Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
File: Jr3a4E28sfgvVbB4MHuksIS5lLs.mft (raw, json)
Hash identifier: wBT9yHjpOngaVRXCljM3vHQmxQuEPc2Eo+TdC9yPFkg=
Subject key identifier: 15:C0:CE:21:61:3F:9E:8D:EE:E2:C3:B3:95:8A:7F:51:F8:B9:1C:8A
Authority key identifier: 26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
Certificate issuer: /CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Certificate serial: 019A21096E79F0D6A306635BAA5119EAC4AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
Manifest number: 16FD
Signing time: Sun 26 Oct 2025 15:00:57 +0000
Manifest this update: Sun 26 Oct 2025 15:00:57 +0000
Manifest next update: Mon 27 Oct 2025 15:00:57 +0000
Files and hashes: 1: 6s_6R9Qg6B0BWMzsSYadcyCPTNI.roa (hash: 0TX6RB/i/PYM+jHhKWcDxzPxSqvqvW8BUSQ5qekuotk=)
2: Jr3a4E28sfgvVbB4MHuksIS5lLs.crl (hash: lGIdj/zchA8BLV9dr3NILViShmA3hvIMpGrlFthGZtk=)
3: On6P0oyCVsJaxIEE3GftNC4qztw.roa (hash: MHdX24gf5gM9PdREHRYQX0s+qP7Sh6jKR9PNtNbtiPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:6e:79:f0:d6:a3:06:63:5b:aa:51:19:ea:c4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bddae04dbcb1f82f55b078307ba4b084b994bb
Validity
Not Before: Oct 26 15:00:57 2025 GMT
Not After : Oct 27 15:00:57 2025 GMT
Subject: CN=15c0ce21613f9e8deee2c3b3958a7f51f8b91c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:23:b7:b1:61:23:5b:9f:d5:b9:eb:21:fa:
77:34:eb:1c:ef:cf:cd:bd:92:77:54:fc:9a:b3:74:
94:5d:f9:00:7b:28:78:a5:f8:39:1c:64:15:99:69:
a1:e2:14:dc:e2:db:0e:fb:b2:14:cf:03:23:22:57:
51:67:38:df:34:08:04:b8:aa:e6:b5:e2:63:36:8e:
82:f5:65:9e:39:33:a5:02:4d:27:49:c3:6f:0a:d0:
8d:69:a2:ed:c2:14:a1:0b:55:68:a5:c1:4c:60:96:
fe:ba:43:f6:be:94:c8:9a:66:a7:84:80:ba:71:9c:
4a:28:94:89:73:49:48:76:92:dd:80:9b:58:53:ee:
c9:0d:94:cc:d6:4a:24:89:ec:0b:e3:74:7e:78:21:
a4:b5:39:bc:2e:11:37:43:e1:8d:70:9f:67:50:31:
fc:bb:12:ca:7b:15:4c:cd:1b:4a:d8:e7:73:ad:f4:
ca:25:44:e3:78:7a:4c:f4:65:f8:19:6d:cb:ce:bf:
27:3a:30:16:be:2c:4d:b6:5c:28:48:80:47:19:e9:
3b:bd:a3:f7:b6:2d:73:4b:eb:4d:75:be:5a:23:66:
65:46:39:2b:0c:16:d9:9b:80:9e:5a:03:77:6c:cc:
44:74:dc:ae:c4:7d:63:8a:04:75:df:85:79:ed:41:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C0:CE:21:61:3F:9E:8D:EE:E2:C3:B3:95:8A:7F:51:F8:B9:1C:8A
X509v3 Authority Key Identifier:
keyid:26:BD:DA:E0:4D:BC:B1:F8:2F:55:B0:78:30:7B:A4:B0:84:B9:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr3a4E28sfgvVbB4MHuksIS5lLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/feb3ba-ee90-4f03-9e00-f6179a910b15/1/Jr3a4E28sfgvVbB4MHuksIS5lLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:87:c0:02:30:71:2c:7b:72:c7:03:31:16:53:82:11:74:26:
bd:e1:c7:fb:2c:29:2f:02:58:d1:f9:df:9a:57:ae:1e:c2:17:
ec:8c:92:44:99:7e:cb:99:c7:e7:de:ad:22:4f:cb:b1:3f:c1:
67:ba:b2:53:57:09:11:db:89:d9:2c:66:dd:c5:bd:ba:81:da:
d0:18:74:75:eb:a1:92:58:d2:58:23:45:99:0d:40:ad:7b:19:
a0:3a:67:be:03:7d:a5:2b:d6:69:7a:f6:04:d0:05:81:57:26:
80:4c:0e:42:a6:e4:8d:f0:18:d8:8f:34:f7:18:5c:2e:d8:df:
c9:f3:c8:55:04:c8:cc:5e:02:aa:5e:0e:a9:3a:4c:89:eb:d7:
01:89:62:c7:d8:de:f4:96:fe:94:15:46:d4:e6:21:2c:6c:bd:
97:76:03:f2:7d:50:84:83:e6:e3:8b:2b:f9:8e:c0:6f:d3:92:
6c:36:fe:34:2c:fd:aa:7e:b8:d3:53:0c:23:9b:6d:11:a8:29:
45:50:a4:7f:37:44:f6:df:49:8d:35:81:08:66:52:ed:17:1f:
cd:7a:38:97:de:9c:d7:7d:e4:22:b2:06:7b:73:25:7b:76:7f:
17:bd:37:50:6a:df:38:3a:c0:c4:2a:d2:30:27:18:db:7d:01:
3e:ef:b8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:50:49 2025 by rpki-client