Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
File: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft (raw, json)
Hash identifier: K/8Cj4wa9IVnGVhmKaQSTqc8V0sDcLAN2kS8ZgqGVVk=
Subject key identifier: 07:4B:10:F6:B5:31:63:EB:00:88:73:47:DF:26:90:8F:27:76:F4:02
Authority key identifier: 8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
Certificate issuer: /CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Certificate serial: 019A1FBFA7338050C6F9D216FCC6E2C5866C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
Manifest number: 0D9C
Signing time: Sun 26 Oct 2025 09:00:44 +0000
Manifest this update: Sun 26 Oct 2025 09:00:44 +0000
Manifest next update: Mon 27 Oct 2025 09:00:44 +0000
Files and hashes: 1: jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl (hash: fboj69PFJoP4Ko440/eS1fUcGbjKnXx+bqUIppYQwms=)
2: m7ILrNfOu-eUx2B6UsntAxtlq9s.roa (hash: /izsLpJMnyLjcBC/dWPj3hHlKW+Ou/8dO/Ifh1Ai218=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:bf:a7:33:80:50:c6:f9:d2:16:fc:c6:e2:c5:86:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dac679b480a78ead797f2e0b7779e58f2271f24
Validity
Not Before: Oct 26 09:00:44 2025 GMT
Not After : Oct 27 09:00:44 2025 GMT
Subject: CN=074b10f6b53163eb00887347df26908f2776f402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b6:be:5c:5e:95:24:01:24:5c:e1:81:01:02:
c4:d2:99:f4:06:46:b4:93:61:64:dc:ef:1b:4d:76:
8e:1b:9c:8a:72:fa:80:d1:32:b2:a5:78:e1:17:8b:
fe:ce:48:27:26:b7:69:cf:f0:71:2a:f4:5f:16:1f:
49:d3:48:d0:9d:cb:03:c5:3d:08:d9:2e:0e:32:f8:
ab:07:2e:1d:b3:23:bc:bb:96:a3:7b:e0:e6:08:bd:
49:47:b2:60:bb:43:f4:a2:d9:31:ba:5c:9d:59:d6:
96:61:a0:36:09:1c:86:05:5f:09:25:fc:10:96:12:
e3:b1:be:4f:56:98:d1:ce:98:b7:8d:6b:e6:c1:7d:
a8:76:34:e9:20:20:b9:40:40:2e:67:1f:23:7c:d9:
ba:eb:de:f4:87:49:ec:be:14:59:ff:16:8f:05:16:
ad:a6:4b:70:60:16:cd:6a:d6:19:00:8a:82:10:a8:
f2:6f:8a:3f:49:dc:6c:04:29:4a:05:22:5b:0f:c0:
e4:81:68:57:ac:0d:83:0b:aa:31:c0:f3:8b:f4:0f:
bc:a5:6e:e8:95:c4:74:16:e9:61:eb:13:c1:b8:db:
71:b5:c6:34:a6:6a:21:f4:84:00:b9:31:11:ba:22:
6b:21:ae:4a:0d:b7:49:a6:c5:ca:3f:a2:08:df:da:
5a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4B:10:F6:B5:31:63:EB:00:88:73:47:DF:26:90:8F:27:76:F4:02
X509v3 Authority Key Identifier:
keyid:8D:AC:67:9B:48:0A:78:EA:D7:97:F2:E0:B7:77:9E:58:F2:27:1F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/778ce0-2cc2-490b-a6e2-6020e8a56556/1/jaxnm0gKeOrXl_Lgt3eeWPInHyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:d0:a7:2e:59:9c:82:f8:dd:bf:34:a7:73:59:1d:c2:97:01:
06:e5:f4:d4:7b:12:b1:c2:8a:9c:06:da:a4:ba:a5:37:c1:9b:
66:dc:d4:6d:48:b3:0a:3c:1d:63:d2:a8:0c:11:66:55:58:31:
94:d3:8a:d9:99:62:6d:de:2d:d5:92:ca:21:9d:97:2e:6c:6d:
06:7f:b0:c5:79:8d:13:a4:7d:3b:a2:d3:14:f9:d6:56:98:42:
20:d5:b9:8d:04:07:07:f1:bc:f1:1a:1b:04:cd:5f:bf:fe:a0:
9e:20:5b:8c:98:bb:51:dd:88:f7:53:6d:1d:74:31:34:e3:aa:
a9:a0:a6:e3:26:33:63:d2:31:fa:de:19:24:c2:f6:bf:d3:cd:
a1:76:d1:38:58:c9:46:1e:c7:f9:f4:11:dd:36:5c:33:05:fb:
8b:fc:d3:3c:c6:4e:6c:b4:be:55:0b:7d:dc:b3:c6:7f:3b:95:
79:f9:ac:c8:f4:cb:51:28:d3:98:35:d7:9c:1b:a4:46:8e:5e:
6d:2c:88:0a:31:1a:20:ca:f7:af:5c:27:1d:78:82:7c:35:f7:
3b:0d:29:98:d4:14:ba:c4:f5:6f:24:59:06:2e:41:e5:89:eb:
9b:72:92:63:e9:7c:d0:08:82:6a:93:9d:f1:9f:f6:10:03:69:
19:65:61:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 16:48:47 2025 by rpki-client