Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
File: rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft (raw, json)
Hash identifier: SO9vlr66eVocaTMfaaaDvgcMT+OAvklQOVzhHBBzSzk=
Subject key identifier: B3:3E:11:57:23:5F:06:40:23:3E:55:96:72:2C:FC:40:F2:9E:BA:09
Authority key identifier: AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
Certificate issuer: /CN=ac94a3691064803d863060230a660f2305eec2e7
Certificate serial: 0199FCC64CCDD924C11CFB3531FD48AA1DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 14:01:18 +0000
Manifest this update: Sun 19 Oct 2025 14:01:18 +0000
Manifest next update: Mon 20 Oct 2025 14:01:18 +0000
Files and hashes: 1: IhekhU6m6siADVsydLLUojGt3d4.roa (hash: Ie3OUaBFXbHVHoRv6fa60x6E6g/3rnXK7E53n8a6clg=)
2: rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl (hash: E8Yjsga+xefceZHxoLFsaXkSuS8kBOuLQSIilDP4Iao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:4c:cd:d9:24:c1:1c:fb:35:31:fd:48:aa:1d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac94a3691064803d863060230a660f2305eec2e7
Validity
Not Before: Oct 19 14:01:18 2025 GMT
Not After : Oct 20 14:01:18 2025 GMT
Subject: CN=b33e1157235f0640233e5596722cfc40f29eba09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:06:4a:4a:67:21:e8:dd:27:c8:f8:7d:71:8f:
79:9b:f1:15:4c:2c:de:09:27:48:d8:eb:53:b9:ef:
ed:43:f3:18:00:41:ed:8b:c2:6b:b0:68:0b:57:36:
32:5d:6f:50:69:c0:15:23:70:43:a8:6b:02:ee:34:
0f:88:52:75:be:4b:7f:66:b7:5b:90:cb:a1:e2:f1:
7c:f7:71:04:1b:94:4f:7e:e5:8c:0d:19:f3:3c:71:
73:2e:36:57:fe:b7:a9:8b:3f:91:57:0d:45:8d:63:
e3:f7:6e:f3:ce:fe:f6:eb:e5:c7:3e:31:7c:da:4a:
3f:fb:e6:18:88:15:b6:0b:6c:ce:b4:77:20:50:17:
5f:2f:e2:94:84:46:46:a8:46:27:14:56:94:0d:17:
fa:e7:db:25:12:9a:00:e7:47:e3:9c:b3:96:5e:a3:
c1:b9:0f:92:b9:20:09:3f:0b:61:80:28:bf:85:c4:
17:12:22:f7:5f:61:d6:71:0f:97:23:4d:de:c4:32:
20:f4:c4:80:33:3e:61:40:a0:9c:96:1f:ab:29:c7:
a1:07:25:d2:b2:66:8c:05:a4:1b:3b:d8:b0:e6:e9:
61:1c:5a:ab:61:c2:74:eb:c8:06:70:b0:ab:90:57:
b4:46:41:ca:da:14:80:dc:97:c4:25:6d:98:c2:ed:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3E:11:57:23:5F:06:40:23:3E:55:96:72:2C:FC:40:F2:9E:BA:09
X509v3 Authority Key Identifier:
keyid:AC:94:A3:69:10:64:80:3D:86:30:60:23:0A:66:0F:23:05:EE:C2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJSjaRBkgD2GMGAjCmYPIwXuwuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/30256c-f201-4f48-aca0-dbe6c910bba6/1/rJSjaRBkgD2GMGAjCmYPIwXuwuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:15:02:89:cb:8c:69:f6:17:ce:ed:04:fd:a8:ce:d3:33:63:
7b:01:e5:19:2f:2a:a6:84:78:e2:46:64:61:11:d3:a3:c8:ea:
8a:6e:d6:9a:2d:31:42:7f:f4:2e:69:16:6a:9e:b8:05:14:bb:
02:4d:b1:4f:24:30:a8:78:a6:9f:ef:fd:92:65:6f:be:24:2d:
72:f5:cf:c7:a8:53:ef:be:38:2a:a6:3a:3a:8d:58:a7:ea:1c:
4e:3e:b4:0d:fd:41:af:9c:fd:90:63:fb:42:97:b6:35:a5:58:
9b:35:d4:33:30:99:e5:a8:2a:f6:cf:fc:3a:4b:09:84:92:e8:
08:85:26:ed:66:88:4e:7a:f8:ca:72:ce:fd:ef:55:9a:22:c5:
0d:e8:41:28:89:24:d6:d9:13:6d:14:b6:99:dd:08:4d:f6:6e:
5c:96:41:e5:98:fc:df:25:eb:31:b3:0b:81:40:36:df:cf:be:
52:94:a4:a2:f3:7d:df:10:c5:cd:3e:49:cd:e5:26:8a:98:8c:
6f:86:61:8a:b9:04:c3:2f:44:97:2b:0a:57:2c:4d:57:3f:5f:
21:d7:4b:7e:23:d5:f2:e9:a1:87:e8:cc:21:ea:42:26:40:3f:
82:09:05:70:1c:d4:0e:df:ba:bb:aa:31:32:f0:3b:95:8a:c5:
39:a0:0d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:39 2025 by rpki-client