Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
File: jSmNY5cKsDzfv1FPoOjtITEJhfE.mft (raw, json)
Hash identifier: 5KE32JAlIkfPwFjmeozvroNVcXSlxEQenBhfH+x7h7o=
Subject key identifier: CD:88:15:AF:1A:C4:3F:2A:E9:FF:EA:96:9E:40:58:C4:16:8B:99:86
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Certificate issuer: /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial: 0199FFFEB30FB2DEA7AB38DAA7CB2CBEBABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
Manifest number: 0140
Signing time: Mon 20 Oct 2025 05:01:45 +0000
Manifest this update: Mon 20 Oct 2025 05:01:45 +0000
Manifest next update: Tue 21 Oct 2025 05:01:45 +0000
Files and hashes: 1: CfeQnBnwZnkX1exlA_8E_9J0HQY.roa (hash: zgoZGw80fZLZ+LHAElH5ez4Hyw5+xxVl0f9aIIP8B/0=)
2: acQ6lYQTZtPRww8nQnrYG_NCvIc.roa (hash: iGzqEuditXbBC1KhmCdk/H/HOvF/nSKYsyWwNpzoQME=)
3: hYZifB394Q_fg_dn2DSKA_YIZwA.roa (hash: qAci8Pygint2lrSaNgNslvSojUdYL0XMttlZXK/07DQ=)
4: jSmNY5cKsDzfv1FPoOjtITEJhfE.crl (hash: v41SaELZ7HSd2w5728CKSV87tMl09zKHHe6nC8sA9qs=)
5: uIJIuuAnt6td9AqkKzjwQT857_0.roa (hash: A6x0e2CvG+/bTGJF3SyM7Q0bPdqE0EXH0TDiPVe/x1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:b3:0f:b2:de:a7:ab:38:da:a7:cb:2c:be:ba:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Validity
Not Before: Oct 20 05:01:45 2025 GMT
Not After : Oct 21 05:01:45 2025 GMT
Subject: CN=cd8815af1ac43f2ae9ffea969e4058c4168b9986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7f:71:0a:1c:b4:75:3e:05:6e:dd:6d:8f:b2:
cc:06:b1:98:c4:9c:04:49:0d:85:98:aa:48:fd:c6:
d9:38:4a:02:0e:4a:b6:bb:5c:47:0c:6a:55:11:fc:
79:61:bd:48:f9:e7:19:af:87:4a:2f:9a:f2:30:59:
96:cb:d1:0f:69:7e:94:aa:c0:12:34:26:2d:84:65:
b7:48:38:4e:6a:9b:ed:7e:88:6c:08:32:b3:04:71:
59:e2:f6:df:1f:eb:0e:3c:57:5b:0b:e9:54:7b:df:
32:ef:41:ab:8e:ca:da:8b:31:e8:25:a3:f0:12:d6:
5c:8b:47:87:16:9f:47:b4:8a:52:64:33:06:d8:99:
ba:ba:e0:65:ed:65:13:d1:7a:4f:fe:80:3a:35:8b:
53:9f:06:02:54:71:8a:54:44:5a:29:97:25:1c:c7:
98:7e:60:db:3b:4c:b3:be:7a:05:b3:25:0f:1a:c4:
35:1b:b3:a9:14:4b:4e:ea:48:c6:55:2a:c5:ab:02:
94:cc:45:8b:f0:62:5a:f9:38:e9:99:f2:ca:c6:92:
85:4f:bd:d1:d1:5f:e0:4f:b8:57:c8:77:6e:d3:62:
5a:86:1f:ca:3a:72:2f:ec:69:11:00:fe:79:bf:7c:
9f:d1:09:55:29:af:4a:94:5e:7c:61:0c:ec:cf:c6:
62:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:88:15:AF:1A:C4:3F:2A:E9:FF:EA:96:9E:40:58:C4:16:8B:99:86
X509v3 Authority Key Identifier:
keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:71:13:d3:56:6c:7b:19:0a:21:1e:3d:9e:e8:42:b4:46:b5:
88:98:c2:30:e4:81:dc:9c:cd:9d:f8:25:7a:52:a5:8a:2c:45:
76:37:5e:32:d5:d7:42:a1:ce:9c:a8:f6:6c:f9:ab:c6:97:8a:
62:9a:de:9a:4a:f7:73:9c:24:ec:c8:51:c6:3f:4c:12:d2:64:
3c:f6:4d:78:72:b7:7a:5c:16:48:40:cc:df:8c:08:6c:f5:12:
20:d0:6e:07:7c:76:b5:5b:b5:17:59:d3:36:fe:56:a1:04:52:
dd:32:af:43:42:37:6d:9b:f5:4f:e8:34:b5:5b:23:7e:07:2e:
c5:10:a8:86:96:e2:67:1a:4c:68:67:db:2f:8a:85:f9:84:68:
22:4a:7e:cd:4a:bc:0c:0e:01:55:48:ce:f3:2f:de:23:aa:b8:
8c:ec:d3:d6:9a:75:56:0e:d5:31:d9:39:b2:56:21:cf:dc:c6:
31:5f:46:5d:5e:99:9d:dd:6f:98:ec:b8:b5:33:8e:f8:e0:82:
48:8c:c6:46:ea:66:bd:25:44:eb:e0:a6:27:3b:9d:75:9f:39:
c8:d7:88:45:46:83:16:d7:06:34:a1:bc:fc:71:5f:7e:8d:2a:
0d:7f:2e:33:8c:55:d9:3d:4b:b6:8d:da:94:87:db:4e:e5:7e:
f0:51:c7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:51:47 2025 by rpki-client