Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
File: jxVuaflETCsGaHJWCFtqek6Yh_Y.mft (raw, json)
Hash identifier: oq0P+o6N/RZUQB/KtGsQUGgf5aqBr5X1Go41ch8JLRA=
Subject key identifier: 87:52:AB:DE:9B:72:CC:76:EA:79:8F:ED:B4:F0:6D:69:6B:3C:67:11
Authority key identifier: 8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
Certificate issuer: /CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Certificate serial: 019A09A577E17950783F25BD0E6CC57A8FC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
Manifest number: 0A93
Signing time: Wed 22 Oct 2025 02:00:30 +0000
Manifest this update: Wed 22 Oct 2025 02:00:30 +0000
Manifest next update: Thu 23 Oct 2025 02:00:30 +0000
Files and hashes: 1: gENnBMD7CFnpDe73cGovXB6cewg.roa (hash: rDcPDp/N1UMZLBWpv8SmAqXs5rg//NGw82tfNx9i/r0=)
2: jxVuaflETCsGaHJWCFtqek6Yh_Y.crl (hash: CUbbqCKQBKGw28NAGry/c2g/ePMG6GftZWDVh8K8gTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:09:a5:77:e1:79:50:78:3f:25:bd:0e:6c:c5:7a:8f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Validity
Not Before: Oct 22 02:00:30 2025 GMT
Not After : Oct 23 02:00:30 2025 GMT
Subject: CN=8752abde9b72cc76ea798fedb4f06d696b3c6711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:1a:8d:1a:76:08:09:07:4a:58:ca:7b:6e:
9e:b8:42:e2:4c:5e:54:e6:ef:5c:6f:fe:e9:ed:66:
cd:e5:73:00:5c:5a:37:4c:c7:00:d9:f3:be:46:ec:
58:73:16:82:b1:d6:bb:8a:21:50:d7:31:9e:4f:05:
66:8d:01:51:a5:c3:e6:3d:04:80:c3:ff:ff:a5:fd:
90:fb:86:30:3e:0b:23:3a:94:db:ba:12:0c:4f:1f:
aa:4f:e0:a7:1c:33:ef:5a:8c:75:85:bd:64:67:81:
d7:22:a3:21:65:37:80:b2:45:8c:04:02:7e:72:9b:
e1:4b:e4:38:2b:f5:80:c8:77:aa:ef:b2:47:6a:c1:
96:ae:ed:6e:f7:46:49:3a:5d:c4:44:59:b6:62:5d:
2f:88:1b:cb:77:16:7f:42:ce:85:17:8e:62:e7:0e:
12:47:55:59:ee:a4:1a:d4:03:76:b6:ed:1e:37:22:
d1:26:e2:f7:a1:37:90:da:ad:3e:43:09:4b:6c:5f:
e9:98:52:ef:70:4c:ba:09:3a:c9:b5:da:da:fa:81:
b3:c3:ef:f1:d8:7f:51:3e:da:35:1e:52:7c:d2:71:
50:ce:11:7f:48:cc:40:08:30:13:bd:d6:31:99:9c:
62:c6:9b:10:98:10:e6:67:ef:37:40:25:f1:f0:6e:
d4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:52:AB:DE:9B:72:CC:76:EA:79:8F:ED:B4:F0:6D:69:6B:3C:67:11
X509v3 Authority Key Identifier:
keyid:8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:70:20:fd:3e:30:78:91:10:d1:6a:fb:94:f0:52:b2:a3:f6:
2c:cb:e8:91:38:d9:6f:88:8a:02:02:be:bb:a1:d2:95:73:bf:
68:62:28:ba:db:88:e5:97:a6:82:b0:7a:93:41:6d:00:e7:2e:
28:41:df:6c:63:c3:4d:6a:a3:19:31:ce:a5:2e:bd:7b:10:ab:
d2:64:f7:21:56:89:72:2e:ca:04:0f:61:47:3e:09:fb:27:53:
f0:8b:f9:bf:5e:79:bc:25:9e:6f:60:e1:e5:da:31:db:a4:8f:
05:f1:ac:80:db:3c:b6:04:e7:8b:82:5e:9c:40:c7:4c:53:2c:
0c:0c:e0:0e:56:77:12:d9:d3:a8:1b:a0:42:38:cd:ef:6b:8a:
4a:ee:11:3d:20:9e:30:ca:48:d4:07:39:b7:54:20:05:80:bf:
c1:56:36:67:8d:37:49:99:c2:6b:89:6b:19:9a:a0:5a:ec:28:
cd:e7:1e:5f:2f:f1:c6:92:2d:e8:06:57:ab:09:3e:29:e6:00:
9c:62:11:73:d1:6d:cd:87:a1:35:b2:6a:98:92:74:85:49:66:
f2:da:4a:1c:9b:0e:05:e0:8a:37:cc:f9:08:49:5b:19:9c:bd:
3f:4f:fd:a4:a6:b7:d4:37:a2:d8:bf:18:a2:97:31:a4:92:73:
9e:3b:9e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:11:45 2025 by rpki-client