Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
File: j5-COvmTs5lcnl_0wii9-ZRR-4o.mft (raw, json)
Hash identifier: jUkMJAdrxm9kv0hTLVgabNkCZYxTWip2TXvP9Bf0krY=
Subject key identifier: 16:6F:08:E8:80:27:E6:48:AA:7C:4B:9E:52:9E:AD:E0:A0:65:25:39
Authority key identifier: 8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
Certificate issuer: /CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Certificate serial: 019A2A79B65A1830ED0DD1277A1A6686A635
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
Manifest number: 04AA
Signing time: Tue 28 Oct 2025 11:00:10 +0000
Manifest this update: Tue 28 Oct 2025 11:00:10 +0000
Manifest next update: Wed 29 Oct 2025 11:00:10 +0000
Files and hashes: 1: 8KsjpNRaIZUXOi8DwLVHVI28dt8.roa (hash: SXYejuZAdmSHLj52AFM2feQKm4GSepnKMI2O57vhHV0=)
2: j5-COvmTs5lcnl_0wii9-ZRR-4o.crl (hash: 0wf4+G6rgJoTyFy/ARW3nAZyF71szi3L+tMlgKAcwac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:79:b6:5a:18:30:ed:0d:d1:27:7a:1a:66:86:a6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9f823af993b3995c9e5ff4c228bdf99451fb8a
Validity
Not Before: Oct 28 11:00:10 2025 GMT
Not After : Oct 29 11:00:10 2025 GMT
Subject: CN=166f08e88027e648aa7c4b9e529eade0a0652539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:58:66:fe:21:10:94:c9:ee:a6:11:68:9d:66:
51:97:21:b7:5d:f9:65:75:52:78:39:ed:0e:17:00:
da:25:3c:ab:59:4e:bd:18:dd:08:ea:89:53:04:d1:
f6:42:da:7b:13:99:e3:ee:16:e8:45:9f:e7:f3:e0:
53:eb:70:33:12:84:04:14:dd:5d:ea:74:d9:bc:3e:
c5:9c:0f:0f:d8:d8:0a:06:10:47:0e:60:f9:08:a8:
70:54:e4:89:f0:c5:09:8f:b2:d7:ee:60:5f:5f:c1:
f6:85:83:98:7a:cc:24:07:05:e1:e8:0e:8a:c0:a6:
ec:b5:25:cd:35:8f:01:d3:db:22:b9:66:97:43:76:
7c:1e:40:b3:ca:7c:cf:ca:68:2d:29:78:9f:47:cd:
79:0f:00:a8:fb:07:8d:82:ae:a6:e2:2e:ee:e7:7d:
22:75:84:bb:5c:cc:24:fb:72:dd:f3:99:9d:2f:1b:
3e:12:c9:ad:98:79:cd:7b:ec:58:0a:09:4e:0b:c5:
c1:37:91:43:02:05:ec:20:f7:55:55:75:24:ab:83:
09:08:45:eb:15:19:78:1f:cb:9c:5b:e4:4e:7a:ee:
19:1b:d6:d4:3f:74:84:20:5c:b0:40:2a:41:64:20:
17:f1:3a:66:42:59:5e:17:89:4f:1f:22:a5:e6:98:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6F:08:E8:80:27:E6:48:AA:7C:4B:9E:52:9E:AD:E0:A0:65:25:39
X509v3 Authority Key Identifier:
keyid:8F:9F:82:3A:F9:93:B3:99:5C:9E:5F:F4:C2:28:BD:F9:94:51:FB:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5-COvmTs5lcnl_0wii9-ZRR-4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ce4d81-ec54-492e-a751-1511689c3c8a/1/j5-COvmTs5lcnl_0wii9-ZRR-4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:89:6e:03:65:2f:36:02:7e:bf:9d:18:22:df:20:07:07:d0:
c0:72:6d:ce:b8:fc:0d:75:c6:1b:6f:63:28:be:02:45:9d:36:
49:fb:22:7e:40:a1:ce:91:91:a0:cb:0e:b9:3a:98:57:3b:f9:
36:c0:1d:d0:be:df:7c:1a:65:70:1e:bd:dd:a4:75:1f:93:69:
1c:43:26:94:e1:d8:f0:a1:34:b7:c9:1f:1d:6f:0e:69:83:33:
68:cd:2a:42:0f:bb:8f:96:06:68:d7:c3:28:ca:5f:7e:df:74:
2e:b8:c6:aa:ca:9b:d5:68:79:ad:fc:fa:a2:03:16:bb:3e:a0:
1e:60:9b:73:40:1f:ba:e2:b3:d0:bd:7b:f7:2a:cd:4a:19:f4:
71:83:1a:71:9a:e5:5b:61:60:65:ad:b8:52:83:0f:22:19:a1:
41:2f:62:58:75:8b:3a:8a:56:e3:ed:21:0e:dc:a1:f9:37:2d:
79:51:5b:72:d2:5b:fe:d9:80:e8:a7:55:6b:6b:aa:22:f9:f4:
10:cb:76:8e:3f:4e:05:b3:f7:2d:7d:c7:80:91:4b:f8:c1:be:
b2:f0:63:03:ad:f7:52:15:fb:d5:6e:79:a9:9e:ee:7b:05:dc:
ba:d3:d6:1d:b7:ca:54:03:b3:3c:0e:18:f8:5b:f5:f7:f8:39:
89:1a:a6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 18:42:09 2025 by rpki-client