Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
File: Jah51ij-XsinYcR0hnmZP5xp-LQ.mft (raw, json)
Hash identifier: Mon69wUBuh0ZkFOIVkp6W8vIhW+jchUBuZrUdUCoyPs=
Subject key identifier: 49:A5:5B:C6:02:F1:03:D9:1C:FA:4A:DD:C1:1D:83:6D:53:C7:E4:C1
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial: 019A209C4683F913E18C9F65E6417ED1FF1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
Manifest number: 16F4
Signing time: Sun 26 Oct 2025 13:01:43 +0000
Manifest this update: Sun 26 Oct 2025 13:01:43 +0000
Manifest next update: Mon 27 Oct 2025 13:01:43 +0000
Files and hashes: 1: Gx-ly2juqLldMOF7Xn_MRXBNcbk.roa (hash: vl2kBJo+wEJWBn3iWXf8tuoZvKzL8W4USM3kT2sx3NA=)
2: HddtNmC0x8zTG5Lk3qOMl15THPQ.roa (hash: Id/7EQXmEX5soU6S6O6XOraPh4UjRFr3+A+CJOEwcvo=)
3: Jah51ij-XsinYcR0hnmZP5xp-LQ.crl (hash: 2siiQHRCK8aZzIjTUnhAF12iVRpVlsjzcpWWkT1spdY=)
4: w-squKUM0pkBXWozorbDSe8zF0U.roa (hash: LdeqPdzvqZ0x54H5/mODQ0shRZ6NKgUzNLLxUs7yuRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:46:83:f9:13:e1:8c:9f:65:e6:41:7e:d1:ff:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Validity
Not Before: Oct 26 13:01:43 2025 GMT
Not After : Oct 27 13:01:43 2025 GMT
Subject: CN=49a55bc602f103d91cfa4addc11d836d53c7e4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4f:7f:d5:e9:e7:7c:8b:e8:08:aa:97:67:07:
74:2f:fb:6d:de:9b:26:7d:44:ee:8a:d2:ec:99:7a:
86:b3:32:bd:14:0f:f2:6b:eb:b2:09:3c:dc:8e:f4:
49:bc:0c:c1:f0:7b:b9:45:78:ab:30:99:09:b4:5a:
b1:bc:90:9c:92:5a:d5:36:fe:fa:f4:34:c3:d9:ce:
16:89:c1:e3:c8:9c:37:a3:2a:be:7e:76:a5:5f:56:
23:c4:c5:19:99:ae:3f:05:e1:66:ae:74:cb:75:7a:
f4:ce:92:86:e0:ab:8a:e1:1e:6b:aa:6a:ec:ce:b7:
8c:06:9c:76:a6:4f:ae:cc:36:54:e1:2a:4c:86:44:
80:ab:b0:0a:a8:68:47:34:af:b0:17:45:21:88:10:
0a:14:61:65:e7:a5:f5:b8:d2:3e:77:16:c8:08:b9:
36:28:8a:7d:67:f3:13:56:8b:4c:4b:92:36:ea:78:
b8:11:b3:c2:11:33:f8:30:e9:43:be:5f:1b:4b:06:
73:9b:20:ce:a2:da:8c:d0:89:75:d6:12:17:5b:ec:
ff:09:a4:d1:06:e8:1e:85:03:25:5a:fa:31:35:92:
3e:7c:ef:35:61:3e:25:c2:d2:a4:39:c4:88:7f:28:
a8:e6:d0:85:5e:cf:bd:07:16:1b:66:9b:fd:dc:b5:
af:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A5:5B:C6:02:F1:03:D9:1C:FA:4A:DD:C1:1D:83:6D:53:C7:E4:C1
X509v3 Authority Key Identifier:
keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:83:02:d6:bc:d3:4f:f5:f7:7c:17:6f:bc:38:74:5b:b2:17:
85:eb:00:eb:41:b2:52:24:0c:b8:54:17:44:0d:f4:50:cd:fe:
08:42:06:7c:37:e3:5a:fe:b9:f2:76:bb:5e:54:29:23:4b:c5:
0a:63:92:ae:32:e8:1f:45:a1:56:89:d7:58:8c:2d:2c:5d:c2:
9f:7c:42:af:c9:32:b5:bf:0b:da:1b:96:3a:5e:1a:1b:76:9c:
6c:b6:c0:c2:f4:33:5a:1a:c7:a8:cf:ad:41:c1:9e:c9:bb:8a:
0b:b0:fe:50:73:33:27:e0:34:ad:48:3d:a9:b5:18:61:43:05:
2b:6c:7c:15:8f:82:d2:02:26:c7:b5:c7:39:5d:47:c6:f1:53:
5d:14:87:12:db:51:ac:1a:0e:21:df:f0:ad:dd:4a:ca:19:28:
b2:47:d9:09:3e:2f:9d:ad:4f:6e:50:fa:fc:d2:59:44:5e:f5:
7e:a9:a3:fd:64:75:e1:57:99:1a:ea:8c:80:ec:7a:71:77:4c:
8d:16:7b:0a:bf:0d:f1:ef:7b:d8:3a:c6:c8:60:af:b3:aa:78:
bd:7b:e8:3c:5b:0c:e3:39:9f:b3:c9:61:8e:28:85:5d:86:e5:
48:e9:4c:28:2e:56:43:4b:ff:2e:4a:bf:44:11:64:44:0f:fe:
5e:56:c6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:42:02 2025 by rpki-client