Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
File: jq1F4xclfhcKIDDnmw9fdEBqeEI.mft (raw, json)
Hash identifier: ZFZDHoIhyCmKlsEJD3R/6cJ6I/1uCQG5nxcDTRZH+Ok=
Subject key identifier: 3F:EB:76:0F:C7:9B:87:F4:D9:FE:91:BA:91:D3:98:8F:ED:AB:80:EA
Authority key identifier: 8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
Certificate issuer: /CN=8ead45e317257e170a2030e79b0f5f74406a7842
Certificate serial: 0199FCC6B499779CCCA2A881094810899BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
Manifest number: 12C7
Signing time: Sun 19 Oct 2025 14:01:44 +0000
Manifest this update: Sun 19 Oct 2025 14:01:44 +0000
Manifest next update: Mon 20 Oct 2025 14:01:44 +0000
Files and hashes: 1: U32_Sc22WvD7Fv16LTG7iyrHJKk.roa (hash: HDMDgZcXReJr66n8qO4cBkBwOaGGNGz+zcAfJfe/HW0=)
2: jq1F4xclfhcKIDDnmw9fdEBqeEI.crl (hash: zUjGPCjWDz/BE6V6e7GuBnbxPsItiG1Id1d7biggwEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:b4:99:77:9c:cc:a2:a8:81:09:48:10:89:9b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ead45e317257e170a2030e79b0f5f74406a7842
Validity
Not Before: Oct 19 14:01:44 2025 GMT
Not After : Oct 20 14:01:44 2025 GMT
Subject: CN=3feb760fc79b87f4d9fe91ba91d3988fedab80ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cb:5d:1b:a6:7e:db:41:62:0b:fa:3f:ef:1d:
d9:72:6e:f0:a1:e5:3e:e4:8f:44:37:2f:5d:4f:48:
c6:d7:62:7d:5f:9e:c3:d1:97:61:a5:0f:06:a6:dc:
3a:6e:77:13:62:a8:73:a6:e5:ad:a1:e2:82:fc:23:
cf:ed:fa:7f:e2:0c:34:59:8c:0b:0d:c1:4f:34:c2:
a9:70:a7:84:e6:d4:6b:2e:e0:5b:92:af:15:bc:f1:
b9:86:7b:a8:77:bd:71:3a:78:35:4c:97:90:bc:61:
a5:a8:d4:59:4b:90:cd:a4:64:89:6b:13:b8:b4:c9:
81:f7:20:b4:c6:8f:dd:af:43:f9:0e:e5:4a:6b:9b:
77:8e:10:8f:72:86:65:49:af:5f:1b:29:01:a9:04:
2c:00:ef:7d:7a:a3:1a:ba:82:cd:e8:89:4a:44:87:
25:3b:8e:39:a0:eb:06:80:a1:6e:42:53:bc:57:54:
67:e6:85:39:3e:d6:47:a9:74:4b:23:e9:b1:5f:42:
9d:6c:e7:58:0e:ff:bd:ca:eb:e1:a1:57:56:8c:2c:
31:49:7a:4c:3e:0a:07:6c:b1:b8:6e:58:8c:08:37:
b6:c3:74:60:f3:3d:6a:8f:ca:5c:15:8e:73:21:3c:
5a:d1:9a:b5:98:b3:0a:ee:7b:33:55:a7:90:b8:4e:
41:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EB:76:0F:C7:9B:87:F4:D9:FE:91:BA:91:D3:98:8F:ED:AB:80:EA
X509v3 Authority Key Identifier:
keyid:8E:AD:45:E3:17:25:7E:17:0A:20:30:E7:9B:0F:5F:74:40:6A:78:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jq1F4xclfhcKIDDnmw9fdEBqeEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/81eaf6-66cf-4b21-8ffb-08bdcd533b61/1/jq1F4xclfhcKIDDnmw9fdEBqeEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:8e:80:67:52:63:13:b6:fc:55:e2:b0:36:15:08:a4:74:f4:
0b:1f:ca:ba:b6:da:d7:0e:55:e8:93:92:10:37:05:6e:f7:4a:
4e:1c:b9:97:cc:6d:27:e8:93:b4:76:af:2a:12:63:4a:30:77:
f5:b6:12:e0:d9:58:e4:78:1b:6f:14:a6:f2:ed:9b:2d:00:f1:
c0:b0:3d:15:14:f1:3f:16:d6:39:f1:9c:5a:d6:a1:92:71:25:
3e:9a:7c:37:31:c2:06:59:d7:cf:25:fd:27:4b:5e:d7:0d:69:
88:fb:24:16:ef:65:76:15:9d:e8:a8:88:e5:bc:ae:16:7e:05:
d4:c5:35:cf:b1:2f:4c:7b:5f:dd:4a:d4:07:72:ff:aa:9a:0f:
0d:21:f9:3e:23:ab:b1:4c:fe:10:21:2a:40:ec:53:f4:92:65:
18:b4:3c:af:ad:da:99:e0:66:06:f0:c5:b2:d3:11:bf:55:45:
8b:84:35:42:d1:02:3c:a7:3a:57:0d:0e:a6:52:49:dc:7a:8b:
d2:1e:09:d0:66:e0:aa:cf:34:f2:96:e7:fd:82:80:3c:6e:61:
22:14:4d:3e:a1:29:fe:7c:f1:57:b8:3b:da:f1:1e:a1:78:31:
92:96:60:e1:72:d2:89:d1:5f:35:85:a4:03:1d:5c:37:a7:f4:
06:e7:d0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:13 2025 by rpki-client