Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
File: jJ3M-eLzfrEHSWp6rxOJTsR243U.mft (raw, json)
Hash identifier: w0u/BBJM3i9pYhKKk+tQ2g2M4ut1l9GHqptPyzkLFBw=
Subject key identifier: E1:EE:F7:8C:A8:26:D6:52:7E:8B:38:1F:23:9E:F3:1E:D5:58:0F:4C
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Certificate issuer: /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial: 019A13BB157BE9EEA1C1AEC0A5035B20EA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
Manifest number: 0D17
Signing time: Fri 24 Oct 2025 01:00:19 +0000
Manifest this update: Fri 24 Oct 2025 01:00:19 +0000
Manifest next update: Sat 25 Oct 2025 01:00:19 +0000
Files and hashes: 1: 52ZQ5PtYcXOVHNH-cKfCvXr-NLk.roa (hash: IeCBQ+eKPNR/krpQbJSGOw+keX8AySOWQVyhW1zLVTg=)
2: jJ3M-eLzfrEHSWp6rxOJTsR243U.crl (hash: dvC3SzGtCX/lspDU9u0a+qLVpsIivLvfrfDpZjQWF4w=)
3: k6vAZPYoHdRCo63AYTmi48skRhw.roa (hash: SzdnDp8HU7dtL+1ssCq3abGfy6JSu5LenwIqWzaID2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 01:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:bb:15:7b:e9:ee:a1:c1:ae:c0:a5:03:5b:20:ea:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Validity
Not Before: Oct 24 01:00:19 2025 GMT
Not After : Oct 25 01:00:19 2025 GMT
Subject: CN=e1eef78ca826d6527e8b381f239ef31ed5580f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b1:7f:4f:1f:b5:70:59:79:46:d7:64:a2:d6:
7e:6a:74:30:18:56:94:53:a8:38:6c:1f:80:c2:1e:
51:8c:91:b5:54:3a:84:18:38:43:35:3e:c3:99:ff:
a0:14:6b:e4:90:0b:45:81:9c:0f:e4:2a:2f:af:a7:
58:bb:d0:ad:02:77:2c:b0:a7:9f:5b:7a:27:23:d2:
dc:02:6f:cf:10:e4:01:b6:ed:3a:4d:22:2f:ca:93:
18:92:4f:08:2b:b5:ff:0e:6d:31:e6:18:a4:50:0c:
a4:f2:02:2c:69:bf:6e:a9:58:89:34:b0:f3:4f:f2:
d6:77:c4:90:28:cb:2a:31:dc:06:c4:f7:46:30:24:
e8:ae:c5:96:5b:a7:31:95:01:6e:64:a6:69:ed:a6:
46:e2:31:3d:79:cc:7f:89:1e:27:10:fc:8c:d6:3f:
de:f1:c3:52:a6:3d:2d:a5:cc:a8:c1:d7:1b:42:2c:
ca:ec:96:a9:2a:90:22:86:c3:ab:47:6f:72:08:38:
56:9e:a4:55:4e:8a:5c:4a:12:43:c4:36:3f:59:e2:
8a:80:18:6f:cf:6e:f0:08:7f:4a:e9:32:76:2d:d5:
aa:c8:a9:ef:4c:8f:e9:69:88:f6:ba:c4:25:f3:f0:
18:21:c9:a1:c8:09:f0:4f:79:c8:b9:22:37:cd:1b:
19:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EE:F7:8C:A8:26:D6:52:7E:8B:38:1F:23:9E:F3:1E:D5:58:0F:4C
X509v3 Authority Key Identifier:
keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:48:13:0c:c1:24:aa:4f:b5:c3:31:5b:c5:fd:33:4a:95:7f:
f5:c6:d6:61:a3:21:68:0d:25:68:4c:f4:57:ac:f9:e1:00:65:
8f:36:11:67:f0:7e:ef:16:b7:f6:33:8f:59:a3:d1:5e:3d:dd:
3d:6d:22:6f:45:17:5f:9d:2c:ac:c9:a1:3e:84:28:54:c1:33:
1d:d2:60:36:a0:1d:5b:3a:98:29:0b:6d:3a:3a:b5:5f:9d:16:
f9:24:c9:25:cf:fc:d8:29:54:9e:3d:7c:73:32:b3:d6:9a:4e:
84:7e:56:39:22:a7:18:2b:c4:4f:e1:c1:15:21:3a:a3:84:29:
0f:45:cc:c9:ee:ab:20:c5:8b:3c:06:09:08:a5:91:90:b9:a5:
70:f1:72:c1:a0:25:ef:25:b6:7a:a1:9d:75:6a:d1:8b:dd:be:
44:1d:5f:b4:1a:d2:d5:a8:09:2a:d4:48:76:ec:f5:58:17:fa:
9a:13:78:22:df:05:de:94:38:e8:89:19:cb:d6:40:db:ae:6b:
fb:6a:79:c4:68:e3:8d:0b:66:30:39:39:67:c9:a8:8d:52:6d:
68:d9:6e:54:db:f5:7f:70:a3:b1:80:f4:fb:38:c8:d7:e5:0d:
d0:0d:73:dd:db:28:02:ee:82:fa:d9:83:d8:8c:c9:f3:fb:07:
dd:0c:6a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:51:20 2025 by rpki-client