Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
File: jNC2VHVIgC6lmBRnJUe8yDbXD88.mft (raw, json)
Hash identifier: CQEjZ1jcHqXfhKes8T/XbxGooorGHjvo4swIoUeNEb8=
Subject key identifier: FB:0E:84:39:15:F1:FD:D1:A3:49:C7:3F:FD:BF:0B:70:9E:6E:23:25
Authority key identifier: 8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
Certificate issuer: /CN=8cd0b6547548802ea59814672547bcc836d70fcf
Certificate serial: 019A21E5180989A45A7A51E049E82148DA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
Manifest number: 131C
Signing time: Sun 26 Oct 2025 19:00:53 +0000
Manifest this update: Sun 26 Oct 2025 19:00:53 +0000
Manifest next update: Mon 27 Oct 2025 19:00:53 +0000
Files and hashes: 1: YxXoiEyb2ngb3lOp29zabqLOpVQ.roa (hash: sanjf7jY5/VoRnqCgeDFshIcJ+q+MAflsrk3luOEYvQ=)
2: jNC2VHVIgC6lmBRnJUe8yDbXD88.crl (hash: QM4EodeHfTPeoEo/UPmxefzhjgZoau/0kEDbQZSomuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:e5:18:09:89:a4:5a:7a:51:e0:49:e8:21:48:da:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd0b6547548802ea59814672547bcc836d70fcf
Validity
Not Before: Oct 26 19:00:53 2025 GMT
Not After : Oct 27 19:00:53 2025 GMT
Subject: CN=fb0e843915f1fdd1a349c73ffdbf0b709e6e2325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:0a:b9:f1:f7:17:08:67:11:3f:4e:49:a9:
e8:70:10:8b:f7:6e:25:33:79:e6:c6:6c:e1:47:86:
44:c7:fe:ff:23:58:df:72:ef:c0:91:e6:b5:b4:2e:
76:27:1d:8a:29:eb:ab:63:1a:34:db:3a:87:82:8a:
45:92:d8:a3:c6:ad:88:a9:ff:f2:6f:8a:25:a6:85:
bb:e3:f1:ae:84:27:85:87:46:ff:ef:9b:6c:23:f4:
c0:9a:0e:94:a7:6c:0e:07:00:9f:17:36:6d:69:b2:
c6:47:b6:55:2e:d3:d5:59:97:d0:96:c1:d6:6a:b4:
fb:8a:83:2d:a5:e6:6a:28:2e:82:e8:c1:27:ab:52:
56:d0:80:ed:e0:e2:18:8e:47:d0:d3:08:b2:f1:7b:
ac:0e:58:85:16:5a:e3:67:c4:16:88:cd:0a:40:fc:
a0:47:26:7c:ce:ca:aa:3d:ad:02:7b:1d:39:48:88:
96:1c:32:cd:d2:78:12:43:ea:b9:1c:8e:30:46:82:
4b:6e:a1:4f:a0:95:ec:95:59:5e:47:2c:22:86:c9:
7f:23:e5:57:81:f0:18:90:31:2b:a0:98:d4:ca:2f:
40:c6:40:b5:fc:32:01:94:f7:e1:0a:9e:aa:1f:c5:
97:1d:7f:c9:b1:0c:1f:22:e5:75:eb:70:33:c4:b2:
7d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0E:84:39:15:F1:FD:D1:A3:49:C7:3F:FD:BF:0B:70:9E:6E:23:25
X509v3 Authority Key Identifier:
keyid:8C:D0:B6:54:75:48:80:2E:A5:98:14:67:25:47:BC:C8:36:D7:0F:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNC2VHVIgC6lmBRnJUe8yDbXD88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ca2cb5-b25b-435c-bacb-0ae696bd368a/1/jNC2VHVIgC6lmBRnJUe8yDbXD88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:97:6d:4a:d7:12:01:43:1b:39:d5:a1:22:22:c0:40:7c:3b:
e7:27:72:e4:89:0f:66:13:7f:85:2a:42:ab:3d:f8:5e:14:6e:
ff:60:13:8b:a3:90:ac:b8:18:00:ba:b1:30:38:e1:dc:67:6d:
88:24:99:69:50:b1:78:96:58:a7:e1:e1:ae:0b:23:07:d2:83:
2e:b9:7f:bb:db:55:c0:69:df:5b:3d:46:20:d4:6b:64:8e:90:
1d:57:6c:3d:78:13:66:31:d9:26:ce:b4:20:21:1c:c1:bc:bb:
4e:c6:fe:40:69:45:9d:4c:b7:40:a8:21:14:ba:88:19:0c:6f:
1c:f5:ee:2a:0f:41:c9:1f:a9:23:71:8a:86:19:2b:b7:25:14:
d2:7f:d0:ee:ca:13:38:ec:6c:c7:da:c3:a5:46:95:89:ca:f0:
32:e7:74:1c:c7:84:f0:f7:a3:1c:5c:ae:e2:7a:b4:9c:50:18:
ac:37:82:b1:8d:53:07:b6:43:af:81:3a:0f:19:b6:87:a6:f2:
a5:ea:1d:90:13:2b:b5:a8:fa:94:2b:39:07:de:8c:47:9a:87:
19:a8:e5:b6:42:70:59:83:ab:3b:05:67:e8:51:88:a1:66:26:
a7:e4:db:df:ec:67:94:77:93:7d:fc:1a:fb:23:32:fa:b7:bf:
8a:f5:54:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:38:49 2025 by rpki-client