Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
File: jCgv8-x8uBt45iinNRdkjWIpyrc.mft (raw, json)
Hash identifier: ekTFM4hnBFEjeU4nZRRDT4kBZptx7rbpKeEqBskV1Eg=
Subject key identifier: 74:4E:0B:65:67:DF:C4:B0:5D:F1:D5:DA:AC:03:69:02:45:5E:F0:79
Authority key identifier: 8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
Certificate issuer: /CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Certificate serial: 019A0C0193C77AD70963E1B62B4EAE5FC700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
Manifest number: 0242
Signing time: Wed 22 Oct 2025 13:00:21 +0000
Manifest this update: Wed 22 Oct 2025 13:00:21 +0000
Manifest next update: Thu 23 Oct 2025 13:00:21 +0000
Files and hashes: 1: 8uYJC_uUQib3K90k6tRQR4c4tec.roa (hash: UqH3qyVznQeucD/ZQnnEVXPDpOPJe9Ni19S/sMmHYVQ=)
2: jCgv8-x8uBt45iinNRdkjWIpyrc.crl (hash: ZpSaJ4AiUvQUNXeeldgK/GNK1tLDiJGzWtpGVZkCI0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:01:93:c7:7a:d7:09:63:e1:b6:2b:4e:ae:5f:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c282ff3ec7cb81b78e628a73517648d6229cab7
Validity
Not Before: Oct 22 13:00:21 2025 GMT
Not After : Oct 23 13:00:21 2025 GMT
Subject: CN=744e0b6567dfc4b05df1d5daac036902455ef079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:40:a4:08:eb:d3:99:b3:d2:2e:29:02:03:8b:
19:92:ad:fa:c2:26:dc:d2:87:5d:21:2d:6b:2d:65:
e5:dd:9e:35:9a:78:62:5c:fd:a7:65:8a:bf:37:0e:
eb:ce:18:f6:e3:7f:71:23:0b:3c:71:72:16:36:44:
b6:ff:fd:38:a4:ce:7c:bc:57:25:3d:be:6a:b3:06:
6a:ad:3c:fb:e4:dc:3a:73:d2:51:8f:e5:ed:38:ee:
7b:10:0a:dc:73:df:6f:75:86:e1:5b:86:fd:d1:4f:
30:94:95:1a:b9:f7:61:5c:aa:69:cf:18:9a:ac:08:
5e:57:33:37:64:10:03:ab:6f:5d:a2:fc:1b:74:c1:
31:96:ba:7b:b2:d2:c3:ea:a7:70:3f:26:d2:4c:f9:
70:36:48:d6:0c:5d:70:0a:0a:0e:4d:2c:fd:80:0f:
e3:e6:14:1c:c2:f0:4e:fb:3e:0b:f2:37:ea:1e:eb:
7b:fa:4f:28:d2:5d:b7:0f:9e:fc:3f:4c:a0:da:b4:
f8:9b:c7:d2:27:3a:52:c5:83:fc:83:f4:49:d3:44:
b2:bc:5b:33:25:7e:03:42:ce:26:a9:28:6f:28:5e:
22:9c:06:27:45:a6:2d:96:ca:e3:82:48:44:b4:bc:
66:15:bb:dd:69:b3:cc:22:97:d7:7e:ca:62:6f:ae:
96:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4E:0B:65:67:DF:C4:B0:5D:F1:D5:DA:AC:03:69:02:45:5E:F0:79
X509v3 Authority Key Identifier:
keyid:8C:28:2F:F3:EC:7C:B8:1B:78:E6:28:A7:35:17:64:8D:62:29:CA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCgv8-x8uBt45iinNRdkjWIpyrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9f5f13-8f97-4210-acae-6ca3e9d3e78d/1/jCgv8-x8uBt45iinNRdkjWIpyrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:20:3e:17:81:9f:c0:92:81:ab:de:dc:91:64:41:6f:e8:37:
8c:e8:25:3d:b8:34:96:c0:b3:6e:86:1d:f8:87:80:93:98:c0:
1f:a5:ba:d4:5a:d7:6c:98:3a:00:72:99:69:d5:ea:da:14:99:
68:aa:0f:a5:19:37:66:57:44:02:cc:85:7c:80:15:6a:0e:e1:
0d:c8:77:a7:7d:c2:81:76:e3:32:06:d6:f2:bc:8a:94:3e:10:
89:1b:d0:11:a8:c7:e5:31:bc:b2:1f:00:94:79:a8:2c:e8:47:
99:04:27:37:e2:fd:76:72:d0:a8:d1:90:2f:5c:7e:59:6d:3f:
5c:d5:8a:70:9f:dd:82:24:ea:61:6c:b9:93:65:7b:1f:b8:2d:
d1:6a:a3:8f:d6:24:aa:80:00:25:47:81:cf:d5:5f:fc:4b:ee:
f5:52:a2:3d:35:29:41:f0:2a:00:17:80:c3:af:6c:8a:1c:f1:
10:d5:ee:2a:f1:56:37:bb:ba:5d:13:83:5e:ec:58:81:12:a6:
92:cf:ee:32:31:f5:df:76:4e:9c:8f:b3:37:bf:4d:51:99:ed:
f0:3f:c4:be:e1:64:4e:1f:e6:a5:8d:0a:72:85:b3:f5:d9:6c:
6e:fc:15:b0:5a:26:60:ea:01:c7:4d:8f:f6:fa:2a:37:48:49:
a0:b0:2b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 17:03:19 2025 by rpki-client