Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
File: jnADx8Z3zDvWhgMXaZKj69AvRss.mft (raw, json)
Hash identifier: HGazDzzIWxoTZKuCW8RAw64qwukk6suG8HzyqK8Gcfg=
Subject key identifier: E5:44:33:0C:11:EB:98:C0:95:A0:7C:B1:23:C9:CA:EE:86:6D:E4:E3
Authority key identifier: 8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
Certificate issuer: /CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Certificate serial: 019A1CF5644B2E910766B33E8931FF8BE0D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
Manifest number: 09E4
Signing time: Sat 25 Oct 2025 20:00:35 +0000
Manifest this update: Sat 25 Oct 2025 20:00:35 +0000
Manifest next update: Sun 26 Oct 2025 20:00:35 +0000
Files and hashes: 1: Ai-_WODQT5gjGDaQ6CXKPNkmTMg.roa (hash: WNvkuBtCgqvZC4hHmC3CVdy2TgQFB8OfoCsx9x6UKkg=)
2: jnADx8Z3zDvWhgMXaZKj69AvRss.crl (hash: hMimsjpGJMoZFWlnr89zKaZ9zRueiArVYZJFD2gzCGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:f5:64:4b:2e:91:07:66:b3:3e:89:31:ff:8b:e0:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7003c7c677cc3bd68603176992a3ebd02f46cb
Validity
Not Before: Oct 25 20:00:35 2025 GMT
Not After : Oct 26 20:00:35 2025 GMT
Subject: CN=e544330c11eb98c095a07cb123c9caee866de4e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:80:a6:af:9c:97:52:4e:ce:92:48:61:f7:
00:92:df:81:f6:9c:a9:fe:9b:ad:60:ca:a1:31:10:
bf:84:1d:74:ab:10:82:51:67:f1:46:f5:52:00:13:
59:be:fd:21:55:e2:90:bf:57:ee:4a:00:70:d6:84:
98:65:1a:26:b0:87:cf:20:2f:fb:24:79:a4:05:58:
f5:ee:77:20:51:77:13:a5:6a:0d:99:ec:8c:ad:4e:
af:cc:cc:d3:6f:c7:d7:10:ce:c1:18:a6:98:f9:2e:
1c:c2:a9:b2:89:93:13:0e:cb:37:6d:cb:c0:db:f6:
f6:42:f2:3a:72:d0:ae:14:42:83:59:5c:a3:74:71:
d4:f1:c7:55:f6:47:7c:30:3d:06:db:d2:ca:18:d8:
7f:58:ce:06:35:5c:9e:01:a0:be:38:64:f3:ef:00:
4d:c2:9a:f8:ac:34:cf:fd:01:b7:18:fb:cb:49:50:
29:02:66:ff:c6:9e:fc:a8:5c:0a:b5:9b:6c:8d:fd:
89:87:ea:35:76:c7:4f:5c:82:13:cd:80:69:46:10:
0a:56:49:5e:be:04:24:f4:4a:1b:f2:52:c2:51:37:
10:27:1f:d7:a8:f4:7e:91:78:7d:05:51:68:ca:a4:
d5:26:56:f2:30:87:b6:db:92:b3:ac:6a:98:c2:09:
e8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:44:33:0C:11:EB:98:C0:95:A0:7C:B1:23:C9:CA:EE:86:6D:E4:E3
X509v3 Authority Key Identifier:
keyid:8E:70:03:C7:C6:77:CC:3B:D6:86:03:17:69:92:A3:EB:D0:2F:46:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnADx8Z3zDvWhgMXaZKj69AvRss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8d3419-78e0-4176-8213-f17f0056108c/1/jnADx8Z3zDvWhgMXaZKj69AvRss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e6:50:54:09:c2:2f:32:37:34:da:bb:7b:59:d6:e4:90:1b:
eb:42:ca:dc:7f:52:11:2e:0b:4a:97:e3:67:61:f8:6a:b6:68:
4a:ee:ea:f6:3c:a1:e8:21:87:bf:3d:b0:71:a2:00:41:de:a6:
e7:eb:e1:0f:90:6c:58:a4:e6:5c:97:d5:5c:d4:a6:ca:ba:97:
3b:e2:ef:39:1e:bf:75:d5:f6:35:eb:00:0b:21:02:c5:c0:09:
58:42:41:ac:cf:32:ff:7a:92:ad:df:43:ce:c6:97:ed:06:1c:
f6:98:34:6f:21:d9:c5:97:70:68:f1:60:64:fb:97:91:50:11:
60:17:22:8e:17:a4:6c:f5:d0:53:e0:7b:9a:bd:5b:55:27:a7:
b5:09:d2:2d:59:7c:92:af:f9:56:f1:ba:90:9d:b4:d0:70:ec:
fe:84:67:c3:3c:3b:1e:2e:ba:06:2c:4e:56:9a:76:b3:e9:be:
c9:7f:ce:3f:f5:a8:f9:45:c3:bf:47:9e:12:4b:af:f7:31:c3:
29:3c:10:8f:31:55:5e:ce:ac:1c:0c:6e:02:70:08:0e:b2:90:
82:17:20:9c:64:6b:79:1d:21:1a:ac:9d:ca:88:33:a7:5e:71:
73:9a:a0:a5:de:28:ba:42:b2:5f:92:8b:12:da:5b:6b:ee:d0:
7e:70:12:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:33:25 2025 by rpki-client