Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
File: jWYDLgiJQRjXmYxcBgykbrOHEzg.mft (raw, json)
Hash identifier: T3LRtG3RQYHGHJrhHuaun6XkWN0uLKOsV8lO3q+c0oE=
Subject key identifier: 35:9A:99:1A:C9:4B:13:9E:DF:78:83:57:83:EB:76:8D:1C:63:93:77
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 0199FFC76E437FCF4FF13B81952FBB5ECB72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
Manifest number: 16E7
Signing time: Mon 20 Oct 2025 04:01:23 +0000
Manifest this update: Mon 20 Oct 2025 04:01:23 +0000
Manifest next update: Tue 21 Oct 2025 04:01:23 +0000
Files and hashes: 1: Rj6LyhmuYOVWqVkzjLxE3-yzKYI.roa (hash: hnTztba+lIL8dBqmzjJSK96VaZ7aTD4lLM3WLko0IFQ=)
2: XrKKt_JxbNMZGjXoulTmr3xDG5Q.roa (hash: f11YjtJ+XEcEDqhtgknq7hIx2BkA5rt08V/n2Td3MMU=)
3: jWYDLgiJQRjXmYxcBgykbrOHEzg.crl (hash: bnrKx6PJhhUskVL4IO+Q+fn3nRJnqPFoXAARsLWEa3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:6e:43:7f:cf:4f:f1:3b:81:95:2f:bb:5e:cb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: Oct 20 04:01:23 2025 GMT
Not After : Oct 21 04:01:23 2025 GMT
Subject: CN=359a991ac94b139edf78835783eb768d1c639377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:9c:73:0f:37:ec:0b:f1:a9:73:0f:a1:22:
ba:1a:60:63:ea:f8:db:f4:8b:95:ae:65:5f:8a:91:
5b:e7:38:ab:23:d3:ca:17:86:c0:3a:70:97:6a:18:
87:20:84:44:24:3f:d3:75:95:da:f7:b5:5c:1c:34:
1f:ca:d7:23:c8:c3:6f:3c:d2:ca:98:e6:db:b3:67:
dd:9e:3a:bb:fc:4e:8a:f5:6b:c2:63:85:76:2b:fd:
a1:50:1f:07:d7:2c:c9:6d:35:aa:0d:ec:86:83:94:
57:2e:2c:db:4b:e1:e7:0e:57:98:e9:e0:29:78:69:
27:9d:b1:99:db:de:bc:c8:e2:6f:d8:a1:68:91:33:
54:18:17:5e:da:e7:13:2b:2e:81:80:07:b1:54:e1:
99:ef:b3:3e:8e:f3:2d:10:d0:01:09:c1:ff:94:74:
32:cb:ab:a4:83:ee:ad:87:7e:eb:ee:ce:a3:88:39:
a2:6a:84:86:6e:84:19:58:74:4e:2f:43:31:1d:f0:
d0:45:6f:2f:f1:0c:82:4c:f3:58:99:f6:8f:57:06:
c9:93:82:aa:34:ab:45:bd:02:74:0c:f2:6a:d9:08:
f8:cf:1a:6d:f5:90:5b:ab:79:6a:c8:f4:c0:ac:e8:
d6:7b:f5:82:c8:19:0e:4c:3e:dc:d7:ce:e3:65:0d:
12:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9A:99:1A:C9:4B:13:9E:DF:78:83:57:83:EB:76:8D:1C:63:93:77
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b8:df:45:5e:7c:71:f3:09:ec:ad:d4:ce:97:d8:91:1d:82:
f9:87:a0:5a:3a:5a:e3:11:17:4d:d3:6a:67:58:f0:e0:50:4a:
9e:b8:01:3e:a5:16:83:76:cd:48:0a:af:89:8f:f8:fe:1f:e3:
d4:b8:ba:12:ab:00:28:30:44:2c:63:7c:03:d2:77:76:14:a9:
94:d3:7c:7b:3a:18:bd:22:f0:7e:fd:bb:dd:23:1c:d1:0c:72:
ae:59:14:62:a6:8e:36:06:15:6a:dd:92:ee:1b:60:ad:e5:d4:
48:86:36:66:33:6e:1f:8e:8e:4b:43:06:71:5e:29:24:8e:4b:
41:64:79:5d:7b:ea:70:ac:02:41:e3:35:45:f9:05:c4:10:e8:
96:bd:78:e5:48:b4:12:81:f7:4c:65:0b:61:32:be:e6:35:f5:
98:1c:16:78:b9:86:77:10:cc:61:5a:45:af:c2:ef:f2:ea:62:
ce:ed:5a:b4:4c:67:dd:65:bb:01:03:b0:52:8b:49:a2:09:b6:
8e:c9:8c:1c:18:93:e4:5e:16:5c:dc:f8:b9:3d:47:49:d9:6f:
a5:92:a8:f1:78:9f:c2:10:8a:c1:da:01:03:7f:75:91:66:1b:
51:08:39:e2:8b:b9:6a:21:b0:f1:5a:08:6e:39:83:94:72:47:
aa:63:8d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:43:49 2025 by rpki-client