Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
File: jjYRcTX2uG0Knh-mfgS69bzYYWk.mft (raw, json)
Hash identifier: rPVX/u4sV1nicvA4Tt2nJdWU9nRI+zZfcQ2J8ht2CGs=
Subject key identifier: AF:7C:2B:03:F0:81:8C:70:1B:67:E2:FB:EF:8E:AE:FC:76:54:60:43
Authority key identifier: 8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
Certificate issuer: /CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Certificate serial: 019A503DA82E9150E27537416BDC532C1A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
Manifest number: 16E1
Signing time: Tue 04 Nov 2025 19:00:09 +0000
Manifest this update: Tue 04 Nov 2025 19:00:09 +0000
Manifest next update: Wed 05 Nov 2025 19:00:09 +0000
Files and hashes: 1: Lj7wNt42nDZMFrqwFNzaUflSi14.roa (hash: 7lYXpxe/6x5jvaWmKlwV+88ghkrorZKCs1qdn0iPrpQ=)
2: jjYRcTX2uG0Knh-mfgS69bzYYWk.crl (hash: zkj19PMjMFw7nk7/eT71e+nQws+884aavY61znZ0Lzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:a8:2e:91:50:e2:75:37:41:6b:dc:53:2c:1a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e36117135f6b86d0a9e1fa67e04baf5bcd86169
Validity
Not Before: Nov 4 19:00:09 2025 GMT
Not After : Nov 5 19:00:09 2025 GMT
Subject: CN=af7c2b03f0818c701b67e2fbef8eaefc76546043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:c9:cd:bc:a1:6c:5c:cc:0f:53:94:45:9e:
72:17:ee:8b:9c:b9:bc:c2:9f:36:d2:22:c4:6f:8c:
54:09:f6:7d:6f:48:54:84:c4:e9:a6:81:99:21:0f:
9b:b9:4a:4f:e6:7c:2b:1e:63:c2:c0:cf:cf:f2:58:
d7:e1:ee:3a:fa:75:ce:06:03:05:4d:7f:63:0e:aa:
44:3e:ee:7e:a9:31:ff:66:89:bb:86:1c:ca:e6:85:
ae:94:75:d6:5b:6e:37:44:f1:b7:86:8a:26:2f:1c:
e5:ac:77:70:03:25:fe:ae:cc:7f:0d:7d:5f:6e:b3:
a1:14:85:f2:0a:a1:66:3f:0f:0d:c9:8b:8f:26:2d:
fc:35:de:28:7f:f9:f1:57:18:94:85:c3:5d:fe:41:
bd:6e:5b:1b:2a:87:ac:37:e9:1a:7c:99:e3:ba:61:
9c:13:3b:dc:0f:29:41:1e:4f:18:ab:ce:20:5b:b7:
ab:8d:67:fb:68:23:aa:22:07:ed:e8:cd:10:a7:6a:
46:52:35:8a:05:77:6d:fe:a5:69:19:c6:6d:3b:b4:
0e:55:c7:62:1b:ef:62:c8:73:79:64:d8:32:98:0e:
5c:40:06:9b:57:52:e9:bd:23:17:da:9f:66:40:2d:
fe:9e:b0:a4:c0:32:17:f6:4d:33:ea:87:bc:84:6c:
23:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7C:2B:03:F0:81:8C:70:1B:67:E2:FB:EF:8E:AE:FC:76:54:60:43
X509v3 Authority Key Identifier:
keyid:8E:36:11:71:35:F6:B8:6D:0A:9E:1F:A6:7E:04:BA:F5:BC:D8:61:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jjYRcTX2uG0Knh-mfgS69bzYYWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/edb4d3-33c8-45dc-a40e-c85b60fd8c8b/1/jjYRcTX2uG0Knh-mfgS69bzYYWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:82:30:32:9c:84:49:e1:65:ae:d5:dc:05:16:3d:b1:f4:ea:
72:a1:82:6f:87:22:87:2c:95:08:af:91:04:4b:c8:4b:34:21:
dd:f5:57:9c:2e:d4:6c:51:a3:e6:56:08:3d:c7:e4:ad:4c:b5:
5d:cf:66:bd:48:bc:ee:1d:0f:4b:9e:9c:d0:0b:b5:78:60:10:
e9:62:84:0e:70:55:8a:9f:b1:18:dd:20:c8:82:be:c7:93:da:
a2:52:a3:d4:d1:dd:81:b7:c7:cf:91:17:79:f8:ae:03:71:ac:
c6:6d:83:05:b6:0a:90:e1:cf:2f:db:fc:ce:cd:b1:13:06:bd:
f9:a8:a1:d3:cc:bd:1b:16:46:e8:f5:bc:e0:69:37:98:a0:9d:
cd:dc:b6:40:7f:ed:2c:37:f1:ab:6f:47:7f:4d:b3:4c:2b:e2:
01:2b:24:d3:08:0f:4e:ca:f6:5e:aa:83:22:c9:4f:d3:db:f6:
50:0a:9b:6d:95:67:b3:29:76:a7:74:11:0a:e7:c3:22:d7:a9:
2f:f2:ad:f9:53:e0:c4:1b:60:b0:8a:d8:42:75:8e:a8:7b:7c:
a4:1f:8c:f2:46:47:cd:f1:7a:d7:8b:9e:17:67:26:cf:bd:8b:
14:ad:57:64:f0:1a:45:fe:ae:6a:28:75:2f:3a:35:58:ae:d2:
09:d8:91:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:45:20 2025 by rpki-client