Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
File: jc19OY_EZuEhvEX69Q3YfDa7yW0.mft (raw, json)
Hash identifier: ZuVkw3nZHAOAZRnQ9OsFi3m6eiUi0SQ0AxM0UUi6oqc=
Subject key identifier: 18:85:8A:01:6C:06:D2:D6:27:7B:B9:47:0F:35:10:89:FC:8C:9D:40
Authority key identifier: 8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
Certificate issuer: /CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Certificate serial: 019A07EE46AB420407DA7AF41D9929A1D7E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
Manifest number: 02A5
Signing time: Tue 21 Oct 2025 18:00:47 +0000
Manifest this update: Tue 21 Oct 2025 18:00:47 +0000
Manifest next update: Wed 22 Oct 2025 18:00:47 +0000
Files and hashes: 1: jc19OY_EZuEhvEX69Q3YfDa7yW0.crl (hash: O13umxGn1IcOfC2W/dVFIswLLl8hRCXy7TDq3cxG2eE=)
2: tI3vS8bXRpYk2uJT942ZTBiVKdc.roa (hash: m8AWxg57zCEgWp5C3CXYTmTH0M1td7C0p+1vWuP3iI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:ee:46:ab:42:04:07:da:7a:f4:1d:99:29:a1:d7:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dcd7d398fc466e121bc45faf50dd87c36bbc96d
Validity
Not Before: Oct 21 18:00:47 2025 GMT
Not After : Oct 22 18:00:47 2025 GMT
Subject: CN=18858a016c06d2d6277bb9470f351089fc8c9d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cf:e3:73:83:30:02:6e:48:43:8d:a7:88:3e:
03:cf:cd:34:cf:d9:a8:18:7b:19:04:bf:5c:bb:ba:
1d:2e:ac:3c:15:06:f2:a4:76:f2:6c:da:9c:f2:69:
a2:1e:f4:d1:56:70:7f:6c:cf:fb:25:20:c8:98:7f:
93:09:87:11:f6:4e:c9:37:ac:b9:ad:a9:13:de:2e:
a3:5b:90:7b:f9:99:15:d6:77:bf:27:d8:ff:22:f6:
da:10:3c:41:12:ab:c1:69:d5:de:70:80:90:43:4e:
e5:29:52:11:3f:09:fc:25:53:0e:7a:be:2b:27:1d:
74:33:71:fe:f2:6d:59:8c:fd:eb:9d:dc:7f:50:4b:
94:a7:fa:53:e1:e2:f6:77:a6:40:41:21:2e:c5:33:
aa:fb:22:a5:a3:91:14:e9:bb:d4:19:1f:a4:c5:24:
9d:af:25:0c:c5:1e:74:3d:1d:6e:10:ef:c6:29:66:
af:16:31:32:e9:ca:52:57:e4:fe:b9:92:11:a0:66:
84:2a:87:74:fb:26:1c:2f:41:78:98:43:d1:2d:fd:
16:e3:74:80:10:48:21:bf:39:e2:3e:5b:f4:f7:6a:
64:74:b0:c3:a3:66:cf:67:ac:fa:e2:73:dd:da:d0:
f9:6c:d4:2c:67:84:ed:3e:0f:d2:9e:17:0b:3f:a8:
ef:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:85:8A:01:6C:06:D2:D6:27:7B:B9:47:0F:35:10:89:FC:8C:9D:40
X509v3 Authority Key Identifier:
keyid:8D:CD:7D:39:8F:C4:66:E1:21:BC:45:FA:F5:0D:D8:7C:36:BB:C9:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jc19OY_EZuEhvEX69Q3YfDa7yW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/158da5-b3df-4122-b35c-121645d98e94/1/jc19OY_EZuEhvEX69Q3YfDa7yW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8e:aa:52:c4:58:41:9f:3b:fb:ef:79:bd:15:f5:97:b0:31:
1a:54:99:63:19:c3:82:32:1d:d5:e5:e8:0d:97:ec:4e:cf:a2:
12:a6:38:90:af:9a:b2:79:7d:3f:4b:ae:c9:df:7e:71:c4:bb:
cf:71:bd:9e:c0:4a:30:ed:d8:f7:6d:8c:e7:85:4e:f2:fc:3d:
e4:58:1e:f4:1c:e4:f8:03:48:ec:a0:84:04:07:53:f9:87:7d:
f3:10:bc:e8:5a:5e:42:ad:f5:f8:24:6e:3c:43:c6:cc:e0:59:
5d:a4:ac:59:d1:2a:17:ed:99:05:dd:14:d3:aa:b9:fc:83:aa:
17:65:7b:36:51:15:1e:3c:e3:fb:36:64:fb:00:8f:0f:ab:ce:
02:af:49:2d:ac:d3:b5:d5:c2:c7:dd:5f:b5:22:04:e3:7c:15:
84:58:9e:fe:df:9e:54:a6:ae:69:06:bf:78:f4:76:57:98:5b:
05:b1:17:9b:0b:ae:37:df:7e:71:2a:eb:ba:43:16:7e:50:45:
6e:36:01:c3:a1:19:b1:c0:2d:f1:da:c9:a7:fb:37:e5:e5:85:
1a:77:87:2e:6d:2f:37:2b:d9:86:84:5f:d9:11:6b:3f:d9:dc:
c8:a9:c5:9b:25:5c:03:82:9e:34:f4:4b:0a:5f:7b:a7:13:bb:
cb:7d:7c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:50:45 2025 by rpki-client