Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
File: jagkvGMczuGumdcQOv0tx08eKcQ.mft (raw, json)
Hash identifier: 7CiXS0RxWUnCC2sqLweAdwyxUPNZYnHDBf4VFF8kdW8=
Subject key identifier: FC:69:7F:F0:E6:AF:79:AA:7A:F8:40:CC:97:BD:D3:74:F0:1B:79:37
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 019A4F2B69F9684A53309C2149DEBEA9C964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
Manifest number: 16A0
Signing time: Tue 04 Nov 2025 14:00:36 +0000
Manifest this update: Tue 04 Nov 2025 14:00:36 +0000
Manifest next update: Wed 05 Nov 2025 14:00:36 +0000
Files and hashes: 1: 5fSz0gTL93bDKbRX7UB399KTqWo.roa (hash: ZekzmLJCJyI/RlrN5lYEw3o4UXuAl+RnUA/jnalWWzw=)
2: QEmXwsIj7ueEdKdwPu44tosMpfM.roa (hash: 2lzHt7XOAfmu9gjrRW7d2O3LPWtVfpw+P41EhC9URe8=)
3: bce44foTbAKg3tHOJ0Qgt1xOcf8.roa (hash: F4bF540q8PJ+GpaHKowNj8adXBg7SShvDYJVRvSviDg=)
4: dNxBOY3fJxweU0pOsjJMTtBxibI.roa (hash: +7/ZxVutYTL6jT8ak+OBnFIC5cdnfh0cuZkYLSLo+Fg=)
5: jagkvGMczuGumdcQOv0tx08eKcQ.crl (hash: DFgPM8VdEhUvxGF2xyCh2GWSyJrwbVCueGdzs2AMUvE=)
6: zEt70xhNCNspyv0BGLFGKL4d_Fo.roa (hash: NlwMM676+ehPCudhUDq8LrrGW5swFBYUpzUKu5v1ls8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:69:f9:68:4a:53:30:9c:21:49:de:be:a9:c9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Nov 4 14:00:36 2025 GMT
Not After : Nov 5 14:00:36 2025 GMT
Subject: CN=fc697ff0e6af79aa7af840cc97bdd374f01b7937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fe:8c:98:77:4f:f6:3d:2a:7e:23:09:04:5c:
64:3e:cc:62:e2:40:b1:01:81:b9:3f:1a:74:56:b3:
fa:87:bb:28:13:11:de:10:54:ef:dd:06:ad:99:87:
5a:41:27:0c:e8:d8:f0:7e:0d:85:ba:43:39:4c:48:
1b:f7:fb:b6:0b:4e:b1:dc:de:cb:76:73:60:46:31:
6a:86:bf:ff:04:1e:45:8f:d6:3b:a2:bb:65:c0:f3:
f7:ea:5c:23:a9:10:67:76:98:97:06:f3:ad:b4:ab:
6a:13:76:80:d9:df:d3:f5:f5:10:54:3d:c4:e2:c3:
6f:d7:96:11:c9:0c:ba:34:3c:5e:08:65:e8:da:c9:
11:41:71:d5:75:17:74:51:c6:e5:22:b8:7a:22:85:
28:dc:2f:fa:e5:dd:fc:e6:44:eb:a5:b4:46:68:6d:
07:71:77:d0:47:b3:3a:bc:22:24:48:2f:59:e7:ad:
99:0a:6e:59:51:78:bf:fa:9b:38:b0:22:0e:d3:42:
93:19:93:99:82:9c:1b:af:19:6c:0c:bc:fc:73:b5:
4e:73:8a:0c:4a:bb:69:30:49:bd:17:cf:af:a0:cf:
c3:70:19:78:a6:29:3b:52:1e:8f:2d:99:e0:5d:92:
0c:c2:19:c0:c4:5e:26:73:9f:93:d2:53:4d:c1:07:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:69:7F:F0:E6:AF:79:AA:7A:F8:40:CC:97:BD:D3:74:F0:1B:79:37
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7a:df:b6:b6:2f:ee:80:ec:2c:38:3c:9a:ca:5b:1c:fb:3e:
1c:89:39:88:17:20:22:9b:dd:72:5a:75:c8:be:60:fe:41:7b:
7e:2d:24:a6:bc:ec:87:95:b1:44:67:cc:5a:7a:4d:a8:4f:4e:
a8:b7:c6:bf:0e:11:1c:35:17:93:1b:58:8e:e8:75:e5:81:71:
d6:19:a3:ef:8b:91:db:cd:b2:ef:4e:d9:5e:b7:69:c9:5b:30:
3e:7e:ca:4c:2a:d8:34:00:9f:bf:15:23:f4:91:37:8c:5b:87:
c8:f9:de:98:68:0f:89:6f:03:0b:29:ef:87:b6:ad:4e:50:84:
5f:2a:07:e1:12:3a:5f:32:64:18:5d:05:6e:6c:ad:f4:93:df:
1e:9d:ea:c6:ce:97:7c:6f:e5:27:a8:5d:3e:fc:5e:2d:9b:e8:
d1:7e:da:97:5d:99:3c:ac:b0:b1:81:c0:6c:ab:c6:69:2e:1d:
c4:a9:38:e1:4f:d2:1d:f9:d0:0d:91:ac:7f:ac:d9:c6:6a:75:
c6:8a:83:34:6a:a7:6d:b3:7d:20:9b:ab:7b:5e:50:14:91:68:
44:4f:0c:5e:8c:97:ca:ed:a6:a4:1b:eb:10:dc:fc:e0:15:61:
03:51:d3:15:82:27:33:e4:7d:a1:1d:a2:ab:a9:a3:ec:bd:6d:
58:a3:8c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:49 2025 by rpki-client