Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
File: mjfe_wVaUdk-HtL3xzIX12B6jPI.mft (raw, json)
Hash identifier: lkbStWc1K+qEIzeeWfhBR2awpHDiLen/bmRpuogV8q4=
Subject key identifier: BE:A8:C0:3F:48:92:22:CD:11:61:A2:F6:B1:C8:06:F0:EC:CF:FE:DE
Authority key identifier: 9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
Certificate issuer: /CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Certificate serial: 0199FB7C9CCD19B5B6D543E25C32AE0E86F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
Manifest number: 04AD
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: YxveI4ih6pTB1sKFupGdm18Smzc.roa (hash: dR429rKnleksdPGeSDctkW6MMPKSaofQtmcnafzS7xs=)
2: mjfe_wVaUdk-HtL3xzIX12B6jPI.crl (hash: Lpp3bNGBea2jowZqsR2AMpi4M15leUWYqxI6iTRq5ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9c:cd:19:b5:b6:d5:43:e2:5c:32:ae:0e:86:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a37deff055a51d93e1ed2f7c73217d7607a8cf2
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=bea8c03f489222cd1161a2f6b1c806f0eccffede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:3f:7e:e4:50:b3:5a:2b:62:fc:87:37:02:
ee:08:ba:88:76:e2:c4:8a:aa:ac:d9:7a:51:d4:bf:
d9:07:e5:f2:0f:d2:13:1b:b7:ce:f5:51:7f:6b:dd:
9d:92:3b:33:e0:86:71:88:eb:42:b9:80:81:1c:f7:
82:64:cd:78:70:54:37:39:56:60:1d:6a:e5:c7:25:
41:80:1c:fe:80:13:ae:77:4a:39:d9:1f:17:39:ba:
f1:87:48:52:82:fc:99:7e:59:fd:92:a8:c8:3a:2f:
d6:d4:11:73:f7:a7:2a:bf:2c:6f:5c:69:11:ae:b4:
3e:ca:a3:b7:88:09:79:6f:16:5a:7d:fa:4f:5b:af:
2c:07:6e:09:1d:e3:85:b5:3d:bf:59:35:94:40:5e:
f6:f1:f9:5a:ce:77:d3:96:1b:73:d4:db:aa:86:8c:
bb:45:60:a8:60:a8:20:fb:9f:50:6c:9f:a1:b0:c5:
5c:05:52:f1:d0:34:65:1d:35:20:5f:11:1d:b9:bb:
b6:e2:2c:a2:96:ae:18:00:5d:30:71:ba:e4:45:ad:
00:94:3c:f9:83:66:55:bd:25:08:a7:38:2b:68:f0:
6a:dc:50:28:9b:86:e7:ac:f9:ad:1e:40:16:d7:66:
0a:18:00:65:49:d5:f7:d4:3e:c8:3e:8d:49:86:6a:
fa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:C0:3F:48:92:22:CD:11:61:A2:F6:B1:C8:06:F0:EC:CF:FE:DE
X509v3 Authority Key Identifier:
keyid:9A:37:DE:FF:05:5A:51:D9:3E:1E:D2:F7:C7:32:17:D7:60:7A:8C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjfe_wVaUdk-HtL3xzIX12B6jPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/471e89-d6a5-4933-a3e3-802630516f09/1/mjfe_wVaUdk-HtL3xzIX12B6jPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a2:cc:8f:dc:43:fd:24:b2:5a:b7:48:b9:dc:68:54:33:87:
af:d5:7b:12:a7:9a:8f:a4:ed:9a:f9:5c:41:92:0e:85:20:ab:
8e:98:82:e7:00:52:5f:6d:b8:37:78:25:53:da:d7:3c:46:3e:
5e:39:ec:57:de:90:c8:38:3b:17:a3:d0:38:07:b3:05:77:df:
88:78:e9:8a:ab:69:fa:c8:3e:72:f1:7b:94:31:61:1a:1b:f4:
d6:e0:d7:79:33:87:ed:e6:07:51:7a:81:af:70:2e:53:ca:fa:
e7:a5:d4:0f:5b:13:9e:b7:6b:ae:9a:91:ae:27:9a:6b:7d:67:
6d:a1:ee:a5:9f:42:52:4a:14:32:ae:c9:27:c3:0e:4b:8e:4a:
5f:6d:c4:9c:7d:81:20:f4:9e:57:00:f1:80:2d:6e:ed:dc:cd:
73:b1:72:a4:07:6a:3f:11:d6:f1:a1:33:6a:ab:03:40:db:50:
7d:47:30:73:c5:a3:d2:7d:54:d3:74:9f:5d:d6:88:67:a1:da:
52:6d:32:37:58:32:b6:c3:34:43:29:c0:7f:b5:27:c6:6d:fb:
b5:91:94:0a:36:0a:8c:d9:97:24:83:86:de:75:62:9e:69:28:
17:d5:f0:05:96:84:49:a9:f9:f6:3e:f6:09:81:ee:8c:0e:9b:
0b:cb:ac:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:37 2025 by rpki-client