Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
File: jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json)
Hash identifier: h5ZTPfunK0D6Dwrx0JSa6B5zsTwCBausH7cwm8cqNBQ=
Subject key identifier: 83:20:56:6D:79:5C:81:4C:2C:40:49:6F:69:59:14:D8:DF:D6:58:3F
Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
Certificate issuer: /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Certificate serial: 0199FC8F5CFCCBFBFF8F7C74DE2D55616BD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
Manifest number: 023A
Signing time: Sun 19 Oct 2025 13:01:17 +0000
Manifest this update: Sun 19 Oct 2025 13:01:17 +0000
Manifest next update: Mon 20 Oct 2025 13:01:17 +0000
Files and hashes: 1: 8uYJC_uUQib3K90k6tRQR4c4tec.roa (hash: UqH3qyVznQeucD/ZQnnEVXPDpOPJe9Ni19S/sMmHYVQ=)
2: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: USqjXf1DWo4CNDRkBa41JnBM/MRPD4yJrb9gG4xapFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5c:fc:cb:fb:ff:8f:7c:74:de:2d:55:61:6b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Validity
Not Before: Oct 19 13:01:17 2025 GMT
Not After : Oct 20 13:01:17 2025 GMT
Subject: CN=8320566d795c814c2c40496f695914d8dfd6583f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:88:28:1b:80:79:dc:d8:67:33:66:9b:67:27:
03:0c:b0:5a:c7:54:0b:7f:cd:40:fd:04:30:c0:af:
f4:11:a7:ac:81:f3:04:55:95:21:b2:4a:93:32:1b:
5a:cd:a7:e7:9e:fa:b5:d8:28:c1:48:17:4f:d4:6d:
8e:e9:c4:d2:02:50:43:dc:81:59:dc:87:bb:c9:48:
b0:6d:1a:34:2d:51:59:ca:75:41:d7:5f:12:97:2b:
a9:e8:5c:02:82:49:af:bb:27:7f:7d:c8:11:af:e8:
5a:34:2e:c4:ce:fd:6f:10:54:30:49:99:61:20:d3:
6f:58:d8:16:2a:72:21:f0:a3:2a:e2:2c:b1:94:35:
33:5b:80:7b:0a:1c:81:e2:79:98:4d:dd:19:b5:a5:
9c:6f:16:c2:a3:32:62:9e:55:be:62:46:fc:63:bf:
3b:a5:3a:0b:6b:b1:4a:73:0d:d5:90:9d:43:b4:89:
01:e8:b4:13:9b:17:de:20:3d:e6:40:b6:63:25:59:
d5:b0:92:b0:d0:3a:62:05:30:d3:1f:c1:6f:2f:bc:
15:e7:72:dc:9f:e1:a2:e3:47:31:2f:51:13:29:6f:
84:ba:a1:b2:ad:8b:f7:9e:a5:d9:75:48:15:29:68:
93:46:cb:14:c8:87:f8:ed:88:98:b9:9b:eb:ad:22:
e0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:20:56:6D:79:5C:81:4C:2C:40:49:6F:69:59:14:D8:DF:D6:58:3F
X509v3 Authority Key Identifier:
keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:5e:8f:f5:30:71:1d:ca:f2:b8:49:fb:62:6f:4a:3a:04:8b:
1e:63:c6:9e:6c:26:eb:5b:ff:5d:76:f4:80:86:94:cb:a0:af:
6a:d2:b7:c2:34:da:6e:fb:c8:2f:53:57:49:2c:96:70:9a:d7:
e4:64:be:5d:32:89:9d:1a:72:78:59:00:27:e6:c7:59:d0:76:
e2:94:c6:fe:f0:45:8b:2c:8b:46:18:74:79:bc:68:dd:c9:fb:
28:6e:b6:16:47:67:a8:e9:22:2d:a8:04:f9:0b:a7:1b:76:fe:
37:2b:85:8d:db:59:6e:7a:c5:dc:61:4a:d1:2d:9e:66:2b:28:
66:b1:e3:53:81:78:85:72:f2:50:1f:72:6e:05:37:52:54:ba:
42:bb:53:6e:87:7d:21:d0:3a:0b:a8:40:d5:71:2a:38:6c:8f:
56:b7:33:e4:38:b1:fb:c2:cc:1f:ab:e3:d3:aa:c2:58:cb:f6:
cd:e9:92:4c:e5:89:25:92:bc:ff:cb:e5:11:6f:2f:5b:e6:bf:
79:a6:ac:e3:ab:e5:58:52:76:98:d8:25:94:f8:2e:48:a5:e1:
bf:ad:d2:2e:07:2f:82:25:a5:26:a3:5b:da:dd:3f:44:f3:4b:
d6:d1:5e:b7:97:c4:67:18:ce:96:71:05:e0:3e:76:0c:f7:50:
14:15:ef:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:39 2025 by rpki-client