Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
File: jcaca76J58BHm2F3RKRCT2ZnSUQ.mft (raw, json)
Hash identifier: emrqAn1tX3rWON+6BcQW/QYoYesy2JUrueK99Eqr2/w=
Subject key identifier: 83:67:E8:78:79:2A:5C:80:00:C5:AC:18:44:31:1A:5B:77:59:FB:E9
Authority key identifier: 8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
Certificate issuer: /CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Certificate serial: 019A22F75AC8A048767273CD3D18EC6BCC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
Manifest number: 09B7
Signing time: Mon 27 Oct 2025 00:00:27 +0000
Manifest this update: Mon 27 Oct 2025 00:00:27 +0000
Manifest next update: Tue 28 Oct 2025 00:00:27 +0000
Files and hashes: 1: 7Ubso5FdbE6ZVPGCJdUs8ldLo7U.roa (hash: tWUhwGRkp2Wsw0AlBIbHfFNBO7ZZIwFLWe7kWJVHhhU=)
2: jcaca76J58BHm2F3RKRCT2ZnSUQ.crl (hash: 4DCQfK03ewT7Cjz2CDg51GFwInEeGZVGJaqxKRauWUw=)
3: xCpTTt1wRZxUJy83ro30pVk-tGs.roa (hash: +pLDEi2uyNtFVpGTsTvFaAzRGQwyt1tEAP+HX+n7b3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:5a:c8:a0:48:76:72:73:cd:3d:18:ec:6b:cc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc69c6bbe89e7c0479b617744a4424f66674944
Validity
Not Before: Oct 27 00:00:27 2025 GMT
Not After : Oct 28 00:00:27 2025 GMT
Subject: CN=8367e878792a5c8000c5ac1844311a5b7759fbe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f5:a5:cb:91:76:c7:6a:cc:03:36:4b:35:d8:
82:6d:2c:59:28:34:ca:77:3a:0d:56:43:cb:cf:62:
f5:bc:89:41:34:c3:f6:b9:fc:87:b8:ab:11:9f:a8:
43:6a:64:1a:5a:b4:f4:04:4a:6d:01:e3:36:3b:5e:
e0:b8:06:b3:c8:6f:78:90:19:d8:73:2f:e3:85:06:
c3:e2:14:87:4e:d5:19:99:17:6a:b1:3c:2c:7c:0c:
66:25:00:f0:07:c1:d7:87:21:d2:62:f0:99:e3:a6:
77:3b:a8:81:86:f4:c0:71:4d:42:19:d2:8d:84:b2:
98:a5:9d:69:34:91:9b:ff:83:e3:af:5b:95:50:00:
57:d4:cd:fd:85:c1:45:6c:2b:b0:53:c2:67:23:fd:
80:5c:f3:ba:13:1d:6d:5d:a5:7e:fb:5d:18:6e:18:
83:22:d4:94:61:e3:22:25:03:b8:20:00:e3:c2:b6:
d0:a0:69:de:65:cd:a6:c7:4a:cc:ec:7e:1f:aa:1b:
7b:86:d7:5f:6b:7a:3c:4e:40:12:5f:d2:38:6c:46:
c9:70:92:7c:2c:bf:f7:af:89:b7:21:78:2a:8d:45:
16:e3:b2:54:24:3e:7b:e5:14:6d:86:50:60:d6:b6:
52:95:74:02:cf:c6:e6:64:c6:58:f3:34:2d:1e:6f:
d2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:67:E8:78:79:2A:5C:80:00:C5:AC:18:44:31:1A:5B:77:59:FB:E9
X509v3 Authority Key Identifier:
keyid:8D:C6:9C:6B:BE:89:E7:C0:47:9B:61:77:44:A4:42:4F:66:67:49:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jcaca76J58BHm2F3RKRCT2ZnSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/23db5c-1a10-44c6-9d77-bb5caac2e903/1/jcaca76J58BHm2F3RKRCT2ZnSUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:46:38:7a:7e:26:6c:98:9b:18:2f:16:f9:eb:5e:4f:e1:07:
f2:47:74:6d:89:e4:f2:b2:01:65:d9:87:59:df:5a:ba:a2:53:
c9:24:aa:fa:c0:72:b1:16:37:f9:df:cb:76:2f:4c:c7:1f:88:
08:0a:69:e5:1e:24:5c:6b:4e:9e:f8:48:09:48:ff:73:b4:2a:
5c:97:a0:a7:9c:6d:1e:81:5f:0f:54:d5:1e:d0:55:88:b2:64:
0d:f9:b6:e1:89:bb:74:be:93:66:f9:14:f1:a1:77:5d:b5:41:
c5:55:c2:e3:18:93:29:43:bd:9a:48:c1:03:40:eb:73:3a:01:
f5:b2:18:80:af:55:6e:9c:81:a5:c2:a2:db:10:8e:9b:97:25:
f6:4e:d4:e3:cb:2f:f8:e8:dd:22:2a:fa:ea:28:af:81:40:56:
f9:90:5e:ad:6c:9e:1a:16:d9:76:1b:72:30:6c:c5:8c:b1:31:
48:20:ed:f6:b9:12:d1:a9:e4:16:69:72:60:0a:a1:90:36:42:
18:64:c8:c3:c6:04:d0:46:94:85:13:57:40:b2:e1:2f:6d:7c:
e6:06:a1:39:2f:74:d6:e1:37:65:0e:8d:b8:9f:a0:7d:f6:f1:
f8:6d:59:3e:77:d0:81:6e:f5:b0:40:76:75:d0:1c:85:70:79:
5b:8d:7b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:06:06 2025 by rpki-client