Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
File: JHvwudcpiha5hv1pVPCkRfLiEDw.mft (raw, json)
Hash identifier: DLIFpUeK2DHa/jfeTNnElAy/uqfU5/7s55qTE3015R0=
Subject key identifier: 60:8F:AB:CC:FA:F5:92:30:FB:35:BE:1A:A6:AF:DE:FD:1E:75:7F:3A
Authority key identifier: 24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
Certificate issuer: /CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Certificate serial: 019A23D2F842E2E29CE414FC144113A1CB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 04:00:19 +0000
Manifest this update: Mon 27 Oct 2025 04:00:19 +0000
Manifest next update: Tue 28 Oct 2025 04:00:19 +0000
Files and hashes: 1: JHvwudcpiha5hv1pVPCkRfLiEDw.crl (hash: Vsq3GkiaCB82Wq02abXKzpmZGsAjQT0WraSmV9vHCu4=)
2: M1rH5imTv_z7sg0DBQQ2ZUDiOdE.roa (hash: Di3stSxtNFdk8NJg2rUPI7WyOatBqa+pZ2chuvZrKec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d2:f8:42:e2:e2:9c:e4:14:fc:14:41:13:a1:cb:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247bf0b9d7298a16b986fd6954f0a445f2e2103c
Validity
Not Before: Oct 27 04:00:19 2025 GMT
Not After : Oct 28 04:00:19 2025 GMT
Subject: CN=608fabccfaf59230fb35be1aa6afdefd1e757f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:e5:b8:66:50:cc:63:cd:c0:8c:1c:8b:7e:
c6:49:ba:3a:fb:4e:a2:e2:92:1d:ea:d3:50:ed:e0:
73:47:5a:ab:75:41:ff:c1:10:d2:2c:59:da:25:3e:
28:54:70:eb:f4:b5:4b:55:29:53:a8:87:c9:3a:57:
6b:f0:e2:61:e3:8b:0d:76:75:88:6b:67:99:0e:1c:
c7:87:d1:15:f0:30:2b:0f:c0:88:28:22:8d:08:df:
be:e4:5d:da:d0:f7:ad:97:83:b4:de:7c:24:64:30:
f3:d4:e6:5e:84:d9:30:b9:7e:b3:bc:c8:cb:b8:4f:
d7:68:9a:23:42:1a:8f:3c:19:cd:97:be:dd:70:4d:
e6:15:7b:ec:d7:de:14:5c:31:28:36:cd:aa:4f:37:
fa:b8:ac:09:e8:64:58:05:2f:57:59:7f:3b:b9:7d:
a5:e6:0d:07:bf:15:2b:4b:54:c6:f8:5a:bd:0c:ce:
dd:3c:39:5a:45:4f:a9:7d:ef:11:0c:b5:fa:67:8e:
12:81:0f:a5:1b:e9:1e:58:1c:5e:26:11:b5:22:19:
4e:b6:1d:01:f4:6c:bb:90:e4:2b:52:34:64:8b:4b:
78:88:77:8c:08:e3:24:8c:13:e9:bf:35:e1:53:1e:
42:fe:83:1d:aa:5c:18:10:33:4a:79:d3:f9:56:7f:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8F:AB:CC:FA:F5:92:30:FB:35:BE:1A:A6:AF:DE:FD:1E:75:7F:3A
X509v3 Authority Key Identifier:
keyid:24:7B:F0:B9:D7:29:8A:16:B9:86:FD:69:54:F0:A4:45:F2:E2:10:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHvwudcpiha5hv1pVPCkRfLiEDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/f83620-99ac-4a41-ad0c-be01d69c033b/1/JHvwudcpiha5hv1pVPCkRfLiEDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b1:02:7b:ba:d9:7e:73:0b:df:80:0f:e3:b1:2d:5f:45:2c:
27:36:78:75:59:f3:dd:5f:89:50:d1:0b:06:88:e5:5e:f0:71:
30:ef:99:ca:0e:14:37:77:ca:21:64:50:e3:0b:0a:d2:b5:ec:
46:b2:02:66:9d:09:1e:b4:d8:2a:77:1f:41:2c:09:20:5d:8c:
43:5b:b7:9b:0d:02:7e:0e:88:42:c4:45:72:4b:e3:f7:eb:89:
48:2c:c9:90:4f:c2:bf:b7:18:fd:86:bd:94:56:9a:22:9b:5a:
b7:84:f7:3f:2e:54:34:03:16:07:28:ff:c4:91:e8:cb:07:bf:
2f:a3:50:7c:12:7b:44:d9:bb:5a:4f:11:cc:4e:32:e0:3d:bf:
e1:90:52:8a:34:75:ac:a3:4b:ff:29:ce:c6:97:6a:0d:94:c4:
1c:f5:df:a2:47:0a:53:0b:a8:e1:fb:a6:99:24:08:a6:10:44:
30:f6:7b:c2:99:33:d0:af:fa:a7:d4:e4:54:bc:49:f1:85:f9:
3a:3c:98:c0:40:33:45:9b:d3:6f:c1:1a:78:36:9a:35:00:d8:
8d:bd:64:9d:67:cd:41:3d:0f:e0:03:e1:b3:2e:e5:af:32:8a:
34:34:77:18:99:82:a3:45:c1:da:0d:cb:95:75:96:c6:5d:38:
1d:89:2c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:24:25 2025 by rpki-client