Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
File: sjDI_QIF7PDva1bgN9Vimxeyde4.mft (raw, json)
Hash identifier: pv5CRi8sm/0niAye6tt6yL6g/5rjXfvBxDcKhYIBoxU=
Subject key identifier: DF:C5:4B:AF:54:45:E7:95:45:E1:0E:EE:95:77:D1:4F:DA:39:38:98
Authority key identifier: B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
Certificate issuer: /CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Certificate serial: 019A21AD7D3813CB8A6D448B3561D2E4193C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
Manifest number: 102E
Signing time: Sun 26 Oct 2025 18:00:09 +0000
Manifest this update: Sun 26 Oct 2025 18:00:09 +0000
Manifest next update: Mon 27 Oct 2025 18:00:09 +0000
Files and hashes: 1: 5YyqSxLIcXFPIwOdvY9Rh4uGVOc.roa (hash: uGepzmi4cPy4AsJc18Ia0pOn0QIzzcEx4qW4Atgsedw=)
2: JxS9B3-r4nmDK2LpLdZXebZoH3Q.roa (hash: eJeAJPYc498r5QOnOd4btYkoPZFePTawCT/M44uVMH4=)
3: sjDI_QIF7PDva1bgN9Vimxeyde4.crl (hash: JB+kjRULVpdaFxpCw0we7LzcLmZ6LiMzSL/fHZfFunU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:7d:38:13:cb:8a:6d:44:8b:35:61:d2:e4:19:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b230c8fd0205ecf0ef6b56e037d5629b17b275ee
Validity
Not Before: Oct 26 18:00:09 2025 GMT
Not After : Oct 27 18:00:09 2025 GMT
Subject: CN=dfc54baf5445e79545e10eee9577d14fda393898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c2:4e:b5:18:e0:b0:10:13:e9:5c:3f:08:10:
f9:b2:fc:05:1b:36:74:98:ea:f1:28:19:a4:21:f7:
1a:dd:a9:ec:cd:4e:ab:0f:e8:9a:4f:5d:ca:e1:fd:
ad:ed:55:66:b2:73:5d:c2:34:70:cb:bd:d2:e9:e2:
23:d4:a6:b0:95:f9:27:d8:51:22:d8:00:34:32:5f:
26:9a:d6:eb:bd:5a:15:3e:0e:97:20:30:6c:e0:b7:
4b:ec:17:39:f0:4d:06:88:75:76:b3:06:73:cd:d4:
19:f2:1e:98:36:8e:b5:59:98:39:f6:4d:7d:b1:f1:
50:f3:17:1c:14:53:ec:6a:4b:d1:e6:95:90:8d:76:
d2:3a:1d:bf:0c:7e:38:1f:7c:1d:54:c2:a9:dd:76:
db:77:60:c1:2f:34:61:47:6c:a8:fe:00:c7:78:5e:
61:50:72:c0:46:7c:56:b4:8f:f3:2c:25:b8:69:68:
61:9e:cd:03:b2:72:ef:cc:9d:c8:09:a1:c3:8e:4b:
6c:30:40:36:db:ec:ef:e7:69:44:6c:fc:a1:f3:72:
c6:9a:60:1e:02:44:95:82:ba:e3:9f:b5:b7:d8:46:
d8:b8:a1:a4:77:48:da:91:6c:72:89:03:f0:5a:0e:
88:80:5b:ed:a8:f2:32:0c:24:d9:9d:5e:0e:32:50:
80:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C5:4B:AF:54:45:E7:95:45:E1:0E:EE:95:77:D1:4F:DA:39:38:98
X509v3 Authority Key Identifier:
keyid:B2:30:C8:FD:02:05:EC:F0:EF:6B:56:E0:37:D5:62:9B:17:B2:75:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjDI_QIF7PDva1bgN9Vimxeyde4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca1797-616f-4973-b740-c8b5dfc5a13f/1/sjDI_QIF7PDva1bgN9Vimxeyde4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:52:ca:c4:8a:7f:18:90:c1:48:e3:fb:56:a9:ff:a5:e4:ab:
6e:f5:1c:ce:68:39:02:76:13:69:bd:8c:1a:9f:93:90:d5:aa:
f2:b9:ea:bc:cf:41:4c:eb:72:a3:f7:2b:dc:58:e9:55:75:d3:
84:d8:f0:40:c8:9b:fa:fb:e3:4c:74:18:6f:d1:be:f1:d7:f0:
b3:e3:23:f2:69:a0:de:8d:5d:8a:51:f4:0a:83:83:36:a6:45:
91:79:ba:95:0c:4c:88:b1:a6:fc:5f:b6:b4:2d:c6:99:b7:21:
57:40:c0:de:39:d1:4c:cd:1d:5d:2b:c2:a9:fa:b7:39:ff:84:
99:69:02:10:a8:71:b7:1b:ba:a0:24:73:ef:e8:73:df:9f:98:
72:50:e8:c3:e7:eb:33:90:55:96:07:61:73:39:b1:10:71:5a:
c6:aa:21:97:e7:86:54:7a:41:ab:da:58:52:4b:71:01:f5:63:
4c:8f:b7:14:f1:0a:38:38:6f:d6:2a:93:e6:6a:eb:72:28:e5:
a4:23:93:19:e1:3c:b0:c6:b9:13:29:31:36:72:47:c1:80:0c:
3f:02:e2:e3:d9:a9:f5:37:04:aa:af:4e:64:21:44:a9:bd:4a:
1c:ce:69:cd:0c:bb:dc:81:f7:ee:cb:b7:11:70:c1:09:57:25:
bc:66:23:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:57:22 2025 by rpki-client