Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File: jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier: LwRXDewYHt0NviCiwjppxPmvJSNYvfLvnDqMrnbPbag=
Subject key identifier: 4C:88:5B:80:91:AE:1D:09:A3:72:E7:CC:8D:9D:07:0F:EC:96:A8:8C
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer: /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial: 019A164ECA39B2AA9CE7CA3A0D92DBC83014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number: 0C20
Signing time: Fri 24 Oct 2025 13:00:53 +0000
Manifest this update: Fri 24 Oct 2025 13:00:53 +0000
Manifest next update: Sat 25 Oct 2025 13:00:53 +0000
Files and hashes: 1: hhrm1Em1WlxZZH38Jm2yxN4no3I.roa (hash: 3IW1YAxLQw3KLIWXwxwYcOQuTgohlVo0d+wGlA+Yr7I=)
2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: wqchxYs8K+u7JVd36c51NZkeUvYB6a70jnlU+iIJFYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:4e:ca:39:b2:aa:9c:e7:ca:3a:0d:92:db:c8:30:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Validity
Not Before: Oct 24 13:00:53 2025 GMT
Not After : Oct 25 13:00:53 2025 GMT
Subject: CN=4c885b8091ae1d09a372e7cc8d9d070fec96a88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:f5:1b:a6:50:f2:71:fa:0b:35:11:9e:0f:
ef:03:a8:41:7b:53:e9:ce:c6:25:61:e4:c4:d8:e5:
20:bf:16:5c:1f:44:ff:a5:8d:18:fe:31:5f:87:34:
b0:b5:c2:da:8e:cd:d2:c5:a0:b3:e1:9a:be:59:e6:
ff:34:f7:47:e5:f8:d0:17:c8:ec:f8:00:f3:c7:c9:
16:9a:cf:97:7c:4c:1f:61:ea:77:27:ab:ee:32:5a:
42:d0:6f:85:df:71:5e:1c:3c:d5:2b:5d:aa:64:dc:
2b:b8:29:90:ce:cf:cb:c5:5d:ed:b8:3c:4d:0d:83:
44:bd:86:4e:d7:21:49:50:86:4d:9b:9f:9c:60:ad:
39:7a:82:31:b6:89:12:c8:ff:01:3c:2a:ea:1f:ea:
1c:07:ce:74:f2:d6:34:bc:71:bc:6e:96:42:83:6e:
50:68:56:a1:52:00:53:15:60:4e:2c:3a:59:39:78:
04:d3:d4:f6:70:7b:2a:55:dd:cf:51:0b:f7:4a:82:
a4:1e:05:d9:e0:5e:02:af:71:c8:52:96:57:a6:c3:
36:cb:ca:33:2a:c7:0c:f3:35:00:94:e2:7e:7d:b7:
f6:89:a6:36:8f:55:8e:1c:4d:8e:a3:61:15:35:79:
3f:5d:56:97:a8:ba:e2:b5:65:36:42:5d:0f:e6:84:
e3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:88:5B:80:91:AE:1D:09:A3:72:E7:CC:8D:9D:07:0F:EC:96:A8:8C
X509v3 Authority Key Identifier:
keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:fa:d6:16:8e:5c:1c:2e:f0:1e:7e:89:e4:f3:ae:9e:f4:a3:
6e:e8:c1:3e:d6:24:c1:77:e3:0d:b4:1a:53:c3:66:a6:c8:c9:
30:86:19:f3:9a:3e:46:3d:0d:66:09:3b:ed:5e:58:08:07:67:
51:ea:eb:54:c7:6e:14:c5:39:53:00:40:d0:1d:62:2d:64:de:
20:4d:3b:bf:46:7d:a3:34:86:61:d8:e7:8d:52:eb:e5:86:f1:
06:08:55:f4:02:18:01:84:ea:29:9d:ad:f8:a2:7f:9b:76:9c:
57:dc:76:c3:49:41:25:25:1b:96:48:5d:d0:2f:72:6a:a5:2f:
7b:44:d4:2e:6f:8d:6f:04:c5:5e:e1:fc:d7:59:9a:a1:1d:11:
2b:e0:76:a0:a4:4c:29:01:c7:db:32:3a:8f:14:53:71:6f:fc:
d6:5a:fc:e1:89:5d:f1:f6:b8:26:dc:e4:31:3e:10:db:29:f9:
d6:90:5a:59:18:8d:50:96:b1:83:ca:4f:44:b9:00:ff:6d:b0:
6e:be:de:3b:d9:5c:8f:cb:50:61:3f:aa:1e:f4:33:a1:25:8d:
76:5e:a7:af:9d:40:b8:01:c3:07:1a:c6:23:ca:72:e6:3a:04:
cf:e4:2c:73:4d:21:96:55:b2:87:79:98:a3:8a:ca:a1:49:20:
15:53:25:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 20:53:59 2025 by rpki-client