Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
File: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft (raw, json)
Hash identifier: /Q77QkWFSIxWaEBYsJlnyHLBqD7loV/F8oxixtTsAU0=
Subject key identifier: C4:E8:D6:4F:B8:B8:AC:1C:08:73:4B:93:2A:2F:93:41:FF:4C:EA:A2
Authority key identifier: 8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A
Certificate issuer: /CN=8c029fb18e19c5677244057eda38c63dc18da12a
Certificate serial: 019A2409E30EB5FE27AEDD97373E51056099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
Manifest number: 02DC
Signing time: Mon 27 Oct 2025 05:00:18 +0000
Manifest this update: Mon 27 Oct 2025 05:00:18 +0000
Manifest next update: Tue 28 Oct 2025 05:00:18 +0000
Files and hashes: 1: Cb3iCmSyTi57Hr9wgt7-XKl22eM.roa (hash: KWc0sd0YcpuWSqdNBF0A6JkpNXMWTuayHXK6TkwuLFE=)
2: jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl (hash: rBMhFsDFn0Oe2a6JHEfEPQ3ppJZFbPEBai+6Rbso3Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:09:e3:0e:b5:fe:27:ae:dd:97:37:3e:51:05:60:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c029fb18e19c5677244057eda38c63dc18da12a
Validity
Not Before: Oct 27 05:00:18 2025 GMT
Not After : Oct 28 05:00:18 2025 GMT
Subject: CN=c4e8d64fb8b8ac1c08734b932a2f9341ff4ceaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:64:74:eb:7d:b5:e4:0a:dd:75:3e:ff:5f:79:
94:96:1b:13:5c:73:ac:2e:75:78:94:90:03:dd:f6:
ac:a2:ff:13:ea:27:5f:70:e6:3c:5e:f0:02:f8:5e:
82:2f:8b:23:00:8a:23:9a:18:d5:8b:b4:f6:b1:02:
ca:3f:1d:84:1e:fc:69:a4:f3:72:b1:bb:3b:09:23:
d0:f3:36:32:a8:c7:81:04:9f:73:3d:12:43:a9:e4:
5e:e9:e6:41:7b:aa:48:27:fc:4f:02:f4:f2:9a:42:
51:d9:b6:df:ae:e6:a4:94:44:2b:55:d8:25:ca:18:
84:0e:4c:7c:48:ba:bf:75:1e:fd:46:4b:a0:dd:4b:
66:7c:86:70:1f:67:fd:c8:da:9e:f8:e7:ea:4f:88:
98:9c:8f:4d:d1:17:cb:3d:8b:5d:8d:47:75:a9:b7:
94:ef:cb:dc:7e:64:12:fb:df:e0:b1:e7:d9:13:58:
04:8f:76:c9:b3:3b:2b:52:6a:fa:3e:d6:9d:88:9a:
69:34:c5:b4:bd:84:b8:af:c6:3b:0d:6e:6c:2f:57:
90:14:80:39:46:7a:27:8d:76:da:04:ae:8e:65:66:
8e:0a:2a:9f:28:a9:0a:11:c3:d9:8a:c6:bd:6e:22:
2a:61:4d:39:bc:07:8d:1c:ef:1d:67:d8:c4:e8:01:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E8:D6:4F:B8:B8:AC:1C:08:73:4B:93:2A:2F:93:41:FF:4C:EA:A2
X509v3 Authority Key Identifier:
keyid:8C:02:9F:B1:8E:19:C5:67:72:44:05:7E:DA:38:C6:3D:C1:8D:A1:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/800161-cb62-4b7c-ac7c-4d3b6c1f3a89/1/jAKfsY4ZxWdyRAV-2jjGPcGNoSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3f:a9:5c:18:6c:17:c8:94:d5:48:ce:60:e8:5b:68:58:92:
f2:86:17:b0:d9:e9:53:f4:26:7c:af:0a:97:1a:e7:60:c4:92:
2f:13:dd:16:c2:7c:1e:80:d5:b5:fc:30:9b:32:82:ac:70:ba:
da:2f:57:6a:00:a9:f7:da:8e:bd:90:e6:4a:38:0d:69:47:86:
c2:3a:a4:34:d2:4d:06:01:26:eb:40:19:4a:50:6a:34:6d:35:
ba:b6:7a:c7:f6:ae:ed:92:08:61:c6:bb:a9:6a:c1:53:01:b1:
63:2d:70:5c:ab:8b:b4:a5:43:ee:eb:2f:b5:28:d1:91:7d:45:
4a:15:28:42:68:61:59:8b:7c:60:ac:c6:b4:2e:90:c5:e3:d9:
1c:5b:ab:9c:e9:f0:a6:a1:70:e3:d6:82:c2:6f:cb:18:00:e1:
e2:cb:2c:16:dd:0a:f5:6d:ae:80:04:fa:8b:24:1d:6c:5b:08:
a5:95:30:0c:85:fe:88:e3:68:14:35:ac:b1:fa:2a:ba:70:8f:
f0:b1:37:84:7a:ee:9d:5d:9f:49:78:84:b0:b9:7a:8e:bb:d6:
84:8a:4c:68:b9:e1:c3:6d:35:a6:d1:bb:1d:24:36:38:0c:98:
f0:c9:e7:11:9e:32:e9:c7:7a:df:d6:b2:2d:1a:e4:4f:51:79:
bf:76:f7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:32 2025 by rpki-client