Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
File: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft (raw, json)
Hash identifier: J9V4jQWLWvVjtVcMVPKMPC/Ny2K8GBeUlGMO0NfONxc=
Subject key identifier: E8:31:2F:0C:EA:95:06:23:63:A6:05:49:13:E6:A4:38:4F:FB:96:A7
Authority key identifier: FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
Certificate issuer: /CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Certificate serial: 019A533EE8CAC6F1FC4B9B6CF65A7F6EDCFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
Manifest number: 16A2
Signing time: Wed 05 Nov 2025 09:00:23 +0000
Manifest this update: Wed 05 Nov 2025 09:00:23 +0000
Manifest next update: Thu 06 Nov 2025 09:00:23 +0000
Files and hashes: 1: _Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl (hash: qnUa0O0MdK26B7Gie84mgCoOnKF+00tdnwUQ8b5zuqg=)
2: c19V5yQN4hQJXG1HEKFTsTlUGYc.roa (hash: LxQCTalyFAq3yyk0zwyqgHCvSE1O+q8WDWzWwj0pBzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:e8:ca:c6:f1:fc:4b:9b:6c:f6:5a:7f:6e:dc:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9a7b7a2c28a0b3c0e0a588c3c892e52a59f0e6
Validity
Not Before: Nov 5 09:00:23 2025 GMT
Not After : Nov 6 09:00:23 2025 GMT
Subject: CN=e8312f0cea95062363a6054913e6a4384ffb96a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:16:1d:75:69:9d:e5:9d:78:b8:82:e3:9b:
1a:eb:eb:9e:18:e4:fb:da:fe:d8:14:14:fe:58:34:
42:27:3e:b6:79:e3:fa:3e:7f:fc:8e:a1:04:ab:5c:
ce:1f:40:c1:88:1c:b2:e3:3a:ce:da:f4:87:12:33:
94:1a:f3:ee:ee:3e:d8:40:7a:94:32:81:50:02:c5:
af:da:39:7f:98:c6:16:3c:cb:21:a7:a9:28:48:81:
76:49:7b:4a:ea:6f:87:d5:21:42:48:66:d9:b0:c7:
dc:9b:45:33:9c:ac:95:e2:54:e5:34:d5:13:8c:ed:
84:7e:02:3f:32:f5:8b:e9:10:80:3e:da:83:fa:72:
d9:d1:1b:13:a7:9d:3a:0c:aa:3d:77:36:05:19:48:
b3:60:5e:8b:5e:26:75:81:df:4c:a2:8a:5e:ad:5e:
71:eb:40:4e:2e:6c:e1:94:e8:09:6f:5a:61:3a:f4:
1f:66:19:d7:26:a2:1b:af:ba:7e:31:76:ef:a1:84:
6c:c6:14:96:a1:10:45:c8:81:c0:fa:c7:d5:48:22:
36:1c:79:22:5c:63:7a:cf:e4:5a:3c:d6:86:9b:ca:
eb:2c:05:98:1d:4a:e0:12:ca:7e:51:07:b3:f8:45:
59:26:b7:91:f0:91:2c:5a:f0:2e:c6:6e:51:fa:10:
e3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:31:2F:0C:EA:95:06:23:63:A6:05:49:13:E6:A4:38:4F:FB:96:A7
X509v3 Authority Key Identifier:
keyid:FC:9A:7B:7A:2C:28:A0:B3:C0:E0:A5:88:C3:C8:92:E5:2A:59:F0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1d2823-3474-4d85-95e9-acf093226b07/1/_Jp7eiwooLPA4KWIw8iS5SpZ8OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:3a:71:80:a7:34:8c:51:10:9a:ea:36:92:a6:a4:5c:5d:dc:
4f:5d:0d:f9:d6:80:b9:d0:f4:da:fc:a0:e7:35:bb:24:8c:b7:
75:05:aa:c6:c8:e6:f0:d5:be:5e:e5:0a:c2:8a:cf:04:fb:3e:
49:2d:28:73:ad:1b:92:5c:8f:4e:a9:06:15:13:59:28:d8:1e:
d4:8e:5a:06:bd:1c:b2:3f:39:2d:02:e7:ad:b2:02:0f:9d:6c:
11:c9:07:0f:cc:5c:86:90:ac:34:cd:0f:22:aa:aa:f6:bb:4a:
f1:af:bf:bc:b4:e6:2c:ca:b9:a4:9f:9c:2b:61:3e:93:1b:56:
cc:66:14:9c:4a:cf:5c:cd:d8:6e:86:71:51:96:6a:48:cc:0c:
e0:54:35:3e:d5:0e:a1:27:94:7e:3b:9a:47:5d:10:81:7d:6a:
28:70:f5:c4:b1:fb:f5:17:f0:ab:9c:08:07:21:75:ae:fc:f4:
76:97:98:a3:42:a4:0a:43:9d:07:9b:f9:cb:e0:38:46:80:83:
1e:04:75:fe:7d:a4:82:a5:e7:dd:86:63:17:16:05:f6:58:e6:
18:47:31:22:1e:92:32:34:a9:56:55:f9:47:54:57:63:6e:f1:
9f:2b:17:aa:8e:a2:c3:03:f0:6a:46:49:31:bf:81:22:77:5d:
89:26:d9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:52:06 2025 by rpki-client