Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File: JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier: xUX4hEugT12LifBxQSh6/3wjh8kCWAYT2U4uoXJJdic=
Subject key identifier: 8F:21:8B:EC:D1:8E:21:DD:6F:41:6A:58:75:16:37:F1:7F:F4:7F:BB
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer: /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial: 019A2C311B0E22A8FA10C55EDC725244121A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number: 0F99
Signing time: Tue 28 Oct 2025 19:00:06 +0000
Manifest this update: Tue 28 Oct 2025 19:00:06 +0000
Manifest next update: Wed 29 Oct 2025 19:00:06 +0000
Files and hashes: 1: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: qCu0EajufN7iKJFV0c1EM2uzbzxb6rK0I5LnTi+qatI=)
2: h-jm1BLS9IvvXFUt65doG6SmjKs.roa (hash: SPX4w9cc6FxiyrggBKn+FUAfxJuZhXsTTQy+RHHDQmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 19:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:31:1b:0e:22:a8:fa:10:c5:5e:dc:72:52:44:12:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Validity
Not Before: Oct 28 19:00:06 2025 GMT
Not After : Oct 29 19:00:06 2025 GMT
Subject: CN=8f218becd18e21dd6f416a58751637f17ff47fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:7e:d2:b0:a0:d4:a2:fa:35:5b:0e:02:f2:
76:11:4e:e8:06:1c:eb:2a:4d:7d:00:f0:e6:8e:52:
79:5e:28:0b:d7:8d:48:c2:b1:4c:57:cd:ba:9a:d8:
64:f5:19:95:2f:0d:38:ec:e1:c5:68:8e:26:4f:3a:
85:5d:10:9c:b1:66:b4:6e:e8:73:76:6a:42:7a:70:
d2:53:1e:eb:2e:07:cd:ea:aa:43:64:d8:fa:8d:18:
74:5e:2e:79:56:1b:21:c0:24:8c:0b:c9:89:db:bc:
3f:4d:7d:a5:9e:1f:a5:7f:94:87:6d:0c:28:27:84:
40:d0:96:95:57:ae:76:87:17:f9:bc:68:f9:c1:ac:
1a:7d:c2:93:a8:e0:28:7f:3a:0c:db:65:d2:81:12:
e9:04:fe:1e:55:3a:65:c5:94:51:0a:7f:62:b5:27:
93:39:37:e6:16:37:78:bf:58:b8:a3:9b:1a:7e:36:
71:93:79:d7:b5:3d:31:46:19:1d:0d:a1:44:db:46:
87:fc:48:ee:65:47:2b:8f:23:c4:59:9f:41:da:69:
62:3a:1a:e6:24:c2:ce:f5:6b:33:90:ea:f9:c6:ab:
45:62:3d:24:3a:bd:a2:44:e6:cd:8b:a4:4c:31:6c:
f6:10:eb:fd:fc:34:40:d7:ea:77:63:6a:34:f7:76:
d9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:21:8B:EC:D1:8E:21:DD:6F:41:6A:58:75:16:37:F1:7F:F4:7F:BB
X509v3 Authority Key Identifier:
keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d2:e1:77:b5:8a:78:73:6d:94:10:7e:fc:30:f0:bb:e1:df:
0e:1d:87:f5:f3:22:a2:bb:c7:b2:e6:4a:ed:0e:67:d8:85:a3:
3d:56:db:33:9f:b9:49:ba:31:4b:a1:8f:4e:82:15:00:d4:63:
ec:c8:49:25:78:1a:65:1b:e8:70:5a:30:df:62:25:9d:2c:32:
26:5e:d9:6b:9e:54:e2:ab:05:56:d2:4b:24:4f:e2:0f:e7:98:
e7:b2:22:86:3b:ff:d1:6a:f8:4c:b2:73:e5:9b:a8:a1:d5:cf:
b0:90:aa:f0:99:98:5c:22:0d:9e:d6:a2:a5:6a:3b:50:5a:f0:
66:c3:e0:23:7a:6d:d6:0e:dc:c7:bd:20:96:08:77:11:7d:56:
8c:8a:3e:1e:93:c4:1c:25:af:ba:82:d4:c2:ca:45:3e:9c:26:
ba:f4:0d:ba:e6:82:3d:1e:a1:83:33:1a:68:40:bd:04:a3:a2:
e4:86:8a:e4:c7:cd:45:3d:c6:b8:43:70:73:32:c6:60:0f:d3:
48:3e:8a:4f:14:f5:32:4a:4a:18:9e:b5:d6:12:27:65:ef:66:
92:a1:f5:a4:04:a2:2f:98:b9:cb:d6:6f:26:34:e8:4e:d1:f7:
c4:30:84:ed:65:a8:52:f2:d5:5c:4e:54:0e:35:6c:30:26:c2:
f3:17:4b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:33:54 2025 by rpki-client