Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
File: J84emmUiYWqzCw8SPgnTBagjBK8.mft (raw, json)
Hash identifier: 8i4wKlGyIGtyBlXsEO/qQX1s94meuXD3DiiPzqsxo7c=
Subject key identifier: C2:2A:2A:BB:D5:04:D4:7B:9C:19:82:0F:B8:CD:A4:53:48:5E:66:8E
Authority key identifier: 27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
Certificate issuer: /CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Certificate serial: 0199FB7C7601F5A32459F92D3FCFA72C0083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 08:01:01 +0000
Manifest this update: Sun 19 Oct 2025 08:01:01 +0000
Manifest next update: Mon 20 Oct 2025 08:01:01 +0000
Files and hashes: 1: J84emmUiYWqzCw8SPgnTBagjBK8.crl (hash: muEl4BbVumBe6i2lXgnop2Y5/b2TN83BQs8NgId6Zu8=)
2: WgYDhL0i6U8cqNQpr57kES37q38.roa (hash: RKIGt1CKlAHIm7PDdsvYymoW20pcRCPFEmrAdn3vZno=)
3: xfeGCbXD-YF0qFrPXVL_VBgsViY.roa (hash: +QvSz3wl8pHqddA2o6rF3CbvD6JrTHLlFmQPhouhbbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:76:01:f5:a3:24:59:f9:2d:3f:cf:a7:2c:00:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ce1e9a6522616ab30b0f123e09d305a82304af
Validity
Not Before: Oct 19 08:01:01 2025 GMT
Not After : Oct 20 08:01:01 2025 GMT
Subject: CN=c22a2abbd504d47b9c19820fb8cda453485e668e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:58:aa:48:0c:31:d7:d6:74:0a:00:72:0b:
65:ea:4e:fa:0d:63:fd:47:33:02:a7:b6:33:67:ad:
39:13:d8:f3:4f:e1:4f:a1:45:50:06:59:cc:84:09:
d9:70:2c:bd:e1:a9:f2:b6:3e:c9:e2:36:a4:3b:52:
e8:7a:bd:2f:c7:0f:d5:4c:f0:a2:a8:53:56:4d:58:
fb:54:d1:e8:d0:0b:81:01:2c:a6:5c:63:24:31:ee:
33:84:6c:c5:43:7d:51:a5:41:29:31:40:c1:b2:5e:
7a:e0:32:66:3f:2f:3c:7a:51:ac:a9:75:47:3d:79:
8a:80:b1:9b:a6:0d:3b:17:1c:1e:a4:56:ca:36:31:
2f:e2:bb:3b:d6:2f:06:c8:8f:db:03:cf:6f:6a:35:
8b:e7:ee:ec:48:1d:1c:cf:c5:63:bd:8c:70:47:de:
d1:13:ab:2a:4e:2a:19:14:92:5d:1a:4d:fd:56:41:
e8:93:33:cd:ad:63:08:30:4e:98:91:9e:11:44:a4:
bf:ca:82:dd:36:c2:b9:9c:75:e8:b2:2f:75:73:48:
f8:48:12:d7:0f:58:ef:0f:bf:52:8a:70:7e:eb:ba:
d8:c2:06:2f:ee:71:b4:df:87:44:9d:71:4d:7f:8b:
c7:23:57:05:73:ba:99:2b:6e:f2:17:ab:04:42:f8:
98:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2A:2A:BB:D5:04:D4:7B:9C:19:82:0F:B8:CD:A4:53:48:5E:66:8E
X509v3 Authority Key Identifier:
keyid:27:CE:1E:9A:65:22:61:6A:B3:0B:0F:12:3E:09:D3:05:A8:23:04:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J84emmUiYWqzCw8SPgnTBagjBK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9e22a2-9365-4956-8e66-ce4f25ace252/1/J84emmUiYWqzCw8SPgnTBagjBK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:96:8a:73:3f:d6:22:6a:8c:74:4c:c6:2f:2f:af:15:66:51:
59:88:24:9e:2f:a3:8e:e9:01:3a:09:56:8c:37:d9:38:2e:a6:
5a:88:f0:f6:84:0d:78:58:e0:29:90:2a:08:de:63:de:bf:de:
1f:f0:7c:8f:c8:83:99:d6:a4:65:f6:40:15:32:75:28:93:7f:
4f:2f:22:f5:d3:a9:26:cb:1e:1b:fc:5e:ce:a8:63:d4:31:71:
ba:4b:d6:cb:43:ab:d2:ee:32:13:7d:77:40:73:95:d8:d1:93:
8e:ca:90:97:bd:3f:f9:bd:56:61:f3:a0:d5:f7:61:58:15:5b:
87:c5:e3:eb:68:b4:08:57:88:35:c8:35:6f:20:b7:c1:eb:a5:
d9:f8:62:e9:63:2a:e8:b8:03:c7:36:7d:38:5b:69:92:93:2a:
0f:10:ed:bc:a3:6b:86:7d:7b:09:b6:32:d0:38:77:6f:9d:f9:
2a:7d:21:24:51:fa:75:96:b6:f7:f9:2d:da:a9:0f:43:d0:2b:
37:d3:cf:ce:4a:c7:08:ad:44:4b:72:08:a1:c7:18:51:18:1a:
6a:52:d6:10:5e:27:51:27:08:a7:20:19:58:01:ac:3f:ba:88:
e9:b6:ac:09:89:86:c5:5c:92:c9:6a:13:21:de:21:4b:f1:18:
7f:d1:89:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:42 2025 by rpki-client