Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
File: j4aF263_sB3czmxNgql_M8BA7S0.mft (raw, json)
Hash identifier: D/9NYWC9hdxtuXi/b7TCw+r4+rlNvKCMdGUh35XtgbQ=
Subject key identifier: 6C:12:C7:67:97:27:B5:79:90:69:90:F5:07:41:87:C1:7B:0A:C5:DE
Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
Certificate issuer: /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Certificate serial: 0199FBEB6596AAB445ED8E7D690379FBB06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:12 +0000
Manifest this update: Sun 19 Oct 2025 10:02:12 +0000
Manifest next update: Mon 20 Oct 2025 10:02:12 +0000
Files and hashes: 1: CnLBnKO7kUWDOtI_wZowil8ZDY0.roa (hash: +ZLQWoCpBdEd1GfrIrkM6Ixuxre1nfZzdo3/CXXl60U=)
2: j4aF263_sB3czmxNgql_M8BA7S0.crl (hash: /JgUq75yYVLc9nOafdMykEv+c3cju7tKhLL9VNS42Cc=)
3: sUWUQ7xVOWG88c1zTJfQJSXfUGM.roa (hash: VIZMGPKQd062ThwggTDHc4EOlVHSYbX0SY8qNlvlezs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:65:96:aa:b4:45:ed:8e:7d:69:03:79:fb:b0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Validity
Not Before: Oct 19 10:02:12 2025 GMT
Not After : Oct 20 10:02:12 2025 GMT
Subject: CN=6c12c7679727b579906990f5074187c17b0ac5de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:9f:d5:e4:24:1b:f7:19:04:27:f1:02:33:
b1:d9:e0:09:3a:6b:89:2a:ef:b8:be:f0:83:27:31:
9d:d9:44:4c:91:1a:b2:6c:99:6d:5e:b1:80:c0:d7:
ec:52:c7:47:c1:ab:a0:ce:2c:2a:8d:78:56:1e:78:
5b:e7:67:8b:79:e9:4f:24:55:c2:e6:09:3a:8b:74:
c0:6c:88:4e:e4:0b:d7:17:42:9a:dd:e9:db:1d:85:
c5:cf:31:3f:42:ad:84:33:bb:eb:ad:d3:c2:e9:91:
6e:93:85:79:e2:38:28:05:d7:ba:ad:44:31:9f:d7:
c0:72:28:2c:bb:9b:d5:31:89:37:8d:8e:2c:26:e0:
87:d7:dc:a6:9d:10:51:c7:3b:c4:2b:df:95:6f:e1:
8b:db:e8:f2:20:98:c7:3d:de:27:d4:04:c5:38:b1:
3a:90:19:e5:dc:8d:66:e0:12:c5:05:fa:d7:b3:85:
20:ab:61:ec:f7:e7:bc:42:0e:cf:44:80:7e:ac:aa:
de:6f:7b:80:b3:3b:2b:a3:7d:8b:54:e7:15:b5:cc:
e3:ad:2b:af:77:b5:10:c6:0e:1a:44:cc:91:41:6f:
36:0a:05:0b:24:91:97:0c:9f:89:7a:05:08:fe:27:
12:de:f0:f1:78:e2:4c:54:4f:a7:d9:00:62:22:61:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:12:C7:67:97:27:B5:79:90:69:90:F5:07:41:87:C1:7B:0A:C5:DE
X509v3 Authority Key Identifier:
keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:28:d1:10:72:9d:ef:f1:23:d5:43:8b:d1:78:62:66:58:6a:
ea:44:45:56:6b:f3:3d:4a:e8:5c:8e:1d:3a:e7:04:47:e7:76:
5c:dc:1f:59:4a:6f:cf:14:aa:b8:80:85:55:c7:7a:2e:9d:6c:
fb:dd:26:50:f2:fa:97:ee:a9:5c:a3:74:97:b0:24:23:0d:c2:
ec:fa:2f:3e:93:47:94:80:99:af:52:65:9a:20:59:14:6e:a2:
83:af:5d:19:d7:af:6c:4b:dc:98:1b:49:ec:f7:ba:5c:40:f2:
6f:fa:35:94:60:8e:c8:58:b2:9a:1b:37:90:3e:d9:61:26:f8:
7a:47:7a:c1:be:09:19:09:55:f2:30:ea:4b:de:88:a3:40:63:
79:e9:d8:20:19:3f:89:70:69:dd:8a:6f:38:2d:eb:91:fb:ef:
79:b3:12:c3:8a:32:7e:71:71:5c:4c:ae:53:a8:89:67:7a:3b:
93:8f:2c:06:02:39:d8:c7:eb:5b:89:e5:f4:cc:0a:4b:46:c4:
b4:41:25:7a:f6:82:27:7f:e7:6e:14:64:ea:2e:29:ab:fe:26:
af:29:58:57:b8:f4:b1:e7:d1:77:f9:49:c0:6c:8f:c0:a5:8d:
64:c9:4a:e2:85:7e:06:6b:af:75:71:3f:eb:96:56:88:d6:aa:
d4:4d:06:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:20 2025 by rpki-client