Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
File: JijMfwbqCaJH9r6enldMTze06bY.mft (raw, json)
Hash identifier: R5n/AFMgmoIG9NDOLjl6qt7kOkOO0MYmiekTj2p2jp4=
Subject key identifier: 24:79:08:9D:EB:8E:1D:F2:07:1D:9E:2A:08:3C:FB:B6:D2:D8:DC:57
Authority key identifier: 26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
Certificate issuer: /CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Certificate serial: 019A29672C6AAD9A04349EEEBD7BD06B36A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
Manifest number: 16F8
Signing time: Tue 28 Oct 2025 06:00:18 +0000
Manifest this update: Tue 28 Oct 2025 06:00:18 +0000
Manifest next update: Wed 29 Oct 2025 06:00:18 +0000
Files and hashes: 1: JijMfwbqCaJH9r6enldMTze06bY.crl (hash: C/DOKSykX5WNfszN1MIK4SHj20N9W+GWusd0ObzKBQo=)
2: hwIYyALOwoBN5zxSDcMvXKZuEhU.roa (hash: UgZLdR3szHuIjLGcrVjUdsIwYk5m69uSb6Pgyz7tXrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:29:67:2c:6a:ad:9a:04:34:9e:ee:bd:7b:d0:6b:36:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6
Validity
Not Before: Oct 28 06:00:18 2025 GMT
Not After : Oct 29 06:00:18 2025 GMT
Subject: CN=2479089deb8e1df2071d9e2a083cfbb6d2d8dc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:3b:17:19:46:d0:17:01:2f:2b:c3:43:26:
e6:bb:ee:35:b7:48:20:39:97:31:c7:53:0a:b5:19:
75:81:b1:1e:c0:76:78:17:f0:89:3d:aa:a3:08:36:
a0:e1:5e:ed:17:cb:3d:3d:29:e0:3e:a1:df:5b:4c:
a9:85:42:7a:0b:0f:2a:7d:81:d3:8b:ed:85:be:da:
ed:6a:3b:e3:86:23:e6:ee:28:30:68:9d:da:d3:17:
0a:3f:41:43:81:c5:f5:ac:38:39:8e:db:e4:50:39:
98:30:18:49:40:57:f3:60:a6:a1:3a:2b:01:9d:87:
c8:8b:6f:86:71:c6:7a:14:d9:2e:66:ab:24:14:42:
a3:f3:3f:53:5c:b5:a4:67:39:7d:64:8e:2a:b8:28:
4c:2e:59:b9:9c:db:0d:25:5f:79:1d:42:2c:38:65:
ab:b3:1f:15:52:e2:2e:c8:2b:8d:35:11:8a:f0:54:
14:c6:39:3c:5a:16:ed:62:40:79:24:11:06:e2:a4:
ec:fa:cd:85:e1:b9:f9:30:43:ad:da:54:4c:b9:82:
a6:99:4e:c3:72:b4:32:8c:86:7e:c1:fd:0f:8b:aa:
ed:ed:d9:ac:37:e7:d7:e7:85:27:d6:87:5b:52:31:
21:af:e6:db:e6:2c:6a:f0:55:fd:6c:26:cd:af:b2:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:79:08:9D:EB:8E:1D:F2:07:1D:9E:2A:08:3C:FB:B6:D2:D8:DC:57
X509v3 Authority Key Identifier:
keyid:26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:eb:ad:51:3c:cf:0e:1f:45:30:60:4b:b2:9b:67:31:9f:b5:
3d:23:64:9a:22:14:88:cd:e6:78:14:f3:cd:14:5a:4e:84:ec:
59:2d:92:89:61:e8:65:14:94:5b:46:a5:74:ba:d4:25:a8:c3:
86:3c:ad:6e:a8:4d:e7:25:33:86:db:27:ac:1d:c7:0b:68:32:
94:52:a5:24:f0:32:9e:77:b6:4b:cf:85:87:52:8a:cc:e6:9f:
1c:6d:2b:09:c8:08:9e:4b:6c:4b:0f:f3:61:de:de:94:e6:85:
30:a9:1c:40:83:78:49:c3:f3:6c:85:21:c2:8e:b8:1b:88:04:
83:a6:63:73:39:08:f6:c7:47:1f:0d:f5:e9:5b:27:9d:6b:d4:
2f:3d:70:7c:a4:97:8e:bf:85:68:ad:52:11:13:34:fc:23:94:
65:65:f4:c8:d4:dc:f7:e4:18:50:9b:01:cd:9a:9b:c1:23:0a:
28:ff:a8:d3:29:59:4f:3b:89:d5:59:4a:e3:5a:6c:d4:12:bc:
47:ed:fc:13:43:77:6d:89:22:44:f2:21:d1:4e:be:6e:4c:32:
6e:ca:42:4f:3c:a8:90:d4:f0:0a:b8:69:89:af:72:d2:54:b6:
89:bb:ea:e6:84:15:7f:70:84:41:33:6f:12:73:69:77:0f:80:
47:f2:b2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 10:50:54 2025 by rpki-client