Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
File: jAx_Lrq3yWERyuaHzt0c0um81Wo.mft (raw, json)
Hash identifier: nYglkM/DgBT9wMmJfpf4zriLMLSoOF5II3ZoKyPc98c=
Subject key identifier: 9A:01:62:D4:B6:88:C7:AF:92:56:65:99:88:62:96:18:30:07:D6:6C
Authority key identifier: 8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
Certificate issuer: /CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Certificate serial: 019A22C081BE5700E84FE378ECBCAC50CC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 23:00:32 +0000
Manifest this update: Sun 26 Oct 2025 23:00:32 +0000
Manifest next update: Mon 27 Oct 2025 23:00:32 +0000
Files and hashes: 1: CLLXw20tFXDHP2NnWdXuz6OtVIE.roa (hash: fyANJPQO+a+aRIBA049SI7Qf8CVSPhtzXXD8t/DgeGs=)
2: f46_qQD3jnenHxB8isMlElB8Ow8.roa (hash: xiaUuaIqDN3MaDb9piyX8u90zRoK0nA4gMNUAGOcErw=)
3: jAx_Lrq3yWERyuaHzt0c0um81Wo.crl (hash: lzrheFt00+51ZteRVHpO8NKXJWvdeIB4deJ/QudMdb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:81:be:57:00:e8:4f:e3:78:ec:bc:ac:50:cc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c0c7f2ebab7c96111cae687cedd1cd2e9bcd56a
Validity
Not Before: Oct 26 23:00:32 2025 GMT
Not After : Oct 27 23:00:32 2025 GMT
Subject: CN=9a0162d4b688c7af92566599886296183007d66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9b:bb:58:54:f9:a6:14:f5:29:4a:49:36:58:
90:49:69:1e:35:de:32:0a:7a:39:66:d1:6b:90:37:
34:fb:b2:b1:7e:11:42:43:4b:a5:74:b5:2c:57:ab:
39:71:be:1c:69:34:f7:f9:70:8f:bd:ef:a2:ce:a2:
af:4f:57:b0:25:18:1e:17:80:3b:bc:86:c8:01:25:
0b:60:d9:57:84:2a:79:4b:a6:46:7a:8d:30:ba:8c:
49:ce:d8:f7:b0:ec:28:32:0a:43:3d:18:76:b1:ab:
15:d9:ac:e3:2b:58:af:df:fa:12:b2:76:a9:08:99:
4c:89:47:44:63:02:34:af:9b:32:75:b4:cd:b4:91:
6c:4e:8e:b5:27:f6:95:b0:e7:6a:99:3a:5f:6c:c3:
19:9c:1c:dc:3b:00:4e:19:62:71:ed:d0:6f:63:88:
75:08:f5:ee:88:eb:5d:56:61:9d:a9:79:1a:0f:f3:
91:89:b5:33:be:cd:eb:db:2a:3f:f7:e1:c0:43:a8:
43:02:0e:c6:dc:6d:dd:84:54:78:12:9a:4f:39:60:
88:29:86:1d:55:89:19:04:4a:af:ae:a5:8f:cb:08:
11:25:89:65:a5:f3:a0:1d:c7:da:8b:21:cc:0f:9e:
b0:87:2c:91:6b:c0:af:9e:5d:d2:30:33:10:65:3c:
6e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:01:62:D4:B6:88:C7:AF:92:56:65:99:88:62:96:18:30:07:D6:6C
X509v3 Authority Key Identifier:
keyid:8C:0C:7F:2E:BA:B7:C9:61:11:CA:E6:87:CE:DD:1C:D2:E9:BC:D5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAx_Lrq3yWERyuaHzt0c0um81Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c76383-591c-4cde-b2cf-251d74ed7754/1/jAx_Lrq3yWERyuaHzt0c0um81Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9c:62:01:32:55:32:6e:26:de:8d:ee:21:67:65:90:7f:fe:
15:de:a3:9d:aa:a3:97:6a:38:a1:1a:b4:8b:d3:e7:a4:2e:fb:
15:2d:0a:8e:8f:ad:40:99:2c:06:e1:30:4f:06:48:be:1d:83:
79:3f:f1:ae:33:55:e0:85:20:4f:7e:18:02:2f:d6:1b:bd:34:
33:3d:be:dd:a7:4f:09:68:8d:7f:34:c0:bf:a7:8e:63:37:03:
de:d9:7f:73:0a:a2:51:b0:3e:6f:b8:6e:34:f3:d9:99:41:cf:
9b:ec:e9:cc:47:e5:72:0d:72:62:0e:da:3e:56:6c:83:96:de:
60:a3:af:47:16:2d:b2:69:17:a4:64:1f:f6:18:01:46:5a:98:
73:f4:01:5f:a8:9c:88:84:9d:f5:59:9e:53:ad:aa:02:70:03:
3a:a5:e4:ab:db:1c:c7:a9:88:de:a7:18:dd:d4:64:d7:8b:5c:
6f:07:ce:fc:e6:c4:48:e8:49:49:e6:8a:95:42:70:a4:e3:71:
5c:ab:5b:bc:bc:8a:75:a9:c0:64:3d:d5:ec:c8:11:71:34:e9:
bf:d0:84:36:88:38:79:91:3c:5a:5e:9a:46:75:02:46:ac:de:
0d:e1:0e:6f:5f:a9:76:23:08:08:90:57:01:16:65:2f:3b:b8:
dd:3e:8b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:53:07 2025 by rpki-client