 Authority Key Identifier:
keyid:8D:D0:98:17:DF:EA:4C:66:C9:41:8F:9F:39:06:F1:D0:E0:7C:C9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9337ec-b4de-449a-b607-ea9cb527ae71/1/jdCYF9_qTGbJQY-fOQbx0OB8ydQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:be:b5:b4:fa:d7:b2:48:bf:9e:b7:5a:66:a8:5b:91:af:7c:
1b:b9:ea:18:c9:1e:71:4d:ff:db:3a:25:8f:cd:0f:ed:ad:9e:
e1:2a:d0:23:8d:73:db:ee:d7:f0:6a:d1:09:7e:29:00:c6:7a:
6d:b4:4e:42:de:93:cf:71:31:80:82:70:76:3a:a5:15:4b:a1:
db:c0:23:6e:2b:8c:3a:17:43:a3:dc:45:1e:d5:1a:57:9e:b5:
7a:0d:d7:3e:a1:c6:47:24:14:fc:f4:50:8b:77:d4:fa:17:07:
ec:cf:05:77:4d:68:ec:74:87:51:e8:6d:65:6f:f5:b0:41:b9:
f5:09:80:2e:fb:83:71:31:0a:37:9b:1c:cd:3a:6e:df:5a:01:
51:d6:af:8b:50:33:02:91:18:8f:b9:53:dd:ac:ea:4e:31:76:
56:35:0e:ba:34:02:9b:12:1f:e6:ec:69:5f:10:16:12:5d:92:
67:c3:5a:1e:ba:ea:b9:62:90:3a:83:c1:5d:e4:44:fc:84:61:
3e:bf:81:21:47:7f:70:bf:3c:66:d2:36:c9:1b:53:8f:60:20:
9f:53:da:53:4f:66:1c:f8:d5:70:6d:ed:be:fc:89:d7:4e:0d:
7e:aa:19:63:1e:b4:ba:36:98:93:b4:ff:99:f8:5b:86:c9:c3:
14:a6:0e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:40 2025 by rpki-client