Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier: B34f4XL/ONkvEHN1Cp3J08cBgI9Q/ZezcXCN+pIIie8=
Subject key identifier: AE:8C:00:88:43:5E:79:C9:1E:56:89:A7:06:BF:AF:27:C1:22:81:F4
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 019A2E56B9E2A90D144601A38015EFC8B7EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number: 16FC
Signing time: Wed 29 Oct 2025 05:00:26 +0000
Manifest this update: Wed 29 Oct 2025 05:00:26 +0000
Manifest next update: Thu 30 Oct 2025 05:00:26 +0000
Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: wFvYW+w5UEXgKIR9gFQuvjGcPTqWHNPRP8YKQuKLJvg=)
2: RfXdB1uHqTBN6RI4Ei6Oa090sJU.roa (hash: dQnKrWhdakZ+384uTWhQC1swu7fczbqA0NfqM/pjIIQ=)
3: wtfqM181rNTZILTtZZuVyGYsV2g.roa (hash: jL1T6NkOiM+9LzgY51xQQ/S9ZQ9hPL5ZNlX1CHentpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:56:b9:e2:a9:0d:14:46:01:a3:80:15:ef:c8:b7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Oct 29 05:00:26 2025 GMT
Not After : Oct 30 05:00:26 2025 GMT
Subject: CN=ae8c0088435e79c91e5689a706bfaf27c12281f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5f:67:82:7e:6b:ee:ed:14:4c:54:ce:5f:a7:
a6:3c:14:e6:65:d3:43:fe:11:58:f3:0c:68:86:bb:
a9:e0:4e:c3:c9:96:e3:37:71:2b:e4:93:90:c4:ae:
f1:53:16:07:49:c2:dc:92:ba:dd:aa:a2:0a:42:61:
80:f7:ee:ad:5e:67:43:f4:45:93:38:53:7d:42:10:
cc:60:0b:f1:a1:8c:fe:f6:7f:e4:f2:86:4d:dc:30:
24:f8:09:ab:85:d8:fd:23:5d:8a:0d:7f:41:99:d2:
1c:f7:6b:8e:a0:34:45:f8:91:12:8f:11:ff:27:dc:
6f:16:dc:14:00:27:db:8a:11:7a:78:87:ac:bd:45:
95:c1:b3:8e:f7:bc:f2:07:b4:5b:f2:a0:c4:fa:90:
0f:a8:0e:1f:31:ad:ed:1f:13:07:3b:2b:c0:7c:15:
f4:46:93:e8:86:a7:89:3d:21:8d:1d:9a:43:58:bd:
96:8a:70:40:d3:af:b9:f4:19:51:c9:fa:d0:8a:bf:
86:3e:9a:04:93:50:39:ff:e5:38:df:01:13:40:5d:
c3:17:37:b6:fd:4b:84:10:61:a6:67:26:cb:68:26:
b6:17:7e:6c:3c:4c:1e:7d:35:5b:6d:db:4b:3d:e4:
ad:01:5e:ce:d8:13:a4:78:22:20:7c:2c:61:7a:b7:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:8C:00:88:43:5E:79:C9:1E:56:89:A7:06:BF:AF:27:C1:22:81:F4
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:db:ff:f7:fe:5e:cf:39:01:b3:55:d7:f3:85:d5:07:af:9c:
bd:a0:46:d5:0a:01:cd:17:a7:ad:a8:f9:a1:66:85:30:a2:7a:
04:9d:19:c1:6a:40:59:63:2e:6a:72:02:ea:5e:c2:01:d0:96:
80:0e:fa:54:2e:81:3a:05:de:55:94:a1:25:46:e4:09:3b:20:
35:0f:a0:8d:7f:b7:d2:16:37:28:69:a0:f5:b6:f8:66:ef:5b:
7a:db:12:bd:8c:9c:54:34:fc:c1:3d:38:21:60:20:e4:51:1d:
97:c8:65:c5:b8:f4:c5:76:82:9f:d5:db:ed:97:72:94:36:3b:
3b:05:84:9c:7f:57:e3:6d:18:cf:9b:c9:3c:27:51:dc:b3:67:
b6:45:99:ec:bd:a7:f3:49:88:e3:ed:b9:26:10:37:fb:1d:5c:
46:52:4a:49:99:fe:55:50:c4:ef:91:ce:9f:e2:4b:7a:72:f6:
9d:7b:2d:29:87:cd:7c:aa:26:b9:bd:f7:c8:cc:d0:15:61:8f:
ac:80:6b:d5:d6:bf:e8:c8:f8:8e:67:09:4e:e4:b3:39:bb:a9:
f3:7f:3d:e6:fd:c5:cb:1a:3f:c6:cc:c3:b5:1b:c6:cc:fd:c8:
fc:6e:54:3b:04:a2:a3:5b:75:62:7f:be:a7:c5:89:3c:bf:95:
cd:dc:4f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 13:13:56 2025 by rpki-client