Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
File: j5h_qG-uztjKekRir38AXqsneag.mft (raw, json)
Hash identifier: FMmlmoEIcVHKLiuXtBVbkrqfB23B+8DcT4P6v2aCL3E=
Subject key identifier: D0:A1:E4:29:66:36:65:8E:46:6F:62:61:1C:F0:8E:BE:42:CD:E9:14
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 019A22C04B9D2BDFCCF762631899A1AA5B04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
Manifest number: 0DD7
Signing time: Sun 26 Oct 2025 23:00:18 +0000
Manifest this update: Sun 26 Oct 2025 23:00:18 +0000
Manifest next update: Mon 27 Oct 2025 23:00:18 +0000
Files and hashes: 1: TZNlzSisEozO9bUPt3Ymc1srv8E.roa (hash: wa8v9NsgWL1gYj2sgVAPeIrXdGt5FFoRvprZhnIr4yo=)
2: j5h_qG-uztjKekRir38AXqsneag.crl (hash: +Pdpwsrv5msgLyX+e+5KqeDqbBmnSjazDivt6ftcswc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:4b:9d:2b:df:cc:f7:62:63:18:99:a1:aa:5b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Oct 26 23:00:18 2025 GMT
Not After : Oct 27 23:00:18 2025 GMT
Subject: CN=d0a1e4296636658e466f62611cf08ebe42cde914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:99:9c:24:77:55:a9:26:04:20:cb:b6:f6:1e:
92:2e:41:9c:eb:05:5d:21:a9:19:d1:48:a0:c8:43:
73:c7:48:6d:64:86:46:4b:48:ea:04:ea:7d:2f:c7:
b4:cb:9b:5e:c4:00:89:28:7c:fb:ee:8c:7c:c7:41:
9d:d9:fe:d6:7d:e7:95:a3:c6:4a:ed:a0:a2:cb:f0:
1c:38:dd:79:cc:f5:04:9a:85:c3:f9:cb:65:e2:93:
9a:65:25:af:da:1f:b9:25:0e:f4:25:84:af:c0:b4:
e6:ee:59:2a:27:d4:17:94:25:27:8d:5d:1d:13:7e:
6a:37:ca:94:56:65:83:3d:ed:22:5d:c5:3c:bf:a2:
24:08:0a:80:72:94:e4:d9:8f:eb:d1:09:48:18:fc:
20:79:92:14:7b:60:ac:4c:9f:47:5c:f2:98:cf:30:
28:15:38:22:68:68:fd:e8:d0:8f:27:ac:ad:00:f3:
27:a8:75:61:d7:68:e8:e5:a9:69:19:5b:d5:62:69:
33:0a:72:1e:20:c5:d7:cb:67:19:a3:9f:ea:ea:d9:
a6:bd:a9:ac:70:0a:82:b9:27:3c:91:2e:4c:fb:72:
cd:53:db:2c:95:f1:cc:21:14:88:5b:a5:fc:8d:83:
be:ab:56:b1:de:38:a7:1c:37:5c:ed:44:68:b6:c4:
3a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A1:E4:29:66:36:65:8E:46:6F:62:61:1C:F0:8E:BE:42:CD:E9:14
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d4:f0:88:9e:1c:d8:1d:c1:91:cf:b8:4d:c2:07:ea:fb:72:
e9:6e:29:dc:38:d1:af:80:ad:71:bc:86:1d:f0:55:7f:5a:fa:
c1:99:81:fe:84:a8:ce:d1:f4:c4:91:95:5e:1a:61:a8:04:36:
0c:0e:11:ef:3e:67:44:f9:55:ba:7e:31:1c:67:5f:0f:d1:20:
7f:d5:fc:c5:51:e8:5b:5d:61:74:5f:ea:6b:61:04:39:56:5f:
3a:f5:f6:96:cd:b4:64:17:f0:ad:93:4e:6d:a0:7d:68:20:08:
16:94:69:96:62:f6:9d:43:ed:71:10:e9:c0:d1:c1:a9:9b:43:
f9:b4:ad:f6:55:4e:4f:1f:69:51:02:98:72:bb:80:b4:69:e7:
aa:84:69:e5:1a:ec:01:a9:47:f5:a1:bf:10:c4:44:78:4b:7a:
b5:83:04:5f:e9:64:8b:b2:c2:d5:ca:83:6e:19:49:4b:d8:6f:
d2:7c:5c:d4:ac:8e:f2:03:63:dd:3b:7b:4d:eb:2e:31:af:de:
e1:ae:1d:6e:89:1d:1d:29:bb:c3:85:aa:82:ce:45:25:96:f2:
09:c1:a2:6d:c4:d1:fb:44:8e:cf:40:1a:58:f3:0c:aa:87:54:
11:53:43:24:5f:f1:42:05:7e:e3:da:7c:2f:f5:ed:1a:4c:a4:
07:60:c0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:31:55 2025 by rpki-client