Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
File: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft (raw, json)
Hash identifier: XfKqCdnX286vz2CVoP/QSsinSCN5NigRenWrUjzf2zc=
Subject key identifier: E9:73:EC:9B:5D:F4:D3:4D:EE:1D:9A:DC:68:F8:CB:2E:02:E9:A5:35
Authority key identifier: FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
Certificate issuer: /CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Certificate serial: 019A2AB170334C9F6951CEE8DDE56243D632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
Manifest number: 168D
Signing time: Tue 28 Oct 2025 12:01:02 +0000
Manifest this update: Tue 28 Oct 2025 12:01:02 +0000
Manifest next update: Wed 29 Oct 2025 12:01:02 +0000
Files and hashes: 1: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl (hash: t6y7DZe5GkLdfdycNImPGDpW/ZiZyM08ZWbRwsrV1y8=)
2: c19V5yQN4hQJXG1HEKFTsTlUGYc.roa (hash: LxQCTalyFAq3yyk0zwyqgHCvSE1O+q8WDWzWwj0pBzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 12:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:b1:70:33:4c:9f:69:51:ce:e8:dd:e5:62:43:d6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Validity
Not Before: Oct 28 12:01:02 2025 GMT
Not After : Oct 29 12:01:02 2025 GMT
Subject: CN=e973ec9b5df4d34dee1d9adc68f8cb2e02e9a535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:6b:ef:97:65:d1:bd:64:75:95:ca:8a:d3:
4a:d5:70:55:7b:3f:6e:77:a0:63:54:5c:aa:3d:1e:
d0:64:b0:49:60:af:34:47:f5:34:36:49:6d:2d:db:
54:02:36:eb:a8:ff:15:73:ae:42:f5:12:a6:7d:2f:
bd:8e:25:6f:1c:0c:3e:15:68:c8:b6:29:72:52:8c:
27:82:ab:11:69:7c:cb:d5:85:78:d0:9a:6c:40:f0:
5f:3f:87:75:31:14:ef:79:72:61:62:d8:ab:4f:e8:
ca:e9:7a:25:af:ed:04:8e:e4:35:7d:0e:64:95:ee:
af:ae:9a:e3:20:4f:58:d2:70:51:d5:1d:5d:72:ef:
99:9a:9d:66:b0:8c:74:65:11:18:7a:c5:82:a0:2d:
ee:ab:91:b8:da:40:d7:dc:1f:d8:6a:7a:89:08:d7:
ea:1c:b8:fd:1b:cf:5d:e2:d5:7d:d4:bb:77:57:f2:
b7:55:65:50:26:2d:b0:7c:89:3d:82:b5:1a:e3:a8:
f0:1a:51:1a:e3:8f:c7:72:6e:88:1f:6b:2d:45:65:
20:3f:69:40:a4:60:27:54:96:31:1b:7e:35:67:bb:
8b:87:52:08:bf:4b:e1:ec:fd:12:c5:12:0d:b4:7a:
64:b6:e0:72:42:d2:06:a5:19:1a:2c:d6:ac:3f:46:
3e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:73:EC:9B:5D:F4:D3:4D:EE:1D:9A:DC:68:F8:CB:2E:02:E9:A5:35
X509v3 Authority Key Identifier:
keyid:FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:93:b6:b7:33:5c:54:ac:69:d8:1a:af:28:86:12:fa:cd:6c:
1c:8c:8b:c7:b0:8d:cf:27:af:79:ab:21:4b:94:65:d9:88:91:
c8:88:5d:3d:2d:60:34:26:17:a0:b3:8c:78:5c:92:c0:58:05:
30:f5:fe:f3:be:43:df:a9:94:2b:df:62:1c:00:08:62:1f:fe:
19:99:9a:a1:d2:e0:f2:33:dd:ff:df:0e:30:fb:7f:e5:17:c6:
53:23:39:b2:f3:bf:be:16:36:26:5c:ad:c8:2b:13:f9:3d:20:
6a:d1:ac:e5:96:6d:ef:c9:ab:a1:7f:11:1d:2b:2d:6f:d1:99:
fa:fd:ba:85:1f:6b:35:e3:2b:80:9c:94:6e:20:72:91:6f:5f:
09:ce:f3:ab:fb:6b:e0:6c:50:91:bd:d2:d5:6b:9f:4f:a2:c0:
96:ec:51:f6:77:50:64:6a:3d:af:5c:21:1e:e7:1c:a3:38:a2:
76:f9:a7:a3:20:91:8d:ce:b3:2a:f6:3b:09:c9:9f:2b:df:28:
a4:18:ce:db:9e:01:fe:92:dc:6c:08:39:13:f0:a0:3c:29:9c:
86:d8:42:b3:99:1d:4b:d2:c2:4e:9b:06:a1:e2:14:91:ff:14:
1f:ec:f5:f8:92:bf:08:12:b6:52:d0:e9:30:3f:be:c6:0e:73:
53:93:66:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:30:18 2025 by rpki-client