
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
File: jCQMG5D38CAFP6CVMw_8-t71OZ4.mft (raw, json)
Hash identifier: lndCgTv5z7ko2p8tWgdo9qinwcpgDHR8lYXSCG+ni0M=
Subject key identifier: 15:71:3E:5D:B8:87:A5:48:B7:CB:65:67:23:4D:86:4F:0D:F3:B8:24
Authority key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
Certificate issuer: /CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Certificate serial: 0199FC217DB1A77E084E37D3C9CABEE6B184
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: AVv7KqsJQ7Zn0lKyZ4rdnlf-GJ4.roa (hash: NUdH+bGXaFI8uXmd6dLOR5WLJnhwd6mvan4jq3rAulE=)
2: jCQMG5D38CAFP6CVMw_8-t71OZ4.crl (hash: 39vNHwtMKPoBsyUdpb/v+tWDFYRu/xX3pLhAk/QYEEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7d:b1:a7:7e:08:4e:37:d3:c9:ca:be:e6:b1:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=15713e5db887a548b7cb6567234d864f0df3b824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:40:29:5f:d8:48:ef:ef:d6:de:62:85:db:7a:
ab:db:29:4a:c5:45:68:25:11:0f:06:30:2d:6f:5d:
b1:97:26:e2:4a:37:43:56:87:43:c4:c8:64:23:50:
a9:94:bd:1d:8c:92:eb:86:86:c1:2c:bd:8e:96:be:
2f:2d:dc:c6:58:95:7e:a2:88:cd:ed:53:09:72:26:
32:2f:f5:30:dc:09:ad:0e:90:93:03:9d:81:05:a4:
38:4a:93:25:6c:12:44:72:49:69:f4:42:8e:ca:c2:
38:41:94:78:05:c7:0d:4d:3d:b0:f1:33:31:d4:09:
45:88:ea:53:8f:13:55:33:a8:d4:d5:9f:51:43:f2:
01:2b:f6:1b:97:d5:2f:46:af:23:eb:9b:78:18:cd:
9b:d2:74:40:3a:de:b7:80:44:8c:4c:3f:db:c2:33:
72:72:88:c3:e7:69:36:bf:af:98:c1:42:df:40:94:
f3:fe:29:1c:fa:7d:69:6e:01:e6:88:25:de:2a:82:
19:e0:cd:91:54:94:3b:6d:34:3c:22:54:7e:65:a4:
23:54:48:d9:64:f9:31:10:38:0c:7f:c8:33:ae:80:
3a:b9:13:1e:c9:3b:6d:b7:9a:1a:c8:7a:9e:e6:5b:
a0:4a:30:73:51:df:12:98:c8:ab:7a:5b:66:8b:fe:
53:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:71:3E:5D:B8:87:A5:48:B7:CB:65:67:23:4D:86:4F:0D:F3:B8:24
X509v3 Authority Key Identifier:
keyid:8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:39:cf:2c:f6:96:08:d0:5b:6e:3f:42:a9:16:7c:43:bb:a5:
43:89:2f:98:7f:ae:a9:40:2b:f5:6b:3b:f8:7e:4c:39:a4:43:
4b:2d:81:3c:f6:69:95:04:34:64:e7:3f:56:12:6b:9c:82:af:
44:10:23:b2:b1:fc:4d:31:c0:40:e0:96:ac:01:ff:a3:86:69:
64:d4:a9:b5:2e:03:98:23:5d:b9:58:9e:72:2b:01:96:02:4a:
77:e5:e2:0a:52:57:53:80:b5:2e:ee:da:1a:07:2f:99:78:40:
b2:27:df:86:fa:a7:65:7b:20:6f:dd:01:3b:62:44:43:6b:c8:
17:1b:82:4c:c9:70:27:31:9e:e1:6e:d4:1f:2c:7e:da:97:0b:
46:c7:e8:78:da:3c:d7:84:b4:e5:95:9a:9c:3e:7a:6d:7c:d5:
f6:cd:8d:67:9c:01:3d:10:38:00:c2:24:23:6c:3d:ec:8a:e5:
78:59:6c:17:86:1f:84:ef:e2:1e:51:6e:bd:58:3e:ec:11:a7:
6b:ee:75:03:c7:78:7d:52:1b:77:76:36:46:6b:7f:a0:77:9f:
67:5c:28:e4:0f:f7:7c:49:9e:8d:3a:fa:b8:df:65:51:65:67:
5d:e5:58:d3:77:c5:99:56:cd:d9:5c:48:ef:65:b5:a8:00:fc:
56:dc:26:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:14 2025 by rpki-client