Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
File: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft (raw, json)
Hash identifier: txgndtEtlr5792roeY6bomMViKNbgJOCyO+52SX16D8=
Subject key identifier: 01:C5:4F:6A:8B:1D:54:7F:E5:A1:78:1B:87:A0:88:11:0B:7D:19:26
Authority key identifier: 26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
Certificate issuer: /CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Certificate serial: 0199FB7CF63CFFD64A19CE9F6D74061587C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
Manifest number: 040A
Signing time: Sun 19 Oct 2025 08:01:34 +0000
Manifest this update: Sun 19 Oct 2025 08:01:34 +0000
Manifest next update: Mon 20 Oct 2025 08:01:34 +0000
Files and hashes: 1: HRacqG8l3Hf7zAmCVCG0P5KOMS4.roa (hash: POwtAYxNl5+u6y8FOiGiNGLuMGWBIZsQmYKWLa6++Q0=)
2: JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl (hash: GncOZgLEY/xcoNDT1Cu+bWmG2aJru/bzuCPzW/Bim8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:f6:3c:ff:d6:4a:19:ce:9f:6d:74:06:15:87:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26427a260d6d96cc1115ccce8a914affb0e1d16b
Validity
Not Before: Oct 19 08:01:34 2025 GMT
Not After : Oct 20 08:01:34 2025 GMT
Subject: CN=01c54f6a8b1d547fe5a1781b87a088110b7d1926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:2e:d7:60:86:70:b9:6b:1d:99:3c:1d:c4:
be:72:5f:6c:98:04:f6:7b:de:28:1c:fe:89:5d:a0:
5e:7f:fc:18:c5:ca:d6:4a:ca:50:29:1d:1a:3f:09:
ba:60:e2:ca:33:7a:e7:02:31:b7:7a:b5:20:35:ba:
0f:f5:34:21:a4:15:e3:b9:41:aa:be:10:21:db:8f:
e3:65:8b:77:08:29:e1:ab:c2:40:28:fb:18:a4:b0:
d6:c4:18:92:16:b9:d2:5d:92:61:bb:81:bd:4f:c9:
29:98:73:0b:3b:05:6b:5a:53:35:60:a7:e3:4f:3c:
8c:c6:b9:f6:d0:4f:c3:f4:89:f8:4a:e1:25:de:df:
46:b8:90:79:c8:e0:1c:b6:71:ed:cf:fb:94:6c:3b:
bf:57:0c:d0:2c:4a:4f:70:85:c8:06:2e:93:03:a2:
d8:10:02:e2:e4:1d:19:4a:e1:44:a3:a7:17:69:0d:
72:54:27:4c:79:00:f1:46:81:e1:8e:89:56:b1:8f:
8a:2a:6d:a1:64:51:8b:c9:97:c9:f2:97:cb:32:61:
99:56:4a:ef:1d:a6:ed:03:93:6c:6e:f1:2d:c0:b2:
09:5c:df:f8:86:03:6a:69:00:49:3a:4b:5a:d3:c2:
87:3a:2b:82:1d:95:0f:9d:f1:33:09:e2:6f:2a:21:
2a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C5:4F:6A:8B:1D:54:7F:E5:A1:78:1B:87:A0:88:11:0B:7D:19:26
X509v3 Authority Key Identifier:
keyid:26:42:7A:26:0D:6D:96:CC:11:15:CC:CE:8A:91:4A:FF:B0:E1:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f3fdf0-a1a5-45a1-8252-8528e5532c0e/1/JkJ6Jg1tlswRFczOipFK_7Dh0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2a:8e:1a:2a:19:dd:0e:30:fd:1c:86:ef:cf:08:b7:bc:37:
6b:57:67:39:e3:42:e6:5b:2d:ed:b4:42:91:2b:95:c2:17:13:
e9:33:59:55:4c:21:fd:67:17:07:c8:84:b1:a3:36:0d:4d:97:
23:7c:f6:4d:49:01:59:60:02:db:cb:d9:cb:d3:fe:87:ee:10:
26:ec:03:5e:6b:cf:03:39:ec:5c:45:3d:31:07:4c:5e:ec:ea:
a8:0b:79:07:e6:ee:74:72:88:a6:8a:b8:ce:9c:65:0e:f2:4c:
fd:bb:b9:e7:46:f6:20:d0:82:29:1d:fe:24:54:09:43:99:0a:
d5:bd:30:85:7f:3b:57:51:88:d3:78:ac:02:2c:a8:94:13:eb:
67:20:38:ab:51:4b:75:2a:f6:2c:f3:85:cc:15:61:be:7f:5a:
60:36:04:88:c9:7c:7d:fb:47:44:c0:40:dc:c1:33:43:e5:a5:
bf:31:31:ac:4a:45:4d:ee:73:d3:48:20:e8:d1:17:a4:b6:56:
69:ed:d0:a5:bf:a6:90:c3:b6:98:ec:73:5b:19:be:11:ac:36:
94:97:d4:3e:52:13:eb:23:60:13:4e:bc:53:7b:78:59:93:f9:
a9:87:ad:df:b0:1c:50:23:c5:34:7f:fb:c1:05:23:ff:f9:41:
11:85:39:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:29 2025 by rpki-client