Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
File: jHr3naXytomGyDVkYKQ_pC0386Y.mft (raw, json)
Hash identifier: UdDT3l9iPMuiBqw2vD7MAou2aWnmXeHzrjHsw8B7/7U=
Subject key identifier: 53:20:3A:64:6B:CB:B6:3A:8A:EB:31:44:6A:FF:4B:39:2A:DA:0B:10
Authority key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
Certificate issuer: /CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Certificate serial: 0199FC214B84C7B56D1A56BEF3020E7E8AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:04 +0000
Manifest this update: Sun 19 Oct 2025 11:01:04 +0000
Manifest next update: Mon 20 Oct 2025 11:01:04 +0000
Files and hashes: 1: Y6x4X7ml7gBX__XgDy6M9m8y_fM.roa (hash: euuUJ2B09SVhI3IDat0XeMWmWw0q0J+4EoTaRS+kLdQ=)
2: jHr3naXytomGyDVkYKQ_pC0386Y.crl (hash: /37sr1cAY7zMr7TQxscM0Uh3+jpeMgIZ+HgmidMqsqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:4b:84:c7:b5:6d:1a:56:be:f3:02:0e:7e:8a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6
Validity
Not Before: Oct 19 11:01:04 2025 GMT
Not After : Oct 20 11:01:04 2025 GMT
Subject: CN=53203a646bcbb63a8aeb31446aff4b392ada0b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e4:c4:ca:bb:d5:25:fd:e3:75:4a:a1:eb:e2:
ca:90:d7:45:3f:d7:33:53:10:f7:02:9b:30:19:58:
63:21:09:5d:87:ff:89:71:45:10:2d:53:70:9e:9a:
63:bd:cb:cf:56:38:f9:9f:09:f8:23:cd:44:b6:7d:
64:82:18:53:28:ac:45:bd:88:38:91:ed:35:f7:72:
07:eb:d3:0a:dc:3d:f2:e4:e8:9e:a3:e8:17:86:25:
78:90:58:f8:ac:d9:0f:08:87:29:2e:87:be:83:de:
77:5e:45:57:2a:15:d1:70:75:3c:75:30:45:b6:0e:
fc:6a:50:83:4b:87:a1:17:04:75:3d:b0:b3:03:aa:
9c:35:fb:12:96:e9:b3:29:d0:2b:78:d5:a6:21:8e:
81:ea:1b:b5:63:f2:8d:6d:0f:af:07:9e:1f:7a:16:
24:af:18:2c:03:20:ab:27:7d:16:71:8d:4f:48:c1:
5f:21:f5:f9:c7:6e:7a:5b:8b:4c:8a:88:34:3f:b9:
8b:2b:cd:a1:15:15:b5:d2:c5:fb:ef:47:9b:51:06:
f0:f3:86:03:f5:aa:c1:64:c1:3b:5b:e6:cc:2e:d7:
ce:73:e0:c4:1f:65:ea:6f:8d:10:8c:73:16:e5:52:
fb:cb:e4:4e:b1:66:17:66:27:20:35:ec:57:8a:ee:
00:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:20:3A:64:6B:CB:B6:3A:8A:EB:31:44:6A:FF:4B:39:2A:DA:0B:10
X509v3 Authority Key Identifier:
keyid:8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:16:65:ad:ab:0e:bc:5f:32:4a:ed:61:2e:1a:7a:87:6b:35:
dd:34:3b:9a:f2:3c:bb:dd:8e:7c:6a:ad:6d:fa:ad:ca:7f:b2:
c9:72:5b:80:90:35:a5:40:c8:d6:26:9a:ce:0f:57:1f:ff:fa:
39:32:66:47:c1:eb:98:9a:1d:6e:76:50:bd:54:d0:03:a4:db:
14:28:b1:63:b3:ec:90:e2:95:18:f0:6d:08:34:e1:fe:43:1c:
8c:66:9b:ba:07:f5:e4:9e:86:16:35:0b:06:cf:9c:cb:c2:99:
03:54:e9:6d:91:23:07:43:50:83:02:e9:b0:5d:1d:ab:a0:33:
5c:39:48:1a:58:a9:f2:1d:f4:32:5d:c6:a3:98:21:94:fb:14:
3f:87:84:a1:06:d6:bf:44:aa:aa:bc:c5:69:e2:c6:c3:ff:2e:
ef:fc:cf:b0:17:9e:0f:b8:7d:e1:a7:b8:fb:31:7a:b8:6b:0e:
9d:6d:ab:0f:5a:58:72:cc:98:76:70:1d:a6:e6:0a:cf:ec:78:
b4:cf:82:3b:b0:59:eb:af:3e:e9:61:b3:f5:79:0b:a8:b2:6a:
9b:02:f6:1e:f7:9b:b5:03:2e:d7:37:4b:be:4d:99:bf:08:1b:
1e:48:cf:27:28:c3:99:a2:4f:8a:96:77:71:98:03:52:1e:bd:
72:45:f9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:15:15 2025 by rpki-client