Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
File: Jg8Qh8zQbmtHZDxOvni8z1885dI.mft (raw, json)
Hash identifier: JEfCW9OqaUBpdXu9p7eDr9r7eCXattO9zWc5atkqPfE=
Subject key identifier: DE:35:E4:7E:C2:B4:3C:A7:1E:B5:FF:1F:90:19:EF:29:54:32:E3:77
Authority key identifier: 26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
Certificate issuer: /CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Certificate serial: 019A2289B416D7023008F9F2EBA2FEC8A1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
Manifest number: 016D
Signing time: Sun 26 Oct 2025 22:00:41 +0000
Manifest this update: Sun 26 Oct 2025 22:00:41 +0000
Manifest next update: Mon 27 Oct 2025 22:00:41 +0000
Files and hashes: 1: Jg8Qh8zQbmtHZDxOvni8z1885dI.crl (hash: Hsqi92NWfz6Ry6TLvEehF0x97qC5CYwPYIJjp2jU4/M=)
2: METktZ2idAiZeDz9hpktU55-5Jw.roa (hash: nKbFLY3xUJE/BDnG472RqLje6LdE93p8++xFwpMJxhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:b4:16:d7:02:30:08:f9:f2:eb:a2:fe:c8:a1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260f1087ccd06e6b47643c4ebe78bccf5f3ce5d2
Validity
Not Before: Oct 26 22:00:41 2025 GMT
Not After : Oct 27 22:00:41 2025 GMT
Subject: CN=de35e47ec2b43ca71eb5ff1f9019ef295432e377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bb:00:d0:66:13:52:89:16:16:96:54:64:84:
7f:20:de:d7:a6:81:db:2e:00:e0:cf:42:37:b9:3d:
98:41:a9:27:3b:f6:c0:fa:a5:12:0d:fc:9d:79:ef:
b5:e4:52:5d:b6:ab:67:86:d7:a4:ac:20:fe:91:ac:
8e:16:a7:8a:f0:5b:19:8f:97:db:49:e6:8f:11:23:
fa:a5:94:b7:fb:65:08:cb:86:6f:6a:3e:b0:d7:0a:
50:bd:44:3c:97:21:74:2d:4d:2a:4c:e2:15:e2:3b:
30:59:ba:a9:c5:5f:02:c3:2f:9a:15:42:74:42:2d:
53:6c:fb:8c:cb:61:ff:44:4c:91:e1:44:3e:6c:55:
3b:fd:21:95:85:c0:f5:66:64:9f:0f:b5:73:8a:7e:
17:46:ae:b6:7b:57:fa:ff:2f:4b:7f:53:8b:bb:e3:
10:c9:15:63:23:1e:3b:4a:71:43:cc:ca:aa:7f:41:
fc:67:8c:34:29:97:65:90:8a:01:16:a9:95:80:36:
ab:2b:e6:40:68:b0:7f:7e:7c:ea:eb:e2:55:ff:7f:
ba:10:30:2f:7a:fd:1e:be:0f:bd:33:b0:f1:79:19:
65:7e:ad:b6:86:7b:6c:d8:2a:7d:a1:1e:51:29:86:
ff:3d:3d:9c:33:05:59:a8:d6:92:df:92:d0:e4:69:
5a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:35:E4:7E:C2:B4:3C:A7:1E:B5:FF:1F:90:19:EF:29:54:32:E3:77
X509v3 Authority Key Identifier:
keyid:26:0F:10:87:CC:D0:6E:6B:47:64:3C:4E:BE:78:BC:CF:5F:3C:E5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg8Qh8zQbmtHZDxOvni8z1885dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/853682-3035-44fb-b7ae-19b12a955065/1/Jg8Qh8zQbmtHZDxOvni8z1885dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f5:72:aa:83:fa:6f:07:da:b0:68:99:00:e2:9c:7a:0d:76:
46:5c:06:78:aa:8b:2c:7c:c0:db:2a:8b:5a:8a:1c:57:e9:21:
fa:40:49:4e:2b:ef:7e:be:12:ef:fe:e6:f9:85:75:48:95:a7:
73:55:11:00:3c:4e:b6:24:0c:6d:16:36:bc:93:c1:c8:79:6c:
fd:79:eb:bd:25:5b:be:ac:8e:1b:85:77:c5:de:7e:83:d9:4a:
2c:26:9f:35:1e:98:20:63:fc:ac:33:77:4b:6c:b8:87:6d:4f:
ac:b8:64:be:98:9d:13:29:77:58:93:7a:b7:35:85:e2:32:7f:
43:a9:1d:c4:d6:b6:07:57:e4:7c:58:a9:15:76:b6:24:95:40:
1e:fb:af:a5:34:63:35:fc:98:52:e1:24:3e:c2:3c:3b:a6:9e:
8a:0d:fd:c9:a3:52:db:55:e8:e0:86:58:5a:62:92:d2:f7:00:
b2:73:df:f1:67:ff:46:ac:51:84:0a:2e:99:44:63:0e:95:5f:
e8:32:ec:df:1d:1e:10:64:68:9e:08:10:5a:71:2f:57:1d:d1:
f3:fd:d3:a9:10:90:ae:be:79:1e:36:e8:86:72:99:60:7e:db:
7e:9c:d5:e2:70:42:7d:30:ff:2c:cf:75:db:dc:25:03:3e:fb:
19:3b:69:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:54:57 2025 by rpki-client