Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
File: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft (raw, json)
Hash identifier: ehHCftozufiNXNCuBWzcBz0NtvaMuy1EsUhBSOnHJs8=
Subject key identifier: 42:3F:0B:5A:B7:6D:9D:97:29:15:DE:C6:E4:F3:47:4E:D9:B7:08:E7
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial: 0199FBEBBDB98E81D4E0B12A6D6CBDB6FC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 10:02:34 +0000
Manifest this update: Sun 19 Oct 2025 10:02:34 +0000
Manifest next update: Mon 20 Oct 2025 10:02:34 +0000
Files and hashes: 1: 3rqvk9Ly9Ero57NmYxKaPl0vDoA.roa (hash: M8FySyxOTMDlpGnQamTf4gMdwU/cr4xnBa652N0ZBzE=)
2: a5qYzrR3zVIVKAC39LbmabIVB3w.roa (hash: o2q3Ya7UWxN56bJjpdJoNhtkB0KM0BVsZTXuLLBCJLo=)
3: b5s6CPLFznLsovYoy29wVzi-3Ok.roa (hash: gTEcnWNc7gGNNW8CTA/atNwTpPOjqZ/Ir9LwK3/7Z6U=)
4: gKZhRE4D1VFL6YVSvsx5XCUWzbo.roa (hash: 51uE4SN0evdj/LX3c8iK4ExCQ5J9huvoiaIN23Ew9+Y=)
5: ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl (hash: SVRp5+smTL62OTLpVA/C1vqj09D83Dh5GxCswmf0it4=)
6: xhLAJjv9_Y1t8jJtI14R7-YuW3Y.roa (hash: 0Rp0DNxPTLSllsBa+ggz8MQkfDKWpPp0o5l05ctu118=)
7: xv_rICPuGTvD6ScITP8bU4s29kI.roa (hash: eF9p3Ueapy3+1vaTSpncjWTz8xDVpoQXfQgMEWvYRQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:bd:b9:8e:81:d4:e0:b1:2a:6d:6c:bd:b6:fc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Validity
Not Before: Oct 19 10:02:34 2025 GMT
Not After : Oct 20 10:02:34 2025 GMT
Subject: CN=423f0b5ab76d9d972915dec6e4f3474ed9b708e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:17:1e:b8:8f:8e:21:d2:72:0b:ea:a1:f4:
7a:4f:a4:7c:67:fb:0b:a0:54:fe:29:50:a2:f6:04:
93:58:36:ef:aa:fe:a3:02:91:b5:26:4e:e4:5b:b4:
ca:47:e9:67:c2:4e:cf:0e:f5:64:07:a6:63:9a:b0:
7b:9d:7a:91:8e:25:26:b3:e8:0b:78:21:d3:80:fb:
59:7a:8d:ba:8d:03:24:22:90:c1:da:01:bb:2e:55:
82:31:bc:36:0b:51:2e:37:12:90:7b:0a:4b:51:a1:
87:51:6d:db:d7:71:b3:94:9a:85:fe:36:df:e5:5f:
d2:25:96:ba:aa:d8:39:41:2b:94:b7:dc:d5:13:0d:
05:85:29:13:8d:a5:c5:a9:7b:92:ac:10:13:c5:08:
96:07:6f:61:7c:1d:2c:34:94:57:43:4d:1f:e7:0e:
57:7a:49:50:54:40:6a:5d:fc:0c:10:4f:51:88:b1:
84:d3:78:12:d3:ec:19:8b:5a:2c:ed:60:3e:f9:9f:
8c:0e:34:f5:83:b4:78:c7:48:bb:fd:46:84:b1:32:
90:eb:87:0f:f4:24:b4:9f:ca:fb:1c:9c:90:11:81:
64:7e:da:73:8b:83:8e:9a:d1:c8:fb:58:85:e1:f0:
c3:ce:39:24:fd:9c:83:61:f2:d3:63:70:89:64:e1:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3F:0B:5A:B7:6D:9D:97:29:15:DE:C6:E4:F3:47:4E:D9:B7:08:E7
X509v3 Authority Key Identifier:
keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:eb:54:bf:75:f8:d8:7f:cf:41:7a:c6:93:6a:05:d5:05:d4:
61:d5:2a:d6:17:5c:c8:81:ca:95:34:64:b3:d7:e8:43:7d:e4:
68:18:ca:a5:2a:b2:54:72:fb:81:2f:e9:25:e9:3e:e3:68:f2:
5e:76:31:0b:66:47:1b:60:0b:25:c2:b9:03:f5:a3:f5:e2:b7:
3c:9d:20:02:30:b0:88:2c:35:44:78:bb:5f:32:50:29:25:42:
c7:92:c8:c9:6c:4f:e7:2d:97:19:be:a1:29:8a:43:62:56:87:
ff:5e:c0:cb:52:8d:c0:a1:11:c7:ef:b0:54:d5:4c:32:23:ce:
9b:67:e0:bc:e8:53:e1:6c:39:29:05:f5:54:af:45:d5:01:19:
29:b0:d2:cf:d0:67:55:4c:e9:83:30:65:45:cf:86:5a:93:fb:
da:ab:34:1a:11:35:97:cf:0e:94:8a:93:2b:ee:8f:46:7d:1b:
41:13:3f:19:0c:8b:bd:9f:c7:c8:f6:31:01:a7:9a:3c:68:01:
f2:e3:7d:25:6d:62:be:d3:af:b9:19:5e:8e:0d:21:73:58:96:
23:77:39:cf:c8:41:e1:a0:72:58:a5:ce:7c:3f:3b:60:b8:f4:
4b:f8:b0:8d:06:a5:be:13:66:8e:ba:05:df:55:6a:b7:11:47:
2f:1f:3a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:59 2025 by rpki-client