Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
File: jTN8DIVpRrj72vKF9Syt3POK0Kg.mft (raw, json)
Hash identifier: 9RuKfZPvP3eafI6uCcrkVZes7sPPit4G6EzY31ShBO4=
Subject key identifier: 93:F6:09:36:6F:DF:B9:5C:3C:79:19:13:E7:0E:EE:41:77:08:DE:17
Authority key identifier: 8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
Certificate issuer: /CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Certificate serial: 019A1B74F8DC4947DE4DF6D1519CE1D9348A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
Manifest number: 15A6
Signing time: Sat 25 Oct 2025 13:00:41 +0000
Manifest this update: Sat 25 Oct 2025 13:00:41 +0000
Manifest next update: Sun 26 Oct 2025 13:00:41 +0000
Files and hashes: 1: jTN8DIVpRrj72vKF9Syt3POK0Kg.crl (hash: i13nBshO8Fbc4+LyCk4QF2CAzYdYRkHvHblQ8MCG9Mk=)
2: orkmW_eZCcL4kmC7TM2XcG_njxM.roa (hash: WZm+hYZMy+CXUU6Z/uI/WhkL+3h0cGl03UVgN4cUA58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:74:f8:dc:49:47:de:4d:f6:d1:51:9c:e1:d9:34:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d337c0c856946b8fbdaf285f52caddcf38ad0a8
Validity
Not Before: Oct 25 13:00:41 2025 GMT
Not After : Oct 26 13:00:41 2025 GMT
Subject: CN=93f609366fdfb95c3c791913e70eee417708de17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:11:76:ac:ac:c9:ea:1d:13:50:1b:04:e6:e7:
17:df:9d:bb:b2:b4:01:55:02:44:ff:68:f1:3d:ea:
77:62:cb:fa:8a:39:90:c2:b6:18:e1:42:11:d1:79:
19:71:7f:a2:25:03:08:56:1d:1e:77:66:ed:0b:55:
79:78:c5:b8:da:50:8f:96:6c:b6:7c:c4:84:22:aa:
d8:a3:4e:29:22:b8:eb:04:00:71:f3:fe:ee:f4:1f:
a9:71:bd:9e:ca:5c:09:24:8a:73:fb:14:1c:1f:19:
b6:9f:58:d0:b3:46:54:94:e2:8d:d8:74:8b:c2:6f:
98:2c:60:de:78:db:8f:25:c9:de:34:03:b9:42:c0:
19:8d:73:74:68:45:94:5f:e4:53:9c:b8:a0:dd:3e:
99:fd:3d:ff:a4:57:2a:59:54:71:25:43:f5:19:48:
4b:f7:48:f5:0b:e8:93:63:ab:c7:b3:dc:e8:ca:36:
27:b7:83:cd:be:d2:e4:25:25:94:07:df:a3:43:a3:
ad:7e:e6:a2:3e:7f:e4:cc:40:f5:8f:67:4c:1d:96:
ec:73:9f:fb:f7:78:11:dc:93:6a:1e:8d:a7:3b:18:
50:2b:c0:29:74:a5:2b:4e:43:7b:80:1c:76:7c:b4:
2a:c2:d3:fb:b6:70:3c:af:09:27:e2:f6:87:53:ce:
38:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F6:09:36:6F:DF:B9:5C:3C:79:19:13:E7:0E:EE:41:77:08:DE:17
X509v3 Authority Key Identifier:
keyid:8D:33:7C:0C:85:69:46:B8:FB:DA:F2:85:F5:2C:AD:DC:F3:8A:D0:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTN8DIVpRrj72vKF9Syt3POK0Kg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/5c9bd9-09ad-4fac-bbbc-3f15f8836dbb/1/jTN8DIVpRrj72vKF9Syt3POK0Kg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:39:ec:21:4f:3e:db:05:03:47:75:dd:79:3e:c2:be:60:9d:
3c:64:86:93:ce:3c:e1:11:f4:d5:62:6d:03:c7:5a:2b:2a:3e:
84:99:11:60:d6:54:6b:d2:16:62:07:f9:94:d1:89:a6:4d:ad:
34:21:3f:cb:51:6a:6c:37:ea:d4:5d:a6:1d:71:ba:40:44:a9:
b2:74:d4:87:df:cc:ec:07:fb:51:42:79:f1:36:f6:27:a0:6f:
51:7b:d8:b8:80:68:40:83:3b:53:38:ba:04:2f:45:f6:66:4e:
84:ba:9e:8a:56:c6:72:59:e0:d8:82:41:83:c7:d2:cd:94:fa:
80:28:5d:41:71:ff:68:09:96:dc:12:70:2a:1a:d5:51:11:f9:
bf:fd:ae:e3:53:e9:f3:46:9e:7c:17:d7:d4:32:b5:7c:8c:ef:
90:1d:47:5e:da:50:d3:7d:9f:f0:c5:ce:c6:33:7d:d1:65:60:
ae:ca:10:3d:d1:4d:bf:94:e7:96:f9:72:d9:35:de:2d:fb:c8:
9b:df:71:87:1d:7a:bd:75:52:24:63:a8:01:cd:18:2e:dd:90:
cb:67:86:00:2d:d5:01:11:8f:d3:21:9d:35:aa:76:bf:31:ad:
2f:53:89:16:d0:e3:a2:61:50:9e:5a:4e:cf:bb:ed:98:eb:7e:
f4:22:8b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 22:07:56 2025 by rpki-client