Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
File: jZknGRkaiU0GjbqNChAG6f6tqmg.mft (raw, json)
Hash identifier: vfqB9YEb5KNvKDrJT+GOQ+GRF8wPl1oJ4WHmLdg1YR0=
Subject key identifier: DF:BB:44:64:7F:8B:FC:87:08:9A:2B:94:A7:CD:AE:8A:EB:AC:AD:95
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Certificate issuer: /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial: 019A26660DAD385A1731ADE90C7C58BA6E53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
Manifest number: 08A9
Signing time: Mon 27 Oct 2025 16:00:13 +0000
Manifest this update: Mon 27 Oct 2025 16:00:13 +0000
Manifest next update: Tue 28 Oct 2025 16:00:13 +0000
Files and hashes: 1: UEoVdPpKXNYPc5eN4NXhO3hKujE.roa (hash: S8TgRAvXGtwdrVW8V4DMPg99ZH66pkiGd931XsFhH8g=)
2: auh7CDhWY48lyi05uSGvAmCeUEY.roa (hash: EQMFxwLeohahYmNy2tmys2Ve5N9/cgGCjeiUU7kajMM=)
3: jZknGRkaiU0GjbqNChAG6f6tqmg.crl (hash: hDcn1JkuL864jDBCaQLqAQp8je73YlKybq9HvoZgtAE=)
4: nz0zNU_fBq73BHptpznw6advDzo.roa (hash: 0C2SqHmcbAjiy/O+OBAPzaEZ28ZqtJabC+l8WC5HbPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:0d:ad:38:5a:17:31:ad:e9:0c:7c:58:ba:6e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
Validity
Not Before: Oct 27 16:00:13 2025 GMT
Not After : Oct 28 16:00:13 2025 GMT
Subject: CN=dfbb44647f8bfc87089a2b94a7cdae8aebacad95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:82:ca:54:6d:5b:9c:90:83:e6:59:5a:94:88:
29:9b:46:b8:a8:2e:cc:53:c0:8b:08:ff:7f:72:77:
d3:97:49:40:b8:3e:b5:6f:03:41:a5:4c:8e:3a:98:
22:90:7b:32:78:2a:ca:e8:56:00:58:ec:b1:d6:b7:
55:7b:f7:44:96:40:28:f6:c6:17:70:2f:02:88:ef:
96:d8:96:be:8d:78:57:91:40:9e:ae:d3:38:a3:06:
93:3c:4b:f0:15:11:3d:0f:19:25:9e:3e:93:e9:16:
46:d8:de:3d:d7:9f:40:15:35:37:6f:1f:64:b3:1a:
7a:67:6a:26:23:1f:13:8e:f4:ba:25:45:0b:25:a4:
7f:55:19:45:28:33:97:5c:11:05:50:c7:af:a4:35:
0d:dc:77:98:5d:df:fb:c9:5e:5a:10:aa:d4:fc:fc:
f2:5b:68:07:df:53:94:74:f2:c7:0b:ef:43:13:43:
dc:8c:cc:11:79:a4:b4:b7:b6:cb:a2:98:f3:ce:aa:
c1:6f:f1:ea:e5:e7:e3:d1:6f:6c:d5:46:b8:33:ff:
41:8c:38:9b:7e:48:97:78:30:29:dd:f4:b5:78:5c:
26:d9:25:f3:7e:f8:d0:f6:2b:e9:cd:24:97:d8:76:
a6:8b:cd:9d:62:92:9d:c5:94:b3:e3:a7:18:55:6c:
a2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BB:44:64:7F:8B:FC:87:08:9A:2B:94:A7:CD:AE:8A:EB:AC:AD:95
X509v3 Authority Key Identifier:
keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6d:f4:1e:2f:87:26:b7:82:d6:c8:33:f5:99:53:fd:38:1e:
d0:d9:d2:e1:b3:bd:5d:c3:f0:ed:e3:48:62:8e:df:9d:e0:15:
52:74:11:25:81:00:8c:16:8c:fc:64:1e:6d:00:1c:bb:01:4f:
79:df:b6:0c:4c:fe:73:66:89:cd:f2:b7:24:e6:80:16:e1:fb:
84:29:95:1e:8e:2b:76:6a:f1:ac:fa:22:74:cf:ed:43:db:03:
07:6b:3d:32:1c:15:3e:c0:d7:31:ae:4e:81:db:75:1f:2d:23:
f7:a6:ac:3a:4a:ee:fe:c2:05:09:33:ff:d7:5e:77:be:68:b0:
c5:13:a3:85:8c:64:b0:b5:33:e8:64:7a:a1:48:29:d9:ee:a6:
70:77:53:a6:85:b9:b0:bd:6c:8b:f2:79:47:4c:2c:df:69:9b:
cd:e9:b0:3c:bb:3a:c2:9f:67:b9:25:33:58:19:59:e9:0e:14:
fc:19:3a:67:b5:69:01:f6:bb:08:67:1e:cd:15:77:e5:fd:8a:
2f:01:bc:79:58:1d:c7:b3:83:3b:4a:dd:d6:06:b6:38:78:40:
a1:0a:3b:f7:b4:61:9a:a4:20:ae:c2:03:41:91:2d:f0:80:49:
51:45:ff:3e:ef:4f:be:62:ef:1d:ad:d3:26:b0:08:71:aa:56:
92:96:ca:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:39:40 2025 by rpki-client