Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
File: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft (raw, json)
Hash identifier: IIuYtY2FXw/fGxqCwu2LU4x5jKCykR8JW/r633x7fJE=
Subject key identifier: FB:23:BB:A5:3A:95:96:03:50:0D:EA:DB:10:98:8A:47:C3:72:63:7E
Authority key identifier: 8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
Certificate issuer: /CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Certificate serial: 019A19BD9E825786CDC0F80E70F6752875E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
Manifest number: 16F0
Signing time: Sat 25 Oct 2025 05:00:48 +0000
Manifest this update: Sat 25 Oct 2025 05:00:48 +0000
Manifest next update: Sun 26 Oct 2025 05:00:48 +0000
Files and hashes: 1: jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl (hash: H9eCwthuzudGPEZ9m2g76Ox4YUc0lvhO0L11l7ns6T0=)
2: jimDe-5H6zrXzlwiRCOInbvPXSU.roa (hash: 0bIYKD/kK1rGLj7aPZgB8MSgTvL3rbLfVOH84c3hc+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:bd:9e:82:57:86:cd:c0:f8:0e:70:f6:75:28:75:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c7f251ac1190c9dedc8e5be085d54387f401a37
Validity
Not Before: Oct 25 05:00:48 2025 GMT
Not After : Oct 26 05:00:48 2025 GMT
Subject: CN=fb23bba53a959603500deadb10988a47c372637e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d1:08:9f:94:63:74:15:2a:94:38:45:6e:3e:
d9:3b:7d:11:2e:c4:9c:eb:4d:ae:5f:c7:aa:cd:8a:
3e:e6:04:e2:a2:43:96:5f:cc:33:7f:1e:08:83:4d:
c1:86:01:b5:5a:89:eb:d8:82:b5:85:e4:a4:25:45:
4c:2b:ce:12:88:7c:70:74:94:87:8e:f0:e9:47:9f:
ec:49:52:4b:cc:5c:ce:9b:ce:51:d3:5d:83:18:be:
ca:15:91:8b:4b:8c:b9:05:21:77:3f:0f:cb:2b:36:
8e:ad:76:c7:52:00:b4:3f:9f:e5:78:8f:c4:2b:a5:
32:5b:8b:d8:4d:1f:45:ab:cd:58:b1:c1:01:8f:77:
3a:da:44:35:71:ae:83:ff:78:75:7a:42:d6:e4:4b:
4f:ad:1f:2e:dc:4c:7a:95:6f:74:cf:e8:30:79:0d:
9c:72:24:38:31:48:4f:38:79:6d:22:91:c3:ab:a1:
35:98:62:d5:a8:7d:3f:e9:c5:7b:3f:3d:d2:f9:eb:
4e:6c:91:c5:bf:66:f6:ac:91:aa:87:30:4e:55:c0:
66:b0:b9:97:6e:66:a4:70:c2:78:98:01:c8:ee:9b:
b4:93:bb:e4:e4:56:37:fd:1d:39:67:d6:11:28:89:
4d:22:77:0d:81:f1:8e:3b:ad:77:40:2b:47:9f:f0:
06:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:23:BB:A5:3A:95:96:03:50:0D:EA:DB:10:98:8A:47:C3:72:63:7E
X509v3 Authority Key Identifier:
keyid:8C:7F:25:1A:C1:19:0C:9D:ED:C8:E5:BE:08:5D:54:38:7F:40:1A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b2e350-af90-4f9b-8fbf-500c7c45f419/1/jH8lGsEZDJ3tyOW-CF1UOH9AGjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:dd:38:ae:f8:7c:58:64:d4:db:39:8c:ef:0c:7a:86:ba:3e:
04:06:9a:a2:d6:b4:13:bc:fe:12:78:78:33:ba:1a:70:f3:d6:
8b:64:37:0f:56:45:f6:15:f0:6f:5d:e1:fc:96:da:be:e5:76:
5c:20:28:bc:0a:14:d4:05:db:ac:41:20:4d:8f:04:e5:66:6c:
ef:cf:c3:a7:e5:f0:c1:26:73:39:8d:ff:c6:20:50:27:dd:f9:
ed:d5:73:50:1e:54:ca:f9:25:39:df:f0:4a:e2:d7:01:4e:6d:
d6:f8:67:fc:c8:7f:ec:bb:58:6a:70:9e:03:50:c4:01:3b:10:
74:02:33:5a:1c:5e:1f:8f:79:1d:14:33:13:38:a0:f0:20:88:
28:a8:ae:6c:c8:48:7c:4b:a0:f9:eb:6b:df:a1:51:35:75:97:
1f:d1:ba:c3:7e:9c:91:b6:b4:e1:40:d6:4a:ec:68:c6:e1:9c:
4c:34:9d:9d:be:dd:1b:c7:e0:1c:a2:21:54:6b:4c:dd:aa:00:
a3:40:ab:bb:35:69:09:fc:e1:a2:79:80:33:b2:30:49:db:7c:
96:89:5b:80:a2:c5:c0:cd:2e:a4:7e:b6:a9:1e:36:32:4e:a1:
42:43:9e:13:50:d4:b5:77:fe:e9:9b:96:ba:48:33:71:d3:62:
e7:1c:ab:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 10:53:52 2025 by rpki-client