Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
File: jnAqYWwElB4snwcWUeScXfOu0LE.mft (raw, json)
Hash identifier: rNCHn1tUZJCrPDs05Vzn86RDT0tuJ+FNj1vu7KF8g0k=
Subject key identifier: 7E:1E:6C:38:0D:7E:EF:DA:BE:22:9C:3B:B3:AE:50:FD:AD:2A:D7:55
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 019A31FCCBD333645E0D12F9DA41C48C5DE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
Manifest number: 102A
Signing time: Wed 29 Oct 2025 22:00:41 +0000
Manifest this update: Wed 29 Oct 2025 22:00:41 +0000
Manifest next update: Thu 30 Oct 2025 22:00:41 +0000
Files and hashes: 1: LSJWw_ptvazCnhCar9l_Y1TpHAM.roa (hash: wjRArMMbVUG2mvjIwU1Y1QgYT+m8+bZU67i+Zotaojs=)
2: jnAqYWwElB4snwcWUeScXfOu0LE.crl (hash: U0uRpFh26HIRjMOxY+w3Y6H8IzO0iWYbt5FQTV7rL+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:fc:cb:d3:33:64:5e:0d:12:f9:da:41:c4:8c:5d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Oct 29 22:00:41 2025 GMT
Not After : Oct 30 22:00:41 2025 GMT
Subject: CN=7e1e6c380d7eefdabe229c3bb3ae50fdad2ad755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:d4:50:4d:91:73:6b:33:7f:16:7e:df:14:
fb:ac:40:56:50:5f:9f:e7:68:48:8e:a9:b8:8c:ac:
58:b5:87:f4:8f:67:eb:ff:be:f6:da:17:14:fd:45:
7b:08:30:14:bd:ec:e3:30:c9:bd:ed:4d:d3:39:f4:
7d:8d:96:f1:86:04:78:6d:a0:6c:d4:32:e7:02:67:
53:45:92:45:f8:89:07:03:e7:d2:b2:d7:18:e0:e3:
c0:17:9e:cb:ae:37:d6:20:5a:2a:df:e5:51:3c:f1:
5b:91:04:80:f0:81:ce:3c:42:6b:b8:10:29:3f:26:
64:79:a0:4c:41:d2:35:f1:2a:1a:8b:76:36:56:27:
f9:ce:9d:31:68:86:c6:64:d7:4f:57:54:75:16:ae:
88:08:bf:03:f5:32:c8:f2:37:b7:fb:78:30:bb:c4:
2c:34:ba:b3:f2:ff:89:d8:2d:39:6d:ff:a4:9e:26:
54:81:7b:ef:6a:48:47:5a:6a:53:b5:0e:56:5a:39:
87:d1:08:8f:63:85:aa:87:27:66:60:70:dc:4d:17:
e3:30:4d:06:6e:c0:e9:0d:49:46:8a:d5:5f:a1:44:
f6:cb:d6:50:50:74:7a:1b:79:a4:c0:30:58:f0:fd:
81:a0:d4:c4:71:9c:75:ab:86:96:d4:72:76:1d:63:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1E:6C:38:0D:7E:EF:DA:BE:22:9C:3B:B3:AE:50:FD:AD:2A:D7:55
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:e6:23:5c:ad:cd:36:90:c2:d0:0f:9c:e3:b7:ae:9a:14:a2:
34:1c:c9:2a:1f:22:09:f3:ef:4f:fb:07:84:bf:bf:8e:ea:f8:
35:6a:d2:5d:40:d5:75:d8:58:1a:30:d8:2d:bd:81:93:b9:7d:
5a:55:ae:61:27:15:c8:66:1c:04:ca:4d:24:70:21:8e:b7:49:
64:c0:fa:53:0e:07:74:2e:af:ac:9f:53:5e:25:ce:04:de:9e:
52:ec:78:c5:41:90:e0:57:3c:7b:bb:6d:23:dd:61:02:72:6c:
a7:d6:a9:fe:cf:de:65:84:ca:38:5c:bc:39:18:b3:01:4c:d4:
d2:e2:98:e6:5b:db:53:57:f7:11:99:c6:b0:32:16:8a:74:a6:
1b:27:14:73:43:2c:ec:fc:17:ca:47:0f:6a:83:70:5b:4a:bc:
8c:4d:0d:a2:52:17:8b:2f:a5:38:6f:02:ef:4b:d6:c6:ec:41:
af:4d:9b:ae:5b:e0:93:d4:4c:6f:61:95:30:97:16:71:be:94:
41:ad:4b:95:c8:61:f6:3e:5a:b5:79:5a:a1:34:a0:e2:44:e9:
f6:16:d3:4f:93:f3:ed:e1:c1:3c:14:01:61:0f:d7:92:d9:56:
17:8f:64:e5:88:ef:9f:e2:fe:19:fb:9d:4e:bd:79:ae:15:1c:
95:34:bf:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 06:10:04 2025 by rpki-client