Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
File: jciXK026DSBJ03yEikoh1KQ7Ljs.mft (raw, json)
Hash identifier: s6LZBfuzJtCfKYdbnd7fzC+7ooA2E5N4PL6Y7lAg7tw=
Subject key identifier: 8C:40:DD:59:F8:CD:52:13:F4:06:24:E5:9D:3C:44:D8:EB:9A:57:F9
Authority key identifier: 8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
Certificate issuer: /CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Certificate serial: 019A4F620C83B7B3B84A307C83E6A862C3F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
Manifest number: 058A
Signing time: Tue 04 Nov 2025 15:00:16 +0000
Manifest this update: Tue 04 Nov 2025 15:00:16 +0000
Manifest next update: Wed 05 Nov 2025 15:00:16 +0000
Files and hashes: 1: jciXK026DSBJ03yEikoh1KQ7Ljs.crl (hash: oxNZRf58kK+2QKv9tA/reqUzkvqa8gSyHXzIr0u+Ay4=)
2: s8IxW5tuKoaeGci5PMMsvkBpqVA.roa (hash: r/ncpxBVtrl7LSWT4Ir7OLnEXZq1sFDkQ+rRRvqTryo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:0c:83:b7:b3:b8:4a:30:7c:83:e6:a8:62:c3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dc8972b4dba0d2049d37c848a4a21d4a43b2e3b
Validity
Not Before: Nov 4 15:00:16 2025 GMT
Not After : Nov 5 15:00:16 2025 GMT
Subject: CN=8c40dd59f8cd5213f40624e59d3c44d8eb9a57f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c2:55:b0:bf:6b:f2:b7:48:40:9f:ee:c1:38:
02:b9:d0:26:b4:00:0e:cd:2b:5a:84:f6:c2:80:fd:
e5:61:85:3f:ca:97:19:28:69:cd:2a:27:80:44:2d:
3b:13:5b:70:68:77:89:d2:88:5b:26:e9:1c:55:ec:
28:a7:e6:1b:e0:da:39:5f:46:6d:bd:4c:10:07:61:
f6:7b:65:71:09:8c:ca:d0:c7:75:75:52:7d:09:99:
65:91:6b:9a:f0:08:78:86:eb:e1:fc:45:dd:31:6b:
30:da:73:ea:47:23:e3:ed:05:e5:a4:71:4c:f3:88:
57:7a:75:34:6b:15:95:d4:c2:11:4a:31:7b:0c:f4:
a2:39:70:47:fa:c5:09:2c:86:1e:1d:26:ac:04:a8:
af:cf:e8:21:c8:6a:9a:7a:9a:28:c5:69:52:aa:55:
b3:2a:64:71:56:69:f8:b5:76:95:72:a0:2a:db:47:
e7:2c:8d:7a:be:b1:44:ad:a8:4a:99:41:a6:e7:aa:
9f:95:0d:da:2d:2f:14:a9:ca:aa:f1:d6:d0:33:25:
3a:d2:29:d7:20:e1:80:ed:17:36:19:d9:a8:94:7c:
66:5c:dd:f9:9f:e5:74:3e:ec:7c:75:e9:dc:97:71:
ac:7d:85:7b:ca:7e:7d:27:8a:f8:2e:8f:1a:13:f0:
f7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:40:DD:59:F8:CD:52:13:F4:06:24:E5:9D:3C:44:D8:EB:9A:57:F9
X509v3 Authority Key Identifier:
keyid:8D:C8:97:2B:4D:BA:0D:20:49:D3:7C:84:8A:4A:21:D4:A4:3B:2E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jciXK026DSBJ03yEikoh1KQ7Ljs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8716d1-eeda-4505-a0c9-078fd395859f/1/jciXK026DSBJ03yEikoh1KQ7Ljs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8e:80:17:68:c9:6b:b7:23:69:62:ec:f4:09:06:d8:37:5c:
a7:72:0d:67:84:c1:62:ce:db:2e:85:3a:0c:e8:9f:46:89:42:
cd:67:63:c0:10:3b:48:37:b1:7f:56:08:5a:08:50:cb:be:47:
13:de:cf:74:c6:7a:7b:99:aa:64:70:4e:95:88:d3:04:76:ad:
de:81:29:34:8f:8b:cb:b8:c2:58:d8:20:2d:36:18:21:f6:08:
3d:c2:01:d7:5e:c6:e3:90:de:5c:7d:57:ab:5d:23:08:91:89:
de:82:5e:8e:cc:df:ac:be:d1:98:b0:ea:1f:61:d0:54:dc:d3:
ec:f3:4e:c7:3a:2a:5e:10:5d:9e:a3:d9:4b:ed:3b:45:dc:4b:
21:36:bd:c2:5c:b4:f7:ed:35:8a:2a:84:a9:e2:4b:c9:39:b5:
18:02:3d:9c:c4:dc:75:f9:ef:29:f3:cc:c7:95:9c:5c:32:dd:
e6:1a:41:ea:2e:ee:d1:7e:ce:62:d2:ad:1c:8a:e5:8f:8c:5d:
be:68:0d:72:08:60:24:e0:ed:9c:9e:0e:9e:0f:2e:8d:a1:a6:
82:db:2a:58:a7:7d:38:99:54:15:03:60:4d:0c:81:5c:6a:75:
da:b3:6d:9c:8a:c4:3c:a9:09:ea:34:08:54:b2:e7:8d:b4:c5:
5e:53:12:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:05 2025 by rpki-client