Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File: Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier: UrMH5j36SPTX1O3kdz+lslIH8445vW9d87TFVWjNCLE=
Subject key identifier: C1:F8:28:5E:90:66:C3:7B:65:F6:6E:4A:3D:B9:C4:89:2D:98:E2:72
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer: /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial: 0199FFFE5BE79EDB21CF6BA6F9F9BF1E277B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number: 160B
Signing time: Mon 20 Oct 2025 05:01:23 +0000
Manifest this update: Mon 20 Oct 2025 05:01:23 +0000
Manifest next update: Tue 21 Oct 2025 05:01:23 +0000
Files and hashes: 1: 4XFlits89wxyHX1vn5VHIsNuyKg.roa (hash: BT2LxZu3wA5VCThqQPlS1bE8oOkqeH9p+4dqdYk4cGk=)
2: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: OLu9yjEPOfLrZd908j78SwYqRM2PLgncv27RKX+82Ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:5b:e7:9e:db:21:cf:6b:a6:f9:f9:bf:1e:27:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Validity
Not Before: Oct 20 05:01:23 2025 GMT
Not After : Oct 21 05:01:23 2025 GMT
Subject: CN=c1f8285e9066c37b65f66e4a3db9c4892d98e272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:51:74:bc:03:7a:23:f3:77:85:e0:43:e6:
36:1f:0e:2b:11:79:c8:f0:bc:5e:01:f5:ee:3e:94:
d5:95:97:ef:24:2c:0d:41:ab:2b:4b:b3:cc:36:d7:
21:61:c1:1a:1f:c4:68:7e:af:d4:87:bd:4d:31:61:
08:51:5c:7e:cb:88:a7:14:56:a5:fa:01:da:dd:17:
c2:59:d8:f3:b6:55:43:65:e1:e0:c6:94:54:bc:91:
d8:70:88:42:fd:8b:4e:3e:a2:83:08:a9:67:24:7d:
bf:91:9d:a7:74:86:a6:38:9b:24:34:9f:f2:bc:48:
d4:a9:bb:9a:61:7c:af:3b:52:04:59:b0:f9:7d:62:
cc:79:2c:17:90:b6:0a:f4:1c:88:56:62:c5:d3:48:
5e:b3:ad:5f:73:c4:b5:cc:19:82:ec:b8:18:e2:fb:
e9:40:fa:53:cc:aa:75:da:00:31:e3:8f:40:9e:20:
e5:ea:3a:ac:fb:b9:43:9e:17:a9:0f:f2:81:6f:f4:
9c:09:6f:39:b8:ec:c9:78:dc:64:fd:ae:20:c5:22:
ad:ec:d2:b6:dd:be:c6:78:13:76:30:dd:47:32:6c:
d9:ce:45:7b:bc:87:ff:71:18:f4:b0:79:c1:50:47:
e1:13:57:b7:a4:88:c2:cb:02:7a:b0:80:c3:bb:e0:
5b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F8:28:5E:90:66:C3:7B:65:F6:6E:4A:3D:B9:C4:89:2D:98:E2:72
X509v3 Authority Key Identifier:
keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bc:f9:35:ad:53:3e:b5:f2:0c:4e:20:28:6c:60:99:f5:93:
c2:92:76:98:2b:eb:e3:6b:c3:ff:7e:a7:d1:6e:f6:40:2a:27:
25:8d:50:02:e6:8f:58:3d:f3:61:52:a6:8a:57:ac:39:f0:6e:
20:76:24:a4:7a:ff:60:01:60:b8:23:4d:ea:48:4f:b9:d4:4a:
f3:68:62:57:70:b8:fd:32:88:fd:32:ff:86:37:72:1a:92:bc:
10:36:52:65:84:3b:9a:31:8f:5a:28:f0:ff:10:4e:79:07:f3:
39:c0:1d:d0:c3:03:b1:4a:80:2f:24:e6:f8:96:82:49:3c:92:
48:0e:c5:9e:8f:df:98:fd:b4:7a:a1:fc:64:a0:91:cd:ba:fc:
08:17:16:0e:4f:ac:df:3c:28:69:16:01:42:ab:db:55:a9:e4:
40:12:c8:ac:24:61:25:1a:f8:d9:c6:12:76:9e:1b:05:c6:0a:
3e:94:ca:40:32:30:02:bb:a8:f8:0a:80:d9:3e:bc:54:0a:b3:
59:16:a7:43:f0:f8:98:9b:34:92:1b:78:8e:91:b1:8f:5f:4c:
77:a7:24:0c:15:f9:c2:8b:cb:e3:81:d4:ee:81:2e:28:91:36:
36:ce:e3:a7:d7:fc:25:0f:10:ac:0b:8d:94:43:18:4e:47:c5:
1d:14:a4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:28 2025 by rpki-client