Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
File: J-lCeLPhkBhjrdYde98tJzzxNAw.mft (raw, json)
Hash identifier: 4pN90Qhc5C9yAzvj5tuIPjxWb2p8H2OBP79ZCBqVUjA=
Subject key identifier: 85:B8:9A:5E:41:BE:D1:9F:06:70:5D:8F:C6:3F:E4:58:A6:15:C6:BF
Authority key identifier: 27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
Certificate issuer: /CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Certificate serial: 019A18E3077FBB6E5D62BE3D63937B0BCF7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
Manifest number: 16F0
Signing time: Sat 25 Oct 2025 01:02:02 +0000
Manifest this update: Sat 25 Oct 2025 01:02:02 +0000
Manifest next update: Sun 26 Oct 2025 01:02:02 +0000
Files and hashes: 1: 7oIgDgDNpX6XAW4lQ5qq69olmro.roa (hash: 3Y/w0AZ9JHVMQciRUgte6R4EVpLThqmwyOoyqP/qwcw=)
2: J-lCeLPhkBhjrdYde98tJzzxNAw.crl (hash: QMh3hf5Xy/MUf0LtYxO9N/VIoggAJ5jyoJUvagbHPDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 17:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:e3:07:7f:bb:6e:5d:62:be:3d:63:93:7b:0b:cf:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Validity
Not Before: Oct 25 01:02:02 2025 GMT
Not After : Oct 26 01:02:02 2025 GMT
Subject: CN=85b89a5e41bed19f06705d8fc63fe458a615c6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:a8:28:82:b1:2b:c4:5b:c1:a1:55:bf:43:
07:09:a2:94:fc:2a:7e:8f:ff:b9:0a:36:ed:0e:d1:
23:7f:76:ba:68:f0:96:46:d5:4d:d2:2e:83:22:8b:
6c:86:f9:b5:44:2e:40:fb:ca:84:4c:8b:b8:7b:95:
79:3a:c2:b0:e8:c9:df:d5:c9:b8:67:d4:fc:3b:79:
f7:4c:1f:97:6e:82:87:2d:87:ee:1a:62:8b:2c:90:
33:36:0a:75:15:fd:82:d9:6e:2e:ed:88:49:7e:6c:
d8:db:00:4f:47:a2:91:99:24:16:78:8a:b6:7f:fe:
4e:50:27:c2:aa:de:58:55:b8:8e:14:6f:39:3c:a4:
1e:7f:fe:44:2f:e3:68:4e:96:fc:fe:26:d7:01:75:
27:68:ec:70:a8:e3:a4:d9:32:36:4d:00:04:ae:50:
66:d9:bc:dd:a5:fe:2f:56:34:16:27:d0:06:84:c0:
d9:80:62:ec:d4:3d:98:d7:1e:ce:60:09:cf:61:a9:
df:25:b5:b2:e2:9f:42:73:3c:c0:a0:cf:cb:ce:2b:
76:bc:5f:ef:61:e6:57:0d:a1:05:e9:d0:5f:54:8f:
b6:54:d1:05:9c:23:57:8e:9b:cf:c3:5f:74:9e:a0:
6f:12:fc:4b:c2:b6:fe:7d:08:88:dd:b9:c5:cf:64:
6e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B8:9A:5E:41:BE:D1:9F:06:70:5D:8F:C6:3F:E4:58:A6:15:C6:BF
X509v3 Authority Key Identifier:
keyid:27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:cc:85:67:ce:60:8d:af:db:17:50:ee:02:8d:c9:a6:d7:b4:
45:ec:a6:1b:fb:5a:60:f3:a4:11:c2:ca:d2:a6:d7:7d:ce:14:
89:48:da:7c:f5:9c:d3:32:d9:ba:b8:36:35:c5:f3:e6:ed:4f:
09:73:88:58:49:a6:ec:9a:ca:7f:1e:d4:d8:d8:80:6b:71:6a:
ca:28:1a:a8:86:f3:ae:d3:fd:d3:3b:74:d0:39:e3:c2:1b:e9:
5a:d1:d9:ac:49:99:7c:ab:09:0a:f6:df:05:17:2f:da:cf:a0:
4b:21:bc:58:7b:92:81:c7:a7:05:f3:0e:d0:de:d5:4f:aa:1c:
2b:17:d0:76:cb:38:b8:f4:6e:4c:45:24:ad:78:8c:c8:44:4e:
c1:16:43:ed:e5:7b:82:3f:69:be:42:af:b0:f4:16:fe:73:35:
63:76:22:c2:5a:c4:9a:10:7a:90:79:6c:e3:c7:28:9d:31:83:
1b:b0:29:13:1b:51:ef:dc:fb:e5:ed:00:53:ef:eb:14:01:33:
18:0c:86:08:c3:3d:0a:1b:bf:36:3e:ab:38:a1:a9:33:8a:c1:
9e:19:84:a4:1a:26:73:2a:58:5f:04:b2:ca:14:c0:67:82:43:
98:c9:c2:26:d5:a1:b8:11:fd:01:a4:2c:0c:f3:89:e0:b2:38:
64:94:02:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 03:03:27 2025 by rpki-client