Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
File: jispgru9Q4t6sawE42wYgPOMato.mft (raw, json)
Hash identifier: Cio4P5KA4a9PkjEQ/KZib1xdiT/G4qAx7b+yMLfFZe4=
Subject key identifier: 12:87:2F:5B:D3:8B:EF:E5:71:2F:E6:27:B0:F1:15:FF:96:22:8A:6B
Authority key identifier: 8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
Certificate issuer: /CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Certificate serial: 0199FD6B59C3842E26A4C560F1B79F789362
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
Manifest number: 12C5
Signing time: Sun 19 Oct 2025 17:01:34 +0000
Manifest this update: Sun 19 Oct 2025 17:01:34 +0000
Manifest next update: Mon 20 Oct 2025 17:01:34 +0000
Files and hashes: 1: CS45ol94FSh_Y9jvauVA2QKhr9Y.roa (hash: t7+G1e511BkNswCIOIpGI7nXenT7KEeztvYMCep9OgI=)
2: jispgru9Q4t6sawE42wYgPOMato.crl (hash: fF0s+PJcrf0FAfl19XNH3najV3k7xr/jh57kgpdBmxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:59:c3:84:2e:26:a4:c5:60:f1:b7:9f:78:93:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2b2982bbbd438b7ab1ac04e36c1880f38c6ada
Validity
Not Before: Oct 19 17:01:34 2025 GMT
Not After : Oct 20 17:01:34 2025 GMT
Subject: CN=12872f5bd38befe5712fe627b0f115ff96228a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:7a:45:e6:ad:3e:bd:7c:49:de:8a:24:e3:
a2:0f:a9:56:93:3b:8c:02:06:e8:e0:e5:88:8c:fb:
4c:70:5d:72:fc:43:77:b9:6a:a7:d6:1d:34:10:07:
c2:e1:74:3d:d8:d2:76:b3:41:43:d5:c9:ae:e2:cb:
bf:50:e5:47:38:92:3e:39:65:1a:2a:33:44:38:99:
e2:91:42:30:a7:85:44:29:df:91:b5:ac:98:9c:40:
76:b0:74:83:ef:f9:6e:81:c5:11:d0:3c:8c:30:93:
ef:a5:41:7b:28:ca:99:0e:51:cf:49:1c:24:93:fa:
3f:b9:7c:45:9a:0e:a2:62:52:48:46:6a:26:a7:68:
48:f8:4a:c6:cf:e6:4f:1b:0e:eb:7c:e5:4f:df:ab:
37:a1:b6:45:c9:c5:bb:20:65:82:15:f2:36:36:e4:
b9:3c:62:44:c1:2c:b5:38:b4:90:c1:e2:a1:3f:16:
e4:c8:b0:01:d4:6d:f4:3a:d6:74:f2:2d:d7:45:58:
e3:00:db:ee:50:e2:44:01:55:46:a3:ce:3d:7d:e0:
67:32:4a:d9:27:c1:dd:47:37:a7:79:d4:10:fa:a2:
f1:16:ea:c0:af:a5:eb:03:ca:ab:9e:0f:ee:4f:39:
37:3a:cc:6e:cb:29:a9:02:d6:ea:b3:41:63:f5:98:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:87:2F:5B:D3:8B:EF:E5:71:2F:E6:27:B0:F1:15:FF:96:22:8A:6B
X509v3 Authority Key Identifier:
keyid:8E:2B:29:82:BB:BD:43:8B:7A:B1:AC:04:E3:6C:18:80:F3:8C:6A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jispgru9Q4t6sawE42wYgPOMato.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/703df2-b8b4-48f7-9301-de81c7c1e754/1/jispgru9Q4t6sawE42wYgPOMato.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:27:dc:ad:22:0f:0c:af:d6:ed:ca:ef:c8:78:a5:67:1f:a0:
d7:70:0c:1d:39:14:06:82:a7:20:20:fb:15:92:29:05:af:a6:
99:34:5c:e0:86:87:94:1f:e4:8c:f8:7e:e5:15:56:19:b0:de:
5c:84:f5:f6:97:e3:32:9f:de:e6:37:c4:6d:8c:27:0c:29:77:
c6:9e:81:68:e9:a7:ef:0b:00:20:ac:a1:01:e3:f0:69:4a:0b:
16:1d:95:ba:b0:33:11:69:48:8e:41:17:f7:f3:85:bc:b1:a1:
de:8f:7f:8e:73:e1:40:d2:75:cf:c2:7c:b2:8a:67:d6:f9:21:
cc:66:08:f2:60:08:5b:80:e6:e5:7a:3b:11:c1:bd:d8:ca:38:
14:95:0d:6e:74:ca:5a:a2:36:5f:39:3c:c1:05:e2:bc:38:f8:
1e:33:df:7d:ca:e6:a6:bc:84:00:26:54:3b:d9:25:ec:c5:ac:
ce:dd:59:ca:1a:59:9e:7e:cf:ab:b0:64:7b:5f:e9:d0:ed:ea:
12:a1:ae:f7:f6:37:86:b3:86:23:3b:26:05:43:67:dd:f9:9f:
f1:77:90:a4:71:31:2d:e7:96:b5:c1:a1:ba:03:a3:d8:70:19:
47:ff:8e:a8:12:4f:e1:29:c1:57:0e:47:be:74:2f:03:f5:ab:
4f:0b:1e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:46 2025 by rpki-client