Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
File: j_3661qU6wJ-yDivUw88ELObHNk.mft (raw, json)
Hash identifier: IKwwEcb9gAgZRgx5IDR8rawG/NkEejNC9WiTQnpk1Zw=
Subject key identifier: 53:93:91:AF:DA:B0:F8:A9:89:7B:91:E9:19:42:0F:AD:DA:48:88:69
Authority key identifier: 8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
Certificate issuer: /CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Certificate serial: 0199FB7CCC3F542904479F2DAF31FC1B08AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
Manifest number: 14F9
Signing time: Sun 19 Oct 2025 08:01:23 +0000
Manifest this update: Sun 19 Oct 2025 08:01:23 +0000
Manifest next update: Mon 20 Oct 2025 08:01:23 +0000
Files and hashes: 1: hH1lu6qi54xeYgPUuzVlSLVdXOk.roa (hash: 9Lqd0U++MW4wXcTAm0AGtBobzDUdjZXw+rDwnRqe5sI=)
2: j_3661qU6wJ-yDivUw88ELObHNk.crl (hash: NZLP2E7UMxZ4+xuKZlgGFR4qwHiY2OCJDMKorrYAW3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:cc:3f:54:29:04:47:9f:2d:af:31:fc:1b:08:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ffdfaeb5a94eb027ec838af530f3c10b39b1cd9
Validity
Not Before: Oct 19 08:01:23 2025 GMT
Not After : Oct 20 08:01:23 2025 GMT
Subject: CN=539391afdab0f8a9897b91e919420fadda488869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:d7:7e:bf:65:be:1a:44:84:89:56:83:5e:
f6:b8:a1:d4:25:85:5b:8c:95:78:8e:89:f8:c3:0f:
32:df:b6:dc:89:53:3c:6d:f8:9a:bf:dd:38:bc:e1:
e2:a2:bd:d0:16:a3:26:42:d4:72:e0:af:cf:ec:cb:
bd:a3:2f:bc:ca:85:86:a6:0b:5f:23:ec:28:b2:81:
43:2a:12:03:5a:90:ed:d6:df:50:0b:de:5b:9f:83:
c9:fa:fb:4b:02:3d:97:69:7f:8b:60:5f:7c:ca:f7:
7b:18:a8:e8:b0:75:5d:85:d8:4a:af:2f:fb:91:8b:
5f:f0:18:be:91:ff:b6:6b:45:18:9d:0e:4b:6a:a9:
33:b4:10:6a:0c:84:b8:f0:78:e6:d4:92:0d:35:26:
9d:14:d1:f4:e8:b1:a7:56:ca:a2:92:03:1d:8a:39:
74:1d:74:e6:85:9f:0a:99:d5:8a:36:44:78:21:31:
a0:95:82:2a:5e:e2:c2:37:38:8a:67:1e:23:50:31:
94:34:c9:1e:cd:92:09:55:82:07:d1:c9:88:6e:49:
ad:26:9d:95:d4:4c:b2:b5:c5:f6:74:65:fb:18:c2:
f3:67:bf:f8:1d:d9:9d:d1:7e:f0:35:29:93:d2:9a:
bc:73:9d:a9:80:e0:a4:51:cc:89:5f:6b:42:bd:b3:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:93:91:AF:DA:B0:F8:A9:89:7B:91:E9:19:42:0F:AD:DA:48:88:69
X509v3 Authority Key Identifier:
keyid:8F:FD:FA:EB:5A:94:EB:02:7E:C8:38:AF:53:0F:3C:10:B3:9B:1C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j_3661qU6wJ-yDivUw88ELObHNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/adcff5-b2b1-48df-b756-6fb4bee99e63/1/j_3661qU6wJ-yDivUw88ELObHNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:83:33:8a:c0:3e:62:43:b0:8b:0b:ad:db:4f:56:2f:3d:33:
7c:d9:0f:0d:e0:f6:0d:72:b1:53:b4:41:49:cd:d6:fc:7c:12:
0f:f0:b6:c5:68:6a:a1:7d:7b:37:52:02:ff:39:bb:e2:1e:43:
9e:27:70:5c:5a:14:59:79:2f:a2:98:6c:00:09:5a:a4:74:de:
ec:cd:93:f3:4a:3d:f1:30:30:ad:ce:68:fc:bc:9c:8d:3f:09:
b6:f8:ff:1b:f3:9a:aa:ad:a6:91:3c:b5:45:0d:d5:bb:cf:b2:
6c:ae:04:53:d2:1c:32:12:3d:a4:c0:d7:01:cc:7f:0c:e5:11:
87:ce:7b:7f:d8:65:3d:1e:c2:33:a6:f7:de:5d:7a:4d:8a:fa:
d4:0c:b3:db:60:57:42:54:d0:68:2f:23:24:af:dd:c7:cb:fe:
17:b0:8c:97:71:d0:33:93:7b:54:af:9d:2a:b6:d3:f3:c9:b4:
b5:76:92:91:1d:2a:d2:c3:ca:1d:e7:f5:04:85:85:d2:ad:e2:
f2:c6:59:9e:89:1e:05:5e:9d:ec:84:90:4f:e1:2e:af:c4:f4:
a9:3d:be:24:f8:c1:19:85:04:ed:a3:fc:41:bf:74:56:3b:8d:
c4:de:b1:16:44:66:c9:7a:dc:d3:98:2a:d1:4a:45:91:c7:1a:
46:1b:1b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:29 2025 by rpki-client