Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
File: jH8yX5quuTqDw554FFxBk31Ya3c.mft (raw, json)
Hash identifier: wukKCn8HlTsVV2tKnokvuPUu3+Zq9IQHH96KGjAaKA8=
Subject key identifier: 20:1B:AF:E5:B7:14:6F:1A:62:4A:FD:97:DF:6E:FB:C0:1F:A3:30:59
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial: 0199FE471E6A85FC47031BF00264C707B954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 21:01:37 +0000
Manifest this update: Sun 19 Oct 2025 21:01:37 +0000
Manifest next update: Mon 20 Oct 2025 21:01:37 +0000
Files and hashes: 1: A8xcoz0CxVsQV59nDwDYQFIr0lo.roa (hash: DYANfqFgGBJIwz26B4ECCOb3ofMn4dBZTXHVwjQaWQ0=)
2: ihKky7iErFMr7G88FOVCnj74bps.roa (hash: j7P5G19jRMsSzlS7Lh1Jjj17xJpONrJFrA53mphipiw=)
3: jH8yX5quuTqDw554FFxBk31Ya3c.crl (hash: 6/t2Ybl+MEkyE5iJW8wOWs2AoFeIBUHzxaJ7JQOqCCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:1e:6a:85:fc:47:03:1b:f0:02:64:c7:07:b9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Validity
Not Before: Oct 19 21:01:37 2025 GMT
Not After : Oct 20 21:01:37 2025 GMT
Subject: CN=201bafe5b7146f1a624afd97df6efbc01fa33059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:83:e9:1c:37:34:3b:b8:97:ad:97:07:bb:
81:ff:0c:f2:72:76:b3:09:2a:7a:ba:1c:ec:01:32:
e1:b5:48:1f:36:2d:14:76:46:1f:2c:b7:aa:f7:4c:
39:aa:64:5c:a1:30:a8:88:59:91:32:97:25:1f:79:
f2:f9:e7:45:78:db:79:c2:09:82:44:14:0b:0e:c3:
c6:76:42:03:66:99:b2:6c:5e:bf:fa:c9:d3:37:9b:
7f:17:81:fd:5b:ed:30:63:cc:f8:95:36:2b:86:d8:
e3:18:a0:a5:e2:a6:fd:32:9d:ac:0a:8f:fe:f6:e5:
aa:34:64:da:4d:69:13:ea:2c:85:04:39:85:a6:9d:
61:95:28:7c:4d:db:11:2d:20:35:4d:e4:12:3b:bd:
d8:37:71:78:73:30:a7:a8:16:35:9e:d4:0e:34:25:
7a:73:f1:8b:9a:58:c9:ac:c5:2f:3f:65:c1:b7:63:
6e:2f:72:ab:94:c6:ad:3a:ef:51:52:38:d8:92:05:
c4:5c:5d:ea:89:10:1b:f3:a8:49:58:20:92:d8:a8:
9f:52:7d:87:1c:b6:6f:5d:e5:4b:d6:b5:2c:e2:71:
49:5f:95:29:f7:c7:13:34:51:20:fe:ed:2e:4e:1c:
9c:32:76:58:f0:a7:f4:b7:9c:c9:92:42:10:3e:ec:
2d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1B:AF:E5:B7:14:6F:1A:62:4A:FD:97:DF:6E:FB:C0:1F:A3:30:59
X509v3 Authority Key Identifier:
keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:78:20:60:f3:5e:a4:05:c0:e8:73:b4:62:dc:32:73:16:e3:
22:83:9d:3e:66:74:1f:96:e3:2d:e4:b6:3c:96:b8:40:d5:a3:
29:02:e4:f4:67:77:e3:ea:ec:6d:35:5b:db:42:a4:dd:b4:3a:
3c:78:f0:39:98:81:c4:ef:c5:4c:49:ec:b4:cc:6f:df:38:48:
48:4c:73:e6:a1:8b:98:88:38:41:d9:91:62:5e:96:46:05:a9:
cd:ee:c5:a1:96:82:e3:b5:91:c9:cc:41:ad:17:ff:e0:01:46:
09:40:0a:1c:5b:2a:8b:36:e8:d8:18:2e:4c:c9:97:82:e0:ea:
e1:a0:4a:14:19:35:31:9c:57:30:fd:d4:15:8b:79:51:bf:63:
7c:6a:9c:09:b6:08:e9:e3:1b:e8:57:4c:e5:11:dc:5b:46:65:
ba:90:b6:6f:e0:21:37:d4:f7:98:60:e0:06:82:6d:e6:bf:00:
bf:fd:3f:07:d1:6a:42:fc:e0:8a:d2:5a:0e:f2:b0:56:64:f4:
84:17:8e:57:97:30:72:62:a2:cb:fe:61:0c:d4:f8:8e:91:83:
cc:f9:e2:df:c5:b3:fd:f8:c9:ae:5e:de:46:08:83:4a:7d:6e:
c0:06:f5:30:78:d9:d1:9f:47:93:3e:a2:46:92:3b:c6:0b:56:
2f:b8:ad:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:02 2025 by rpki-client