Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
File: Jr3smdiVZaY0p7LFQB_tesR78jI.mft (raw, json)
Hash identifier: PYstimVvAJAG01TbC67g9KW7O92WB6dPcBX+TzBezBQ=
Subject key identifier: E0:99:4D:29:32:75:8A:97:50:E8:1A:41:34:93:32:06:D2:25:41:79
Authority key identifier: 26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
Certificate issuer: /CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Certificate serial: 019A24793D908A9619E5B46CD6C61B46A90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
Manifest number: 16F7
Signing time: Mon 27 Oct 2025 07:01:56 +0000
Manifest this update: Mon 27 Oct 2025 07:01:56 +0000
Manifest next update: Tue 28 Oct 2025 07:01:56 +0000
Files and hashes: 1: Jr3smdiVZaY0p7LFQB_tesR78jI.crl (hash: WUDbJfUFWdwZeUT7vgZzvb6MP1MVmFPiYueZ1ShVoyg=)
2: eh296nLCSptPg6qq0l-hiNgSg8s.roa (hash: kVuRpdEJxlUkflKXQSCqrY0EKJTwkUP2EszNXGQOqXE=)
3: u7zHiSjsnFwFOa-a4a5i2VA8gFc.roa (hash: GVFgF0gAIU+Ptj/IEQiwtzNx/eeTLFsX6erX9jxLBDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:79:3d:90:8a:96:19:e5:b4:6c:d6:c6:1b:46:a9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bdec99d89565a634a7b2c5401fed7ac47bf232
Validity
Not Before: Oct 27 07:01:56 2025 GMT
Not After : Oct 28 07:01:56 2025 GMT
Subject: CN=e0994d2932758a9750e81a4134933206d2254179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:71:5a:12:2c:4a:57:6f:a4:2a:b6:de:43:
41:46:8d:20:7d:a0:54:a3:da:f2:f3:eb:2a:78:9e:
e1:1f:0e:8a:e1:24:3a:41:aa:a8:80:0f:5a:17:e1:
cd:8a:0a:85:77:58:fa:9b:12:b1:63:97:5d:f8:fb:
e7:a4:bb:8c:7b:cd:f7:26:48:0f:f9:75:c5:8e:59:
0c:ba:0e:43:b3:10:47:56:3c:4d:77:3b:4a:ed:b0:
e7:5e:ee:5b:7e:88:7f:af:d1:73:df:6c:8f:f2:d2:
4b:71:77:b2:cf:f7:6e:45:12:7f:c0:01:d9:cc:b1:
8c:d5:c2:97:ec:53:ef:f3:e1:4c:ef:6c:6e:f8:64:
ee:15:50:df:68:b7:19:31:00:f5:5d:20:a0:26:a6:
3b:b0:45:f3:f1:f2:f5:84:c4:18:0f:65:c0:08:35:
3e:4a:b2:b1:08:be:f2:f7:3c:cb:06:29:d1:53:1e:
56:ed:82:1c:1f:64:65:32:a8:29:4c:88:25:c3:1d:
8f:fb:54:f2:ce:f4:34:f6:9e:cb:d2:a6:93:96:3f:
45:29:0f:8e:0e:5c:e4:da:e4:2f:73:f2:bd:85:09:
d5:4f:27:10:aa:00:11:29:12:ae:71:a1:34:8f:94:
cc:88:ca:5c:4a:6e:88:46:78:da:27:d4:86:40:ec:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:99:4D:29:32:75:8A:97:50:E8:1A:41:34:93:32:06:D2:25:41:79
X509v3 Authority Key Identifier:
keyid:26:BD:EC:99:D8:95:65:A6:34:A7:B2:C5:40:1F:ED:7A:C4:7B:F2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3smdiVZaY0p7LFQB_tesR78jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/c57dc2-cfa9-42b9-b9c7-7f201212d883/1/Jr3smdiVZaY0p7LFQB_tesR78jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2b:93:95:25:e1:c8:82:70:18:00:83:ff:2e:03:c5:79:56:
ec:c0:3b:06:e8:f1:b8:71:f2:af:87:8d:75:fb:99:73:22:93:
c4:3f:94:25:af:5c:da:91:ac:a4:9d:f2:7b:22:ff:91:6a:2f:
2a:ae:0d:c5:a3:28:e1:af:84:cd:07:42:60:98:83:52:e0:07:
0f:50:5e:c4:84:94:ee:16:2c:bc:21:b0:bd:5d:64:97:a7:74:
9c:c3:6d:aa:bf:82:31:10:d5:3c:49:ce:6e:97:db:b4:95:85:
cf:aa:05:fd:b9:ba:c7:88:6a:a1:8b:78:37:24:5d:f9:2b:6c:
b1:c8:f7:df:56:25:16:e1:2f:d5:92:d4:26:08:0c:d5:ad:3f:
47:6f:5d:fc:b9:a1:89:95:30:4d:33:12:32:2b:70:c4:5c:e8:
0f:e4:86:47:e4:35:a2:6b:f0:1c:05:81:89:02:01:d4:d6:80:
b3:80:a8:cb:15:3f:f0:83:c3:73:61:53:02:14:2d:ea:9e:fb:
29:37:ad:76:b0:09:d5:e5:ff:00:ef:56:b4:42:40:b5:38:df:
57:52:f2:3b:63:be:e1:a8:c3:c6:dc:18:a1:01:ac:97:e2:64:
89:3d:0b:e3:a7:09:e5:16:34:09:f5:b9:e0:3c:6a:87:d7:a6:
a6:51:b7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:31:41 2025 by rpki-client