Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
File: jDutauSRZD0HXiHLqFnvKOJuPHk.mft (raw, json)
Hash identifier: weM4s4X2gSThWpmRaAeqFZnq7FAX2CMaD4LBJx0xIwg=
Subject key identifier: 25:5C:F7:58:98:FB:3A:4D:82:78:B2:3F:FC:71:A9:F4:34:8C:77:17
Authority key identifier: 8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79
Certificate issuer: /CN=8c3bad6ae491643d075e21cba859ef28e26e3c79
Certificate serial: 019A1F8861E96DB15AD748B275D04413CBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
Manifest number: 139B
Signing time: Sun 26 Oct 2025 08:00:22 +0000
Manifest this update: Sun 26 Oct 2025 08:00:22 +0000
Manifest next update: Mon 27 Oct 2025 08:00:22 +0000
Files and hashes: 1: Q9DwS1QYdCXG_TZ3Zx_W06dNw9Q.roa (hash: PyoWrDBozM9pi7C6rpjZaVEl3kgNUqzqzcKl0+NVZC0=)
2: jDutauSRZD0HXiHLqFnvKOJuPHk.crl (hash: novyjQypVkE/onP9s4O/CouevJ5lo1uVrYSDCmapw3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:61:e9:6d:b1:5a:d7:48:b2:75:d0:44:13:cb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c3bad6ae491643d075e21cba859ef28e26e3c79
Validity
Not Before: Oct 26 08:00:22 2025 GMT
Not After : Oct 27 08:00:22 2025 GMT
Subject: CN=255cf75898fb3a4d8278b23ffc71a9f4348c7717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:95:6c:ef:2e:68:59:81:5a:e7:82:65:35:4d:
2f:7a:cc:64:53:d5:e1:5e:dd:d7:f9:9f:c6:55:31:
04:77:3a:63:fa:2c:63:ba:f9:0a:99:ea:4a:f9:4c:
e0:c5:68:57:d8:15:4f:88:bc:53:00:48:d2:10:8c:
05:fd:f4:c1:24:7c:2a:7f:c7:43:7b:2a:68:eb:47:
e1:88:87:1c:f9:7e:f4:61:3a:be:48:7c:4e:af:79:
6e:af:15:d5:86:13:ff:e0:82:3b:87:ae:7a:1a:ef:
8b:1e:c0:62:a2:d9:b0:20:f0:3a:43:76:02:30:75:
12:41:b2:4c:62:aa:bb:7d:1d:ee:ec:eb:80:d4:39:
36:77:f6:a4:9e:d0:91:d1:d5:a0:64:19:45:3b:9c:
6d:c1:93:8f:51:1c:33:ab:28:76:b1:a9:b5:65:32:
8b:e2:d6:85:d1:bf:d7:bf:82:6c:28:62:e1:ef:33:
20:b6:a9:0f:46:51:63:26:4f:7c:de:6c:94:03:b6:
92:16:b6:2b:cd:2e:27:93:7a:ce:d5:36:07:cf:42:
a5:0e:54:68:d1:91:1e:3a:96:73:32:6d:00:b3:c7:
11:ed:02:0d:68:6f:78:30:e5:10:d0:9a:35:2e:89:
fc:1f:61:e0:dd:49:0d:a1:9e:f8:5c:7c:e2:8d:67:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5C:F7:58:98:FB:3A:4D:82:78:B2:3F:FC:71:A9:F4:34:8C:77:17
X509v3 Authority Key Identifier:
keyid:8C:3B:AD:6A:E4:91:64:3D:07:5E:21:CB:A8:59:EF:28:E2:6E:3C:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDutauSRZD0HXiHLqFnvKOJuPHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/aef8a4-28c8-4a96-9ecc-50d895d4ae23/1/jDutauSRZD0HXiHLqFnvKOJuPHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:6d:ed:cd:8d:21:e4:78:69:86:d6:bb:cc:29:94:b0:a0:cf:
ae:3f:a4:cb:5e:76:12:c1:88:a2:4a:4d:97:02:cc:f1:0e:cc:
88:b8:fb:8a:5a:6e:27:10:4c:13:3d:e5:82:30:d7:0d:19:0e:
b9:da:33:8e:57:5f:d5:6a:8f:10:90:68:ec:16:d4:3e:51:a1:
03:f3:51:06:f4:b0:de:97:7f:f8:03:e0:c3:13:e3:67:f0:0e:
02:8d:a2:5b:53:27:00:75:ba:42:ab:db:1e:de:fd:8b:45:19:
dc:96:63:46:96:27:e8:08:ed:1e:9a:25:6a:69:08:73:67:e3:
1b:79:33:42:0a:2b:73:72:9e:1c:e4:04:72:d5:dc:2f:b0:47:
13:37:1f:9c:05:e9:2e:6d:e4:67:4b:3d:2c:bf:97:bb:77:28:
49:cb:27:ce:b1:84:87:cf:f5:1f:ff:f3:dd:fd:c6:36:4d:0a:
dc:3f:2a:e7:2c:28:59:17:95:7d:5c:2e:56:fa:da:04:99:80:
38:1b:db:f2:ce:46:01:46:5c:d9:70:64:24:18:73:5c:61:92:
b4:89:ce:bf:2d:1e:f8:7c:9f:85:4a:67:31:22:da:41:d4:b2:
c1:c3:b9:5f:e2:3a:9a:7f:3b:e7:a2:09:43:cd:fe:b3:75:e9:
2b:2a:e0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 13:59:41 2025 by rpki-client