Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier: xfenOC8Z+z2hsWKjUGnSXe4lWit8tVrkeAZ7IUd4Uiw=
Subject key identifier: D2:62:30:4E:35:31:5A:CF:5F:89:D8:20:1D:52:BB:F4:13:38:77:D7
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 0199FE0FF742CB40A00CDA03016ECB7EBB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 20:01:23 +0000
Manifest this update: Sun 19 Oct 2025 20:01:23 +0000
Manifest next update: Mon 20 Oct 2025 20:01:23 +0000
Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: eWtNsAzsvtMnYUfp1NOibK6huczKQSVW8eVHk3TE6Zg=)
2: RfXdB1uHqTBN6RI4Ei6Oa090sJU.roa (hash: dQnKrWhdakZ+384uTWhQC1swu7fczbqA0NfqM/pjIIQ=)
3: wtfqM181rNTZILTtZZuVyGYsV2g.roa (hash: jL1T6NkOiM+9LzgY51xQQ/S9ZQ9hPL5ZNlX1CHentpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:f7:42:cb:40:a0:0c:da:03:01:6e:cb:7e:bb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Oct 19 20:01:23 2025 GMT
Not After : Oct 20 20:01:23 2025 GMT
Subject: CN=d262304e35315acf5f89d8201d52bbf4133877d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:c4:aa:8a:8e:c3:4c:84:9f:cd:43:6a:16:
34:25:0c:b4:97:40:db:7f:83:29:79:2b:dd:db:a9:
59:cd:01:f2:a6:dc:90:2f:2f:5d:48:29:4d:a5:b6:
8b:4f:79:4a:55:30:ad:99:36:68:d0:69:aa:bc:2c:
59:48:09:11:b1:f6:d1:53:46:b4:61:fd:a2:2d:b6:
c1:df:b5:c7:13:1f:26:1a:f9:1c:62:07:c9:b7:c4:
15:a3:24:8d:c4:52:d2:e1:b1:05:b8:5f:3a:20:5e:
cd:50:b5:81:dc:f9:34:99:e5:f8:07:73:6e:89:4a:
30:40:9b:6f:f4:32:f8:75:e4:08:ee:57:e7:ed:5f:
69:75:d1:7c:83:2d:45:ce:f9:36:5c:1e:e5:d1:87:
82:6a:fb:65:48:d8:14:a6:ba:ec:b4:91:1c:a0:98:
95:bf:6d:d5:87:67:ad:46:a8:71:e2:cf:65:d4:4c:
02:4b:cd:5b:e7:7b:de:bf:92:7a:3a:e8:0a:b4:74:
03:11:db:ba:81:62:f6:d1:d9:72:98:79:a8:83:c8:
cd:3d:16:b0:29:ed:8a:bd:04:9d:2e:26:b6:29:6e:
61:91:45:96:84:e9:60:68:86:ef:ed:34:55:1d:39:
73:f0:5c:d6:df:05:49:4c:b5:52:e1:ea:db:07:4a:
86:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:62:30:4E:35:31:5A:CF:5F:89:D8:20:1D:52:BB:F4:13:38:77:D7
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d5:a3:ba:1e:ba:45:9a:71:ed:6c:0b:e2:ce:08:70:bf:c6:
1e:a8:1e:16:8e:e2:a7:87:c9:3e:24:79:0d:e1:40:96:c6:69:
e0:17:2e:5c:a7:e2:da:77:e5:72:b1:0c:d9:49:f6:3e:11:c5:
96:15:a0:85:1c:3c:02:90:4f:f5:42:b9:c3:3d:84:45:d0:1b:
32:90:1e:e8:62:6c:dd:17:40:c7:72:2e:84:c3:61:60:b4:0c:
ee:b9:fe:85:af:96:e8:fa:55:c2:5e:b4:90:98:e6:db:87:5d:
9e:99:98:56:f1:a6:a6:10:eb:9a:be:ff:95:d7:20:d0:6e:72:
ea:9f:da:20:fe:41:40:ce:3a:3e:c8:99:f8:7d:8d:78:18:4b:
ac:bc:a8:0c:26:e0:b3:92:58:5d:77:ab:8e:b6:59:c2:f4:85:
3e:8f:56:f7:94:70:7d:fd:86:87:68:5e:be:44:54:84:49:cc:
73:62:fe:8e:9b:53:b4:ea:f0:ab:08:69:ec:cb:66:7b:63:37:
e5:b7:20:cc:45:0f:de:82:35:3f:40:ff:52:22:70:57:64:fd:
5f:a1:a0:1c:b8:7d:03:56:8d:84:a7:29:4f:54:c9:f0:62:e7:
60:04:d6:40:be:9b:e4:a4:58:16:45:de:c6:82:5e:74:8f:8e:
bf:8c:1a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:19:40 2025 by rpki-client