Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
File: ju56OtFSu4clp9ubt1IIBLbxFV8.mft (raw, json)
Hash identifier: ENmKv9GokRn1jBx76bTFYzx10EgZgbFmnuQlcp80new=
Subject key identifier: EC:29:11:6B:E9:72:6C:4A:15:08:6E:E7:71:18:57:D8:C8:60:49:9E
Authority key identifier: 8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
Certificate issuer: /CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Certificate serial: 019A213FBA3C2B00D8F04BB7DF18CC6D53FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
Manifest number: 16FE
Signing time: Sun 26 Oct 2025 16:00:15 +0000
Manifest this update: Sun 26 Oct 2025 16:00:15 +0000
Manifest next update: Mon 27 Oct 2025 16:00:15 +0000
Files and hashes: 1: JXdwz8Kh5s8D4fZUiI7MP0vHa-g.roa (hash: aGy7W4wvxfuA3DMrWGQip2XzAfgBaKwU1Q707mDCSqY=)
2: W1sV2SXycnhhhyOvaUwWx8t1ifs.roa (hash: HcxcuKRHaI2x0IIJ12wkt3W53ioexeV4UAL0OsdORr4=)
3: ju56OtFSu4clp9ubt1IIBLbxFV8.crl (hash: RazEQ1qlOlKoDrAb2a/g1jZ9Y3wYUtD7ctgd+p8FqyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:3f:ba:3c:2b:00:d8:f0:4b:b7:df:18:cc:6d:53:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eee7a3ad152bb8725a7db9bb7520804b6f1155f
Validity
Not Before: Oct 26 16:00:15 2025 GMT
Not After : Oct 27 16:00:15 2025 GMT
Subject: CN=ec29116be9726c4a15086ee7711857d8c860499e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:f7:8f:43:b4:68:81:eb:bd:c5:1c:8c:9b:
db:4a:16:0a:50:ae:de:e5:81:b2:41:59:9c:15:86:
06:03:a3:91:9b:62:8c:f4:ac:7e:d3:c4:3a:16:71:
95:1c:e3:18:de:bc:09:be:29:ec:82:b2:8c:0f:cc:
fa:e3:ff:1a:8d:de:da:25:e8:e3:a5:90:32:ca:fc:
b9:4c:d4:f4:5a:17:70:25:fa:9b:f8:81:be:5b:f6:
a9:72:2c:13:34:57:44:24:36:ea:76:e4:70:2d:8d:
d0:8b:b5:db:4f:62:52:6a:b7:27:64:70:0a:48:53:
6d:79:1d:8e:38:6d:16:10:82:3d:51:62:84:41:18:
0d:ac:a1:01:29:e7:dc:55:13:ec:f1:e8:36:6b:93:
06:31:2c:4b:03:17:c9:57:f6:cf:c1:e3:75:10:51:
89:29:1b:83:e8:27:33:17:b8:97:fe:fd:a3:42:8e:
82:f6:89:fe:03:24:b7:ec:9f:0d:18:42:90:d7:94:
a8:9b:62:19:76:02:16:40:7c:38:44:cd:af:cf:6c:
54:f8:56:f4:2b:fb:19:59:2f:c2:2d:6b:08:c9:29:
b3:f7:48:f4:70:a7:81:73:99:98:9f:eb:14:eb:85:
3b:67:74:e1:79:42:2f:92:fb:51:07:8d:33:e2:a9:
1b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:29:11:6B:E9:72:6C:4A:15:08:6E:E7:71:18:57:D8:C8:60:49:9E
X509v3 Authority Key Identifier:
keyid:8E:EE:7A:3A:D1:52:BB:87:25:A7:DB:9B:B7:52:08:04:B6:F1:15:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ju56OtFSu4clp9ubt1IIBLbxFV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7979b2-c3d9-4f33-a09f-49591afe17f0/1/ju56OtFSu4clp9ubt1IIBLbxFV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:7f:dc:07:d5:6c:75:10:20:e0:28:f7:bf:63:fa:2f:4f:c1:
41:f2:f8:ed:e0:f8:0e:a8:6f:6f:eb:f4:10:62:00:cd:b5:8a:
31:68:16:40:7b:b7:54:6c:e9:0a:b9:f8:10:11:c4:29:6b:a0:
dd:1e:b6:78:dd:6d:d7:89:55:60:21:8b:ec:d4:24:1f:fd:99:
68:58:a1:7c:4a:b4:d4:d6:19:9b:ab:fd:f8:c5:de:b4:70:be:
a1:dd:90:ad:82:5e:bc:62:e5:98:44:c4:4a:57:c5:18:f1:6b:
6e:83:ad:d7:26:2d:d5:e4:1b:80:71:26:a9:5e:de:10:b5:07:
5d:ca:dd:43:9c:96:9a:f6:c8:34:ad:d3:94:a5:bb:bc:44:1d:
4a:0f:73:03:99:8e:fc:09:87:b6:0b:34:cc:4a:d0:e8:ba:e2:
a8:ec:a1:5c:b2:af:68:ec:1b:94:bb:44:fa:cd:81:98:ea:df:
cd:b6:71:42:7c:33:e6:e4:b3:2c:ee:0d:2a:aa:13:c5:73:7c:
9d:02:75:61:4e:96:14:32:09:d6:d7:e7:14:19:a5:15:87:78:
b5:be:56:85:20:7a:32:4f:79:bd:8c:54:16:6b:38:dd:05:a0:
02:78:0b:e3:54:b9:ae:71:4a:71:f2:cc:35:84:34:25:40:60:
03:a0:42:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:57:25 2025 by rpki-client