Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
File: x-jZWfHJVkoz8o_kSrYUuPYrABs.mft (raw, json)
Hash identifier: rGwIkW+VGqZ+9Ye4xuEIynvU9MeIR8SDYAb7Y8Ak/UU=
Subject key identifier: 88:34:AB:2F:D7:A5:08:90:5D:96:E7:19:3E:EE:F9:50:9C:D0:39:04
Authority key identifier: C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
Certificate issuer: /CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Certificate serial: 0199FCC69450817D204D1E6DA691C54BDFAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 14:01:36 +0000
Manifest this update: Sun 19 Oct 2025 14:01:36 +0000
Manifest next update: Mon 20 Oct 2025 14:01:36 +0000
Files and hashes: 1: 0dZuTVI8Td6vXZ_M7JHFy8X1O5c.roa (hash: F7QdZ0RB8p70yz/o07QNKl2zYYJpUZcQmbMtrrlchjc=)
2: HvzEip9yu7BJ9xjiNMrZ1suP-8Y.roa (hash: CQzBI8KlBsVb85wsnxBXgdOAhqwS8nG5XBQFZs7IhV4=)
3: S-Yjb4eozy3TXfv2IRjmsYO3X3c.roa (hash: 5Sdpus0Ffzh+VbOC9y8nRnaSgxwGysE5TC3V4JwdK/g=)
4: x-jZWfHJVkoz8o_kSrYUuPYrABs.crl (hash: Nxl9+bfUIjIjzHasHtCVZM4kNisGb0jr9lrfB+lJnnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:94:50:81:7d:20:4d:1e:6d:a6:91:c5:4b:df:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e8d959f1c9564a33f28fe44ab614b8f62b001b
Validity
Not Before: Oct 19 14:01:36 2025 GMT
Not After : Oct 20 14:01:36 2025 GMT
Subject: CN=8834ab2fd7a508905d96e7193eeef9509cd03904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:77:64:c1:79:4c:33:02:f8:05:90:09:9d:
a3:94:7e:9e:a6:03:8f:9e:8d:23:cd:c1:0f:ae:03:
0a:a3:3b:c1:0e:19:6b:f3:4c:1c:2b:37:2f:eb:ef:
a9:7f:09:54:4e:8d:b5:47:72:b8:f4:95:9a:d2:f4:
85:1c:d2:25:dd:24:15:58:38:0a:a0:be:d4:18:0c:
fd:1a:94:fe:8a:05:7c:94:98:3e:a5:24:87:81:ba:
55:c6:30:00:91:49:56:ab:0e:e1:f2:ae:37:6b:de:
3f:d3:65:34:80:e5:ae:cc:f2:b0:39:f4:90:59:f0:
08:fd:21:e4:c7:ea:78:62:ce:20:17:31:f0:01:eb:
e8:a2:99:40:53:91:fb:10:47:c9:97:59:28:02:36:
28:1b:1f:c1:e1:6e:a3:b6:44:4b:5e:8e:74:46:21:
ab:39:5a:b7:67:56:15:d7:1f:70:9d:a1:2e:ef:f8:
a8:1a:08:36:d6:71:35:78:6b:a9:7b:aa:79:0e:55:
43:9d:00:a7:89:bc:8c:73:97:93:60:1b:d0:58:69:
4b:ce:6d:1a:63:fb:89:e8:f9:5d:92:b4:d9:58:5f:
5e:df:1b:2f:02:3c:c2:61:55:ae:18:9b:ee:fd:90:
34:11:da:0e:d6:e9:d9:8a:c5:52:10:99:82:94:fd:
f0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:34:AB:2F:D7:A5:08:90:5D:96:E7:19:3E:EE:F9:50:9C:D0:39:04
X509v3 Authority Key Identifier:
keyid:C7:E8:D9:59:F1:C9:56:4A:33:F2:8F:E4:4A:B6:14:B8:F6:2B:00:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-jZWfHJVkoz8o_kSrYUuPYrABs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/24e327-7658-463c-8990-b1c9b789aaa9/1/x-jZWfHJVkoz8o_kSrYUuPYrABs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cf:49:82:70:8d:d2:d6:51:1a:ee:f9:55:d7:1a:d7:f5:03:
1f:9d:1b:55:33:32:6d:e7:5e:9d:8a:e5:6a:e0:3b:2b:95:45:
21:26:21:96:68:ec:e8:f3:9c:82:b3:5e:82:36:15:58:9e:14:
ef:11:08:30:80:3b:bf:b3:36:f2:ab:b3:ed:d5:75:3d:59:09:
aa:59:d7:b3:38:3e:e6:55:1f:b6:b4:94:6b:83:95:37:e1:0f:
5a:4f:16:33:5b:9d:4d:4f:9f:57:f3:39:34:72:b2:1b:15:57:
6f:63:0f:4d:33:1a:11:ae:7b:5d:10:57:e7:1e:9e:d2:0e:9b:
d5:cb:d5:62:00:d8:84:9a:03:ec:52:b9:05:82:72:bc:04:22:
36:a6:45:26:94:b9:ba:31:d8:e3:6b:d5:42:f1:a3:ce:5b:66:
ca:40:69:5a:00:98:bd:9c:60:b1:b2:4b:31:5d:5a:ad:15:5a:
f8:33:62:95:a6:4d:71:ba:97:d2:08:43:d7:68:d4:d3:91:00:
25:7e:4c:f5:ae:f3:4d:dd:66:07:31:b0:7f:52:9b:d7:c0:2b:
26:81:1d:64:e7:31:53:e6:51:e8:56:61:ae:3e:5c:72:6a:b3:
c7:57:6c:39:cd:4a:d9:cc:9f:48:9a:59:f0:31:86:1e:04:fa:
68:cb:6a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:00 2025 by rpki-client