Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
File: jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json)
Hash identifier: HVyMNI/MGoTwOPk6jdfT6ox813Zj7hqrrXgmxl5ROr8=
Subject key identifier: CA:1C:E5:E9:32:47:DC:56:59:4B:61:7B:9E:B5:6D:1F:D1:25:20:9C
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Certificate issuer: /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial: 019A0147E355253BAC8D555D4A4BA1AFC183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
Manifest number: 02D9
Signing time: Mon 20 Oct 2025 11:01:19 +0000
Manifest this update: Mon 20 Oct 2025 11:01:19 +0000
Manifest next update: Tue 21 Oct 2025 11:01:19 +0000
Files and hashes: 1: DUQ0ry08WIUw5lopwRc9s2zZ5Ck.roa (hash: 4MMSMGpFYTj64gvYvAI9aZYJdovl51CVqQfi4na/C5A=)
2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: 5AvAVzKIrY/SSIufSeB/7vRlo92upGKo3vMkDTowA+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:e3:55:25:3b:ac:8d:55:5d:4a:4b:a1:af:c1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Validity
Not Before: Oct 20 11:01:19 2025 GMT
Not After : Oct 21 11:01:19 2025 GMT
Subject: CN=ca1ce5e93247dc56594b617b9eb56d1fd125209c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:b4:2b:ff:fb:1d:33:29:aa:70:2b:b9:6c:
2f:1d:98:6b:ba:86:7e:78:d8:c5:a2:13:b8:9c:53:
33:ad:cf:90:a9:bb:8d:f6:bc:4a:b0:be:08:df:44:
76:ac:1b:57:4c:6c:fb:d8:87:25:97:94:55:61:f3:
16:c0:f4:c8:54:20:de:bb:c6:40:91:cd:a5:94:4d:
03:fe:5e:cd:cd:4f:10:f3:1b:55:b6:58:2a:4b:99:
2d:f6:ec:11:f5:e0:a0:aa:44:5f:27:17:30:80:06:
47:9b:d8:1e:18:e8:85:75:8f:32:3f:0c:ce:5c:f8:
42:4d:6d:b9:9c:46:72:8b:b1:02:0a:4d:5f:f3:a4:
45:13:73:99:c1:3f:b7:0d:54:0e:d6:58:ac:bf:1c:
93:d0:a4:de:32:35:b5:24:78:f5:a3:8e:59:47:80:
39:8a:08:5e:05:a8:c8:f0:1e:37:ef:e1:ce:94:fa:
f0:9a:4a:c5:92:a0:cb:ca:08:22:a7:32:2f:e7:3a:
ff:37:a8:93:91:22:d9:b2:fe:3e:1a:4e:52:59:09:
03:bd:37:12:39:e4:ed:b2:91:7e:9f:33:f5:e3:48:
6e:c0:ae:2b:55:d8:c1:7a:97:20:3e:8d:05:0f:d6:
0d:85:f6:a8:2e:70:a9:33:26:00:90:c6:94:ff:bf:
fb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1C:E5:E9:32:47:DC:56:59:4B:61:7B:9E:B5:6D:1F:D1:25:20:9C
X509v3 Authority Key Identifier:
keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:30:a9:b7:d5:22:ae:51:e0:06:96:06:8d:31:22:18:ee:3c:
be:48:42:d3:92:75:18:8f:ca:e9:2c:ab:eb:51:75:e4:d5:ef:
57:8f:39:82:b4:0d:25:3c:02:aa:01:50:bc:da:c5:7f:77:61:
65:05:dd:c4:61:9e:14:b3:6b:d6:31:13:d0:87:58:9d:e7:6f:
a7:66:da:40:18:6c:53:0d:6d:c5:b4:6e:38:be:e0:f0:e6:f0:
85:a6:66:ac:ad:29:4f:1c:87:5c:6f:72:31:fb:90:4e:f8:09:
18:0d:8b:f2:54:45:32:6f:22:f8:3d:8d:ac:01:e5:1a:c6:77:
20:ff:15:e8:b3:40:0c:ab:64:d8:92:de:18:58:f9:ed:ca:0a:
82:bc:5c:e1:54:60:f8:e1:8e:4c:7e:c9:9e:3a:49:07:fc:69:
78:4a:60:8f:df:cb:1f:39:4e:35:48:cf:9b:40:72:3b:e5:88:
ac:d1:78:5d:e7:b4:e3:f8:07:e8:31:2a:d8:98:bf:96:0a:c2:
a5:94:56:46:92:00:09:df:c3:d5:21:3a:4f:34:0d:b4:b3:94:
da:bc:7b:bf:52:ec:eb:3c:21:db:bc:ae:44:9f:24:71:fd:12:
ff:8f:b0:86:40:68:8a:81:22:3f:79:47:b0:a7:97:f8:3c:23:
75:e4:b9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:33:54 2025 by rpki-client