Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
File: jIVlV8QUaotQ3E2UQksGaAzvdVs.mft (raw, json)
Hash identifier: gisOYfghRtujMxEx5zA9cFOkYQhmdIMm1TQZ63WEyhg=
Subject key identifier: 52:FE:8A:77:A1:25:DF:07:31:05:44:B7:24:CA:85:A8:0A:34:85:B3
Authority key identifier: 8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
Certificate issuer: /CN=8c856557c4146a8b50dc4d94424b06680cef755b
Certificate serial: 0199FDD8FF0B6E5040CE6E6959DF0C5FB76B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:01:20 +0000
Manifest this update: Sun 19 Oct 2025 19:01:20 +0000
Manifest next update: Mon 20 Oct 2025 19:01:20 +0000
Files and hashes: 1: LMeAQnqXAno2ePthwCoJjGfcb2A.roa (hash: No1WA2LE8faZkFieSxcHhVUWaXGzU/xeEQ1/oG4+fLo=)
2: VTn6EUtQCO3oepKWF0k0ld0XSjA.roa (hash: Tq2gVAAnQassaUGQuCNSlznhLVZoKruMbeiYe+SNasU=)
3: duhqaZfDGitvRaokNyqOu5bk0v8.roa (hash: BL1fv/RwGJqefrtoFnvmlovZ7pP8X3nS9B+9usaWWNI=)
4: jIVlV8QUaotQ3E2UQksGaAzvdVs.crl (hash: anH2y51pKukqosvDn8Xudr+szfTKkJUZLAIVoK8Hvk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ff:0b:6e:50:40:ce:6e:69:59:df:0c:5f:b7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c856557c4146a8b50dc4d94424b06680cef755b
Validity
Not Before: Oct 19 19:01:20 2025 GMT
Not After : Oct 20 19:01:20 2025 GMT
Subject: CN=52fe8a77a125df07310544b724ca85a80a3485b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:79:9b:33:20:c8:7c:e0:57:80:75:6f:64:0a:
f2:20:bf:04:8d:93:a1:ed:9f:e4:29:ae:4d:9f:f3:
69:f2:5a:60:ce:ae:63:bc:85:90:ea:18:46:7c:53:
3a:4e:c3:b1:9f:8b:4c:53:bb:c0:a2:22:c6:65:62:
2b:44:ef:d5:93:fd:4e:a6:9d:ba:95:b9:d2:35:58:
0b:92:c2:0b:74:a4:4e:ac:0d:b3:21:da:34:e6:99:
a3:6d:8c:56:00:93:bc:c9:69:18:3b:74:aa:0d:8e:
25:4a:48:24:bb:0c:04:01:b6:c7:ac:5e:f5:3e:72:
fc:b5:ef:41:c1:09:9d:8b:08:a1:ac:ba:52:3f:bc:
20:c7:19:da:a4:11:16:ce:69:57:d5:b9:c4:05:73:
18:a5:fe:5f:0c:68:74:61:ce:55:5b:e2:77:a1:70:
26:ce:ca:36:24:ac:60:cd:a5:47:7c:f8:9d:ae:dd:
f6:3e:17:e3:ea:6e:2f:38:e9:46:71:b5:3a:46:e7:
3f:eb:c4:ed:a7:db:43:0c:7a:8c:0d:62:91:72:9d:
25:83:80:23:06:c6:ec:73:b0:a3:e4:11:98:5c:71:
3f:80:e3:c7:0d:5a:0c:9b:b4:f0:f9:34:70:88:32:
1a:32:1f:1a:09:f6:0d:85:69:9f:db:83:8d:4d:f2:
92:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FE:8A:77:A1:25:DF:07:31:05:44:B7:24:CA:85:A8:0A:34:85:B3
X509v3 Authority Key Identifier:
keyid:8C:85:65:57:C4:14:6A:8B:50:DC:4D:94:42:4B:06:68:0C:EF:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jIVlV8QUaotQ3E2UQksGaAzvdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/jIVlV8QUaotQ3E2UQksGaAzvdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:85:eb:1e:df:a8:3a:13:6c:0e:37:8f:c6:e0:76:f3:52:5a:
1b:f3:4f:55:09:b9:0b:af:a2:c1:63:a0:f8:23:fe:ee:8b:37:
17:4c:cb:3c:74:5c:e0:28:d5:16:ea:72:59:a2:bc:f5:c0:61:
07:d8:f9:ea:e4:83:a1:e0:4c:bf:73:3f:4f:c4:82:9f:88:7c:
36:0f:d8:3b:79:10:16:1d:d1:7f:23:3f:a2:d3:5f:66:75:76:
42:e5:03:04:2e:29:8b:28:7d:60:f1:e3:b4:af:8a:5d:96:c1:
c3:4b:d5:35:ea:ce:7d:ff:8c:fe:c4:e7:ff:04:a6:ae:d1:72:
2c:87:db:f0:46:58:46:da:9d:24:11:14:2d:46:a3:14:a2:4e:
0e:58:ae:f5:67:2a:41:2f:8e:e8:25:75:21:6b:d5:01:f6:ec:
29:39:df:ee:a3:01:3b:92:63:92:31:f9:4e:dc:fb:87:59:ca:
cb:a1:80:ed:ce:b4:71:99:69:2c:fa:e5:c1:8d:ae:57:63:d3:
87:98:bf:c0:f8:97:98:76:1c:2b:3e:51:11:01:00:0f:40:25:
98:0f:ca:db:b2:b1:f5:85:7c:c3:f7:4b:a4:f9:9b:91:7b:95:
02:d9:aa:b2:94:c6:58:4e:66:60:86:6f:de:95:f0:9f:bb:99:
1e:ad:6d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:46:20 2025 by rpki-client