Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
File: jlKjlU4w5HU-LgCg74FpZtbWDbY.mft (raw, json)
Hash identifier: CY5Pni/7W/8WJ3o3KsJqWRcP3iTstobP9hvsBJhkbGQ=
Subject key identifier: ED:42:8C:D7:6B:7A:3B:50:2F:92:1B:F8:0D:43:FC:F3:BD:70:6E:34
Authority key identifier: 8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
Certificate issuer: /CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Certificate serial: 0199FC216FA0FB7E7396C2AF4E54189C11A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:13 +0000
Manifest this update: Sun 19 Oct 2025 11:01:13 +0000
Manifest next update: Mon 20 Oct 2025 11:01:13 +0000
Files and hashes: 1: fUQfJ9b5u35O0_p-iUp42Os46hA.roa (hash: 0cvi4gkix6mewQd5i5/nO5DzbnNjSl7ne7hKCvJ5puY=)
2: jlKjlU4w5HU-LgCg74FpZtbWDbY.crl (hash: FHOvJ521baYvCTZzhFtpGjNUyJAju+R10yS4vHfqIBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:6f:a0:fb:7e:73:96:c2:af:4e:54:18:9c:11:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e52a3954e30e4753e2e00a0ef816966d6d60db6
Validity
Not Before: Oct 19 11:01:13 2025 GMT
Not After : Oct 20 11:01:13 2025 GMT
Subject: CN=ed428cd76b7a3b502f921bf80d43fcf3bd706e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:c2:61:82:12:4f:06:b9:03:50:d9:5b:2c:
2f:38:59:70:9d:99:ff:13:93:49:38:0a:9c:bd:24:
34:ca:16:df:33:74:b2:6e:f1:e2:1c:7b:d6:12:d0:
ec:f1:9d:95:0d:d3:cb:80:72:40:1f:e8:93:a1:94:
7c:23:df:c0:60:6c:bc:b8:17:ec:15:ae:34:66:b9:
30:b4:79:4c:0a:12:eb:72:14:47:9f:5c:5c:05:5c:
de:86:20:33:2b:12:59:75:3a:ce:e2:a4:d4:53:4f:
a6:c5:aa:af:18:99:a2:5e:f6:34:cd:ee:57:0e:5b:
3a:df:9e:38:48:7d:1a:b2:58:d7:47:f5:7b:42:21:
72:3f:4a:fd:49:2f:b9:f4:11:a9:8e:43:12:eb:83:
13:f2:41:90:cc:d1:0b:9e:af:7e:58:72:1c:5f:4a:
34:5c:f5:12:c3:f2:91:fd:c3:cc:92:c7:74:4e:2c:
49:e5:c1:91:77:a7:07:f3:62:48:65:a1:49:4e:a8:
ec:d0:af:62:4d:26:5f:20:db:70:4c:ea:3e:e0:c9:
a9:2b:e3:7c:4a:08:e8:bd:58:2e:57:e2:c8:18:1a:
4d:7f:6d:76:0a:66:09:59:89:26:c7:d8:cc:4b:03:
99:10:92:2d:d7:9a:3a:1d:30:03:f6:55:a2:c0:02:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:42:8C:D7:6B:7A:3B:50:2F:92:1B:F8:0D:43:FC:F3:BD:70:6E:34
X509v3 Authority Key Identifier:
keyid:8E:52:A3:95:4E:30:E4:75:3E:2E:00:A0:EF:81:69:66:D6:D6:0D:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlKjlU4w5HU-LgCg74FpZtbWDbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1177a2-219c-4b60-b901-b856db33c6c6/1/jlKjlU4w5HU-LgCg74FpZtbWDbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:b3:c9:7d:d2:2a:f3:fb:1c:f5:7a:29:5e:d2:bb:c3:4a:98:
7b:71:57:dc:bf:c0:5e:42:75:e3:06:05:2b:90:07:24:57:27:
e4:5b:ad:33:44:df:1c:35:6d:53:6c:6d:d2:5d:f3:dc:99:ee:
dd:c5:2c:73:6b:43:e3:2d:61:70:d3:09:26:25:8e:be:99:8f:
d9:2a:de:c3:2a:6c:d8:d3:a4:bc:ab:4c:67:88:bd:b7:15:4f:
ad:ba:8d:9a:bb:fc:29:ea:41:87:41:c2:bf:d4:cd:e7:b2:d0:
dd:82:18:8d:51:e7:8f:55:9c:51:6a:cc:eb:22:02:e2:bf:f1:
89:92:75:e0:6c:83:06:8b:e3:fe:37:22:c2:65:e3:be:8d:da:
3a:aa:54:5b:60:c9:f5:c9:dc:b9:e4:23:d7:d0:37:bc:b4:a4:
c8:1c:8f:56:e5:c8:0c:07:b8:98:c4:ec:b1:27:4b:e9:f8:fe:
66:57:a6:63:d3:b6:a6:47:4a:f4:85:a6:b7:ab:54:5c:73:57:
55:13:6e:db:61:4c:11:37:10:f1:82:ce:11:2d:0c:d0:e1:fc:
87:1c:8f:6c:dd:1d:1f:62:09:7d:79:79:30:49:4a:50:d4:0a:
11:8f:3c:38:cb:d1:65:dc:fc:a7:9e:5e:c6:0f:3e:3a:35:9b:
8d:78:94:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:59 2025 by rpki-client