Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
File: jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft (raw, json)
Hash identifier: pkC6/Sp3Oitx8UN2IaEGO+LbghdzrEGHDDhXq+sewJY=
Subject key identifier: B6:4E:57:2E:54:90:59:87:41:0B:0B:F5:B5:10:E1:F9:14:3A:79:71
Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
Certificate issuer: /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Certificate serial: 019A0636C00150E75856432B29A9C1BA478C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
Manifest number: 16E7
Signing time: Tue 21 Oct 2025 10:00:42 +0000
Manifest this update: Tue 21 Oct 2025 10:00:42 +0000
Manifest next update: Wed 22 Oct 2025 10:00:42 +0000
Files and hashes: 1: 1tlTabk8kx23vgEK55RHhqMUGAo.roa (hash: ZiPvgitC32adDyXcop28a7N8FTyvMG9u4rZhMBMC7pc=)
2: GJFvvd_DhSTge6litoTaxiewidk.roa (hash: RLpkP+iqljJeiJ6QCXluN39pRk9A6A/5JPgUBEpuWhk=)
3: HzBkiKhuiqff_TTVGmLjYBovMzQ.roa (hash: qKqhsRRVPhaKh0NQ1lXqtQkYrgEiWm0P2Q/f/i1BnBs=)
4: jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl (hash: KPEvv4v3RrSEaIZAApTR1o3/i97Pz40rU6z/5NZeDRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:36:c0:01:50:e7:58:56:43:2b:29:a9:c1:ba:47:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5
Validity
Not Before: Oct 21 10:00:42 2025 GMT
Not After : Oct 22 10:00:42 2025 GMT
Subject: CN=b64e572e54905987410b0bf5b510e1f9143a7971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:78:d0:87:4d:97:3e:91:0c:22:0d:2f:57:71:
b5:64:4c:c4:fd:bc:9b:53:ca:65:2f:d3:b2:50:3e:
01:e5:29:4a:7f:9b:10:ec:e3:99:f9:6c:87:f9:0c:
0b:6b:c4:b4:1c:e1:bc:63:87:c3:93:b4:79:e9:18:
df:a0:18:07:19:8a:1f:11:55:ae:85:f1:b5:6c:b4:
d7:1b:c4:ae:1d:1a:15:aa:8a:78:19:04:ef:fe:ff:
a2:26:d1:ea:60:f0:93:d9:44:1a:3e:de:10:29:e9:
67:81:25:5e:a3:f9:18:03:8d:14:c4:c7:8e:ca:4a:
f8:ae:e4:69:e0:e3:c2:77:be:58:0e:e3:ad:7a:50:
21:a6:ad:a7:a4:72:a6:e9:50:4b:d1:8d:2f:16:62:
1b:08:04:e9:73:ca:45:bc:c2:ca:1b:72:22:62:31:
f3:7d:9c:f0:ea:47:24:47:9a:10:d3:1b:df:71:f1:
13:11:ee:8e:97:f9:fa:05:c2:c8:4a:85:e9:44:a1:
29:1e:78:de:cf:91:6f:70:f5:2f:90:0b:c9:a7:35:
7a:e7:72:c8:fe:c2:f2:fe:27:1d:6b:c1:3f:d9:93:
45:14:72:bf:7f:83:dc:df:84:5e:65:18:6b:1c:4f:
3e:bb:de:b9:44:54:c6:86:19:b1:5c:c2:52:86:b9:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4E:57:2E:54:90:59:87:41:0B:0B:F5:B5:10:E1:F9:14:3A:79:71
X509v3 Authority Key Identifier:
keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e4:0e:f3:6e:06:3c:e8:19:a8:79:d5:66:23:ab:cb:13:31:
0f:16:31:0c:9d:9f:9d:b8:56:e9:dc:a9:10:d5:aa:c5:45:f0:
ce:b4:52:ee:89:3c:33:99:80:04:0c:bf:ee:18:80:ec:47:e4:
c7:22:64:ab:b8:15:28:c6:d4:7e:7b:ff:7a:93:67:d4:18:d6:
21:0b:a7:0f:f3:f4:d6:c9:b5:5a:3b:ce:7e:a5:d0:59:e7:d8:
16:7e:e9:3e:05:a9:cf:8c:08:a9:27:2e:a6:d9:eb:e9:00:ac:
5c:53:69:df:9f:db:8f:1e:65:7e:31:41:ac:a8:a7:ea:9a:7b:
26:ac:02:07:5e:e9:58:8a:b7:3e:c9:4f:a7:f2:79:97:61:99:
fe:d1:b5:6d:fc:93:f0:bb:97:7c:b2:f6:0c:99:a7:40:5c:83:
d6:a4:ec:86:3a:8a:25:58:84:c5:90:c2:dc:09:04:e4:f3:4a:
63:db:d7:f8:57:90:11:b9:1e:47:88:88:df:31:1f:70:58:a1:
66:a8:cd:dc:c3:49:d7:20:28:fb:60:a9:95:57:da:82:3d:63:
70:25:4e:f7:a9:05:79:fe:b5:b2:5d:a3:84:95:71:50:c5:02:
3f:77:a2:01:11:1a:6d:1b:b2:42:9c:b8:27:25:e4:cb:b0:d2:
a2:91:20:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:05:55 2025 by rpki-client