Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: r6KuTW8donh5yhkjIlm9K4lX39swKKlAgFUIibAHx3Q=
Subject key identifier: D3:8E:D6:69:0C:13:54:BC:ED:03:95:BA:9D:6D:8E:90:46:ED:66:DC
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 0199FD3460A46A8A1031C1970115BD5EB658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 0C13
Signing time: Sun 19 Oct 2025 16:01:32 +0000
Manifest this update: Sun 19 Oct 2025 16:01:32 +0000
Manifest next update: Mon 20 Oct 2025 16:01:32 +0000
Files and hashes: 1: hhrm1Em1WlxZZH38Jm2yxN4no3I.roa (hash: 3IW1YAxLQw3KLIWXwxwYcOQuTgohlVo0d+wGlA+Yr7I=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: 9MvcgJ2vFGdMW9QebmIRuSpKaJ2KYfvZtXGqVDePJN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:60:a4:6a:8a:10:31:c1:97:01:15:bd:5e:b6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Oct 19 16:01:32 2025 GMT
Not After : Oct 20 16:01:32 2025 GMT
Subject: CN=d38ed6690c1354bced0395ba9d6d8e9046ed66dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:63:fc:be:28:68:fc:48:4e:f6:ea:8d:ff:e7:
33:5b:9d:72:e4:8c:a4:21:94:a5:4f:9e:4d:d9:9c:
ca:ec:9d:f0:19:8a:b1:cd:80:7d:12:8f:43:98:b5:
45:ed:fa:9c:c0:8c:dc:1d:38:04:b1:28:77:6c:d3:
d7:0f:ee:ec:66:39:26:d1:2a:e6:0b:05:70:fa:2f:
77:94:35:e9:03:fc:98:84:a1:91:1e:b9:50:d1:bf:
38:7c:6e:81:aa:40:3f:ff:ed:03:41:c8:5d:d1:0b:
bd:10:80:1d:14:4b:4a:67:4b:de:e2:19:a2:76:62:
f9:11:d0:17:00:a4:34:3a:17:26:53:14:ab:1a:e1:
c7:ae:83:b0:a7:b7:65:bf:9d:4b:23:db:77:13:98:
7a:b4:b8:7e:c2:d8:dd:34:e0:3e:d6:97:d1:92:e9:
64:ef:0c:86:8e:82:61:b6:47:8c:b6:79:7b:e2:66:
70:fc:8c:26:5f:da:55:10:a8:6b:68:22:83:d0:2f:
c5:05:1b:09:99:92:5b:b7:78:67:b0:b0:de:da:28:
91:af:4b:67:f8:32:3f:2b:7f:f7:db:8c:20:f2:f8:
54:e1:3a:56:bc:74:2c:8e:18:b9:a9:6a:86:35:6c:
bf:7e:f9:eb:a1:1b:f8:04:22:fb:30:5b:6b:78:12:
b0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8E:D6:69:0C:13:54:BC:ED:03:95:BA:9D:6D:8E:90:46:ED:66:DC
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:05:22:ee:3d:d3:e5:af:68:f6:5c:29:80:54:01:fe:9e:d0:
42:d5:7c:a5:fd:1a:15:a5:d4:44:6a:ad:b8:a6:9a:35:61:67:
18:a2:46:e5:41:fe:64:e9:7a:3a:17:a5:63:3a:f6:97:15:0b:
21:5c:04:38:05:6c:73:7f:dd:75:ab:07:e2:d2:fa:64:4a:d5:
37:d2:42:06:57:39:5e:f5:48:3a:c3:03:38:67:2d:db:3c:0d:
41:58:06:68:4d:87:6a:fe:5e:cf:26:e5:b1:7c:4f:7d:1c:d2:
04:c7:18:c0:be:17:bd:83:4b:d2:ef:28:64:94:64:ea:0b:d3:
5c:cb:ae:ff:95:c6:6f:17:65:5e:0a:29:7c:c0:b7:9a:f0:b8:
47:31:3b:09:46:a8:73:61:b0:83:65:e3:8e:4b:b9:64:6a:56:
bc:b5:73:5d:e5:c1:33:05:b3:b0:41:82:75:d3:09:be:4c:8b:
10:b2:d3:73:21:6a:8f:db:fb:94:34:74:5b:86:78:23:b5:5e:
e8:b4:db:6b:4f:58:99:50:c2:32:fc:c8:7d:3b:de:58:aa:05:
95:ce:eb:19:2b:9a:54:41:99:4f:e2:47:d2:7c:b7:81:13:ce:
eb:05:e8:1b:df:25:c5:8a:f2:e8:d0:e6:9f:09:7e:57:ff:d0:
f6:b2:1b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:07:34 2025 by rpki-client