Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
File: jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft (raw, json)
Hash identifier: zoY4Oc31RBCwmcwI5pHefJ1IG4Qe64pVPqo+jRKEUXY=
Subject key identifier: 64:F1:EC:48:E8:6C:68:C7:5A:D4:7B:40:B1:D5:79:00:89:C8:A5:C1
Authority key identifier: 8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
Certificate issuer: /CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Certificate serial: 019A1986966C8CAB90A6B40D92128CFDEF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
Manifest number: 16F6
Signing time: Sat 25 Oct 2025 04:00:41 +0000
Manifest this update: Sat 25 Oct 2025 04:00:41 +0000
Manifest next update: Sun 26 Oct 2025 04:00:41 +0000
Files and hashes: 1: T1NphBpxfH2bIKCDktHdRZTHIcY.roa (hash: jIDQlaKJTEZfvbg4vcsOnliaPcSJWC3wo/0K3CkIb7o=)
2: jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl (hash: zlQN6xGR+3STE63avAeSW2KrQLQd9KBGS9VGzlpuvVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:86:96:6c:8c:ab:90:a6:b4:0d:92:12:8c:fd:ef:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8db49baf17f06c364a00f8e64c891c53729f7a2f
Validity
Not Before: Oct 25 04:00:41 2025 GMT
Not After : Oct 26 04:00:41 2025 GMT
Subject: CN=64f1ec48e86c68c75ad47b40b1d5790089c8a5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:4d:de:ca:9c:32:24:54:77:ee:ef:8f:a8:
5e:ef:36:63:b4:22:78:96:86:d6:dd:25:3c:31:3e:
37:f1:60:56:11:61:4a:f1:5c:b1:99:d2:6f:9a:dd:
0e:dd:88:11:48:bf:77:8f:d5:4e:be:fa:3b:0b:a0:
5f:d8:26:7a:02:15:38:29:7d:4e:d1:35:01:b5:0d:
ea:c4:ad:a8:36:5b:3f:a6:59:e7:dd:c3:d6:09:09:
9e:2d:02:f3:6e:6e:b0:f3:ab:5a:35:4c:8e:a1:da:
10:1d:7f:89:5f:25:d7:ee:fc:e7:41:bc:ea:1c:9c:
f4:1a:5d:ce:da:61:cf:e6:82:33:25:36:67:e7:9e:
5e:83:75:1b:f1:b5:38:b5:ef:dc:5b:d8:51:f1:05:
73:fb:16:3a:0f:75:ff:fb:4f:b2:45:cb:4d:60:ee:
db:d4:d0:20:ea:97:6d:28:1d:5b:83:b0:e6:80:f5:
67:ff:bc:fc:e6:3c:76:45:bc:69:fb:1e:c1:39:52:
31:76:3b:61:3e:61:e6:e4:93:70:0d:57:e4:c4:71:
eb:c6:13:4a:a7:30:9f:07:80:97:52:05:c6:89:60:
40:af:e7:5f:fb:3d:26:7e:f6:2e:54:b1:a4:99:6c:
37:27:d7:f5:eb:1b:1f:18:d4:1e:d0:3d:64:e8:47:
19:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F1:EC:48:E8:6C:68:C7:5A:D4:7B:40:B1:D5:79:00:89:C8:A5:C1
X509v3 Authority Key Identifier:
keyid:8D:B4:9B:AF:17:F0:6C:36:4A:00:F8:E6:4C:89:1C:53:72:9F:7A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbSbrxfwbDZKAPjmTIkcU3Kfei8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c1ec8-cc39-4389-8584-85173e57eb52/1/jbSbrxfwbDZKAPjmTIkcU3Kfei8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:68:b5:98:bf:34:dc:ed:7f:bb:0a:dc:82:e5:f0:7c:75:c1:
c5:da:73:db:94:55:9a:ea:78:bf:4d:e1:c5:5a:80:d9:af:2f:
c6:04:a7:0d:53:8f:d9:b9:86:c3:81:0f:93:4c:35:36:54:1e:
a7:4f:f1:01:4a:25:3a:26:e7:15:0a:a1:c1:b4:d6:5d:a6:82:
4c:bd:bd:e1:8a:7a:83:81:22:5f:15:da:49:33:6a:ff:ed:01:
06:e2:bf:8d:1f:4d:ff:4d:f7:23:cd:82:2d:d8:0d:40:b3:2b:
e6:50:63:e7:41:4d:ce:88:1f:31:f2:72:bf:4a:98:a2:c2:d1:
7b:70:2c:a3:67:ae:fe:0c:28:a0:ec:3c:64:dc:22:50:2c:05:
9b:9a:38:59:32:8d:de:55:62:e6:47:ec:d8:62:0d:91:6b:df:
16:4b:bf:14:1f:87:f8:1e:38:07:20:9e:a2:9f:ca:8a:09:ce:
e1:91:09:31:25:2f:14:ce:ad:13:1f:66:9a:c1:d7:ad:a7:6e:
fc:73:9d:2f:f3:de:e3:e3:8a:a9:05:d5:74:11:43:1d:b1:c8:
b7:8a:cd:f5:df:c9:1c:a7:8a:c8:27:e8:b9:33:61:4b:08:c8:
18:45:e9:5c:5b:23:c2:13:11:84:a2:47:45:7d:af:b3:0a:7f:
e1:a4:f1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:19 2025 by rpki-client