Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
File: jxdSJfOGzpgBGfaYhPm-fGorOzM.mft (raw, json)
Hash identifier: UnXMr514A5ZWRgzo0D/QvIrrVx9qk/rOVOhsi3llyKE=
Subject key identifier: E2:A5:60:F0:13:A0:38:9D:70:7F:48:10:10:DE:53:BB:CA:A7:69:E5
Authority key identifier: 8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
Certificate issuer: /CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Certificate serial: 0199FC218BDED5BE73FCD54090190C7B53A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 11:01:20 +0000
Manifest this update: Sun 19 Oct 2025 11:01:20 +0000
Manifest next update: Mon 20 Oct 2025 11:01:20 +0000
Files and hashes: 1: 89EQQCo6Tx4ACaGk_JyA4-a5SnA.roa (hash: DER2tNvuAXp0PR1aSNW92ooYvtdX7oI6GzQVCz2YBFM=)
2: jxdSJfOGzpgBGfaYhPm-fGorOzM.crl (hash: VkQ4kF6d1+8O6rdd03vuOUqhB2HEj5lhxrziVfF8gWY=)
3: wqj7UB7atlo4UtptagO8D4QVpv4.roa (hash: ylN4r0wdJFKjI8FqYNMjzdJ19nbuA10o9E8/faFnnKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8b:de:d5:be:73:fc:d5:40:90:19:0c:7b:53:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f175225f386ce980119f69884f9be7c6a2b3b33
Validity
Not Before: Oct 19 11:01:20 2025 GMT
Not After : Oct 20 11:01:20 2025 GMT
Subject: CN=e2a560f013a0389d707f481010de53bbcaa769e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:71:a8:57:66:e3:0a:5b:dc:bc:5f:70:34:
5c:fa:38:90:11:90:f5:c2:d8:30:43:97:be:86:40:
80:f3:d8:b6:36:74:de:89:61:4b:70:d4:16:c7:24:
9b:de:b3:5a:43:5c:e5:67:ce:a8:bc:73:5c:30:56:
28:28:55:c1:48:61:72:7e:29:89:2d:86:de:51:d4:
7e:0d:9b:64:b8:c8:ca:0e:9a:33:9d:50:06:ca:79:
a5:c6:32:b5:d5:36:1f:c4:25:55:0c:77:a3:55:e5:
8c:84:41:c1:44:39:08:6c:fa:34:a2:62:94:9c:4e:
d8:f2:bf:1e:19:b5:42:c1:d6:2f:7b:05:6f:08:fe:
89:90:86:87:92:d2:60:b4:bb:fe:4c:34:93:ca:f6:
71:c2:33:be:da:a2:d9:68:fa:ca:5f:fa:c5:dd:e9:
17:f8:14:39:18:a3:b8:d7:ab:ab:71:b2:f1:af:3b:
99:09:2e:2e:e7:66:48:4a:51:5c:c0:a0:af:88:95:
16:f0:2a:50:ec:ab:a4:b8:86:3f:75:e5:db:84:57:
bc:5f:56:44:a0:73:27:74:cd:c2:0d:d8:e5:cb:6f:
63:db:79:94:40:61:c3:b1:45:c4:6d:22:ed:78:74:
6b:89:b9:e1:54:7e:46:d0:88:61:7a:bd:81:31:28:
e8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A5:60:F0:13:A0:38:9D:70:7F:48:10:10:DE:53:BB:CA:A7:69:E5
X509v3 Authority Key Identifier:
keyid:8F:17:52:25:F3:86:CE:98:01:19:F6:98:84:F9:BE:7C:6A:2B:3B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxdSJfOGzpgBGfaYhPm-fGorOzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5ec7ca-a402-4c5d-a1b7-61b772d751ec/1/jxdSJfOGzpgBGfaYhPm-fGorOzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e6:8a:58:d4:96:4c:76:87:95:31:19:95:58:d1:61:4b:5f:
7c:cc:e3:96:50:34:bc:0e:ad:8d:03:f1:19:38:31:2c:de:a0:
90:00:d3:f9:19:87:1d:c7:53:78:d0:a1:fa:37:ec:ac:ec:00:
6a:d0:4d:e9:c6:09:59:1a:74:25:0f:9e:23:e5:72:6b:6c:13:
06:55:db:dd:f8:25:7b:ca:88:25:f9:18:61:cf:b8:f8:cb:4e:
f1:df:83:c5:c2:55:bd:6b:3f:94:0a:bf:61:55:98:a7:60:eb:
f3:f2:03:88:3a:93:6b:14:3d:09:21:df:50:10:e8:c6:23:9e:
3e:86:f5:00:ba:9e:a3:8f:9d:92:7a:1c:12:5d:8a:82:6f:41:
05:74:b9:8a:69:55:9e:e8:4c:86:56:60:90:b2:ed:61:b9:51:
b8:17:ea:1d:e8:98:2e:35:07:50:a1:47:81:d6:e0:8a:c7:43:
2d:63:2a:2a:da:f7:1b:d3:0f:35:9a:6b:5d:e1:cd:7c:1e:45:
b7:55:e8:b9:40:cd:c7:1b:de:e1:e9:e2:c3:3b:44:19:6e:72:
32:cc:84:75:c9:20:1a:44:28:ab:1f:c7:66:40:05:4e:95:02:
cf:60:09:d3:9c:21:a6:e3:7a:5a:94:91:61:c8:5f:f1:22:4b:
5c:14:76:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:29 2025 by rpki-client