Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
File: jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json)
Hash identifier: mKO64lMyq2q0MMmMVr3f9tNISTJD7JKe6L75uC9Dl70=
Subject key identifier: BA:D7:87:7C:4E:F5:DF:F4:0E:A2:46:68:10:F9:4E:7D:F1:2D:01:FA
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 019A269CF7695FF9006FD15B78DC6D5B0D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
Manifest number: 168B
Signing time: Mon 27 Oct 2025 17:00:12 +0000
Manifest this update: Mon 27 Oct 2025 17:00:12 +0000
Manifest next update: Tue 28 Oct 2025 17:00:12 +0000
Files and hashes: 1: 5fSz0gTL93bDKbRX7UB399KTqWo.roa (hash: ZekzmLJCJyI/RlrN5lYEw3o4UXuAl+RnUA/jnalWWzw=)
2: QEmXwsIj7ueEdKdwPu44tosMpfM.roa (hash: 2lzHt7XOAfmu9gjrRW7d2O3LPWtVfpw+P41EhC9URe8=)
3: bce44foTbAKg3tHOJ0Qgt1xOcf8.roa (hash: F4bF540q8PJ+GpaHKowNj8adXBg7SShvDYJVRvSviDg=)
4: dNxBOY3fJxweU0pOsjJMTtBxibI.roa (hash: +7/ZxVutYTL6jT8ak+OBnFIC5cdnfh0cuZkYLSLo+Fg=)
5: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: sJUpSbhNz66/uxqkS7Gy9cH0y1bGLbvAz2m971MyfKw=)
6: zEt70xhNCNspyv0BGLFGKL4d_Fo.roa (hash: NlwMM676+ehPCudhUDq8LrrGW5swFBYUpzUKu5v1ls8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 17:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9c:f7:69:5f:f9:00:6f:d1:5b:78:dc:6d:5b:0d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Oct 27 17:00:12 2025 GMT
Not After : Oct 28 17:00:12 2025 GMT
Subject: CN=bad7877c4ef5dff40ea2466810f94e7df12d01fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:4d:ff:f4:85:5b:70:d2:90:4c:bb:95:13:
e0:70:43:8a:5b:d4:6a:c5:86:e3:52:22:fd:f3:fa:
4d:db:7a:01:e1:67:bd:0d:0f:8f:7e:95:52:41:76:
53:4f:2e:16:a9:8d:ec:b7:20:7c:6c:55:84:ca:c5:
4d:1f:1d:17:09:09:4a:a2:bc:19:30:cd:ab:40:86:
14:ae:4f:32:c7:79:8b:88:20:95:a0:15:63:94:ab:
a7:dc:d6:c9:f9:a1:ed:72:86:13:be:9c:e7:f8:53:
a6:9b:3e:c3:ab:03:29:77:12:e0:ee:69:2c:a4:44:
20:06:68:4e:bc:69:aa:ac:b5:5b:43:57:2b:da:b9:
ef:02:8d:3b:3d:c3:94:59:35:25:45:95:d3:41:8c:
f4:d2:4b:32:c4:9f:60:77:30:b3:1d:98:7b:6e:a6:
08:cd:8a:47:3f:77:5d:13:80:25:55:21:3f:52:35:
a5:a1:09:8d:ee:c3:41:51:d9:8f:c6:2f:3d:13:03:
4c:5c:6a:4d:48:d6:48:0b:6b:d7:d0:7a:d5:ab:c2:
7b:9f:ca:77:f4:f0:0a:68:94:c3:d5:7b:67:b0:26:
1b:b3:42:01:8d:85:93:a7:83:5b:20:53:c4:c1:90:
5e:b7:8d:8d:8a:94:dd:95:e3:f1:4b:f6:01:6d:5c:
f0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D7:87:7C:4E:F5:DF:F4:0E:A2:46:68:10:F9:4E:7D:F1:2D:01:FA
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:67:21:af:c7:94:c3:88:e0:03:ff:72:5c:e1:0d:97:f9:f0:
b6:6f:b3:b7:96:9a:0e:d3:90:8c:4a:06:c9:b4:fb:79:ba:49:
06:dd:bd:1d:34:db:93:ba:4a:90:a2:4b:ff:dc:15:f5:e8:42:
8e:84:ce:3e:91:40:08:f7:cf:0b:ed:18:aa:90:40:51:4d:12:
61:18:28:3e:05:21:3d:fa:4e:e8:33:24:b7:49:35:65:3e:32:
78:06:e4:f2:64:a5:2c:3d:0f:9c:be:1a:87:03:e9:d7:23:a8:
1c:ac:f7:fb:aa:59:74:e8:27:74:4a:18:e5:c9:b4:5d:32:15:
51:08:55:d8:6b:df:8f:35:a8:92:dc:a7:0c:b7:21:63:80:29:
31:ea:a7:c5:2f:d1:35:b8:a7:89:82:0f:ca:21:c5:02:32:6d:
58:94:33:4d:e8:0b:f7:a2:22:22:f3:26:a5:24:60:2d:16:31:
52:9e:89:03:b6:4a:67:05:90:d4:48:76:b6:2d:f4:0a:b1:e0:
ac:c6:2a:9c:06:87:33:e0:9b:58:95:19:b0:ce:ae:86:ae:be:
84:cc:55:98:73:29:1a:2b:66:a5:b3:30:de:d4:fb:b9:45:f0:
00:96:12:f7:52:ce:ee:83:7c:9e:35:9d:6a:48:e0:60:02:29:
71:5d:f5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:59:54 2025 by rpki-client