Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
File: jBPrj9nY20toqWnI_91IRoAqsKs.mft (raw, json)
Hash identifier: RWkZh2oR5FnRq2PHbY2LdXxyHMoc9xswDPl16CRohAQ=
Subject key identifier: 2D:84:E8:25:54:2A:5B:4A:6F:56:3D:97:5F:A4:A1:61:65:93:D4:7B
Authority key identifier: 8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
Certificate issuer: /CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Certificate serial: 019A24AF1903C3270CD314DCC7D16A8942F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
Manifest number: 0A7A
Signing time: Mon 27 Oct 2025 08:00:46 +0000
Manifest this update: Mon 27 Oct 2025 08:00:46 +0000
Manifest next update: Tue 28 Oct 2025 08:00:46 +0000
Files and hashes: 1: djq23V4eA0hrtL3JjtzZq_jD0sw.roa (hash: u2ZEUIKDADE8gsgv3Z8cy40l1mRaFT3X8dzep8zrVh8=)
2: jBPrj9nY20toqWnI_91IRoAqsKs.crl (hash: 7JhzHCP7U6gPjnUNBwEab01MFqs/iKVd1RLK0MZ+VQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:27:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:af:19:03:c3:27:0c:d3:14:dc:c7:d1:6a:89:42:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c13eb8fd9d8db4b68a969c8ffdd4846802ab0ab
Validity
Not Before: Oct 27 08:00:46 2025 GMT
Not After : Oct 28 08:00:46 2025 GMT
Subject: CN=2d84e825542a5b4a6f563d975fa4a1616593d47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d3:f1:cb:db:e7:ad:5b:63:08:50:e3:3e:6d:
0d:26:ea:e9:81:09:f0:10:bc:42:af:4e:a0:c1:ba:
9b:62:79:7d:bb:9e:0c:69:96:8d:23:b2:e3:4f:5d:
03:06:76:04:c8:db:5d:ad:ee:11:a8:36:a6:56:4a:
05:93:5f:0c:f9:f5:e7:9a:24:5e:6e:b0:61:ca:fb:
a5:3e:59:a6:91:7c:2c:56:21:fd:f0:de:a1:fb:f9:
4c:a7:b1:f5:0a:e0:66:b0:2d:1f:85:de:21:83:5e:
2d:1e:e0:9c:28:46:8e:a7:f6:f3:99:a1:ff:61:9c:
14:eb:2d:93:7a:df:5f:dc:c2:c6:73:c1:57:95:c1:
d4:d9:31:13:33:02:09:8e:99:22:6e:d9:5f:16:e8:
ad:2c:a7:5c:87:9e:7d:0b:d9:c0:cc:82:3b:1a:cd:
34:41:32:c8:93:db:cf:a1:0c:b6:b1:37:c6:64:73:
e6:c2:ea:06:88:f9:35:15:ea:a3:99:c3:56:11:fd:
73:b3:6c:e3:32:10:4d:78:1b:3e:28:7d:e7:5b:b6:
7d:68:b1:b9:0f:19:1a:59:71:5a:41:c8:34:19:96:
76:f1:78:c6:0b:23:f3:93:61:f2:fa:9d:99:58:c8:
48:89:f3:78:b9:ba:60:6c:c8:67:e7:2c:97:4a:12:
3f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:84:E8:25:54:2A:5B:4A:6F:56:3D:97:5F:A4:A1:61:65:93:D4:7B
X509v3 Authority Key Identifier:
keyid:8C:13:EB:8F:D9:D8:DB:4B:68:A9:69:C8:FF:DD:48:46:80:2A:B0:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBPrj9nY20toqWnI_91IRoAqsKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8adf7e-2ded-424d-8951-e682bcb9a63a/1/jBPrj9nY20toqWnI_91IRoAqsKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2c:0a:94:7d:ba:9c:aa:22:27:a5:ce:19:91:7e:8b:8b:ef:
6d:f3:c9:fc:18:0f:4a:14:51:d7:17:99:79:07:02:50:03:13:
30:35:f2:fb:b8:96:0b:19:36:d2:d1:c9:aa:26:e4:21:2b:a9:
ff:22:5b:82:a4:82:fd:9d:8f:5b:e5:12:b5:3d:9b:3f:a6:3a:
34:8f:e8:c4:24:3e:bd:b4:2b:12:f0:71:c1:a6:01:bb:ec:ff:
55:9c:0a:58:c6:7c:ec:a1:a6:0b:6c:5f:15:01:84:aa:e6:58:
c7:c5:e6:d6:d1:93:fc:d6:a6:29:de:d1:ab:8c:70:99:62:ce:
84:7e:17:62:a3:f7:88:8f:75:6f:24:37:0f:c4:dd:3a:45:da:
2a:33:3d:20:36:a5:03:b2:e9:5c:c8:a4:2a:65:a3:fb:ed:d5:
27:74:68:36:b5:26:c6:73:ad:6f:1c:34:82:9a:50:38:84:14:
af:32:a1:36:66:96:d5:c5:cb:f9:d6:2c:89:e0:78:37:38:a5:
43:75:8d:e5:66:85:d8:82:29:43:19:66:2a:06:e1:c6:c8:92:
21:7e:9c:2a:d9:e5:5b:7c:2d:78:4e:1d:d6:f2:01:75:e3:4f:
f5:c5:91:fd:51:7c:e3:7f:98:4c:ff:39:3d:50:67:93:6b:52:
8e:b7:0d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 10:01:24 2025 by rpki-client