Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
File: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft (raw, json)
Hash identifier: G3xZz1W2T8A4FzXw+cNx98zMjrwKmCVsYl5U8+Air2w=
Subject key identifier: 74:A5:C1:B0:DA:7F:01:2F:67:15:CE:0C:A7:61:66:AC:EA:1A:93:FF
Authority key identifier: 24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
Certificate issuer: /CN=24051080400940ff47c807dd6742becbb4edf22d
Certificate serial: 0199FDD8AD24045116530264CCF46009EB23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
Manifest number: 123F
Signing time: Sun 19 Oct 2025 19:00:59 +0000
Manifest this update: Sun 19 Oct 2025 19:00:59 +0000
Manifest next update: Mon 20 Oct 2025 19:00:59 +0000
Files and hashes: 1: 1JuBh8lEOH4Gv_TiAGmh3QPTdd8.roa (hash: 9L83yVwb1Uhqks9DMbgSsnxXYkHLF9CsQEa0PBHMdEI=)
2: JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl (hash: B/kjsI6P+EzqFr/bVqRjmoqs1T4c54cTny/x9MpOiHE=)
3: uLY7R20m1_heAxActPUiDlUOF_k.roa (hash: VJ9ob+iUB471t51KlgloGG8TLFxOURW4UvaYAdbWSCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ad:24:04:51:16:53:02:64:cc:f4:60:09:eb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24051080400940ff47c807dd6742becbb4edf22d
Validity
Not Before: Oct 19 19:00:59 2025 GMT
Not After : Oct 20 19:00:59 2025 GMT
Subject: CN=74a5c1b0da7f012f6715ce0ca76166acea1a93ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:43:5b:d1:fc:0c:0f:bf:ee:5a:dc:7a:98:
05:f7:b4:f4:22:e3:87:85:f5:b0:d7:03:5a:40:d2:
83:1b:0e:87:52:9d:be:7c:c8:4d:25:55:a2:ff:d6:
e0:55:cb:c3:f8:61:55:22:a6:0e:98:35:de:64:35:
0c:40:9d:9e:2f:dd:ef:9f:cf:15:07:6d:dd:05:be:
db:6c:c2:0f:14:61:7d:2f:0f:32:f8:25:98:6f:fd:
51:56:93:eb:41:c2:cd:4a:1e:a4:37:3f:18:85:76:
bd:11:bf:3f:d9:b9:88:82:63:3a:e4:25:7f:bf:52:
7e:62:c2:04:b7:b8:02:97:eb:bd:f9:66:af:5c:5d:
98:fc:67:17:3e:f9:cd:79:68:18:f6:59:4c:a1:bd:
49:34:4c:f8:2e:2a:65:45:09:a9:7f:42:40:f1:d4:
a6:f7:27:1e:45:61:04:b6:ca:2f:1a:fc:98:a9:1e:
57:67:f7:91:34:b2:d2:2d:9c:91:b8:53:3d:28:98:
7b:2d:9a:91:9b:2f:b9:23:1a:ae:99:61:37:1c:c9:
22:72:e1:e4:69:fe:1d:ec:ed:9e:0b:e3:1d:62:da:
49:af:2d:ae:c7:4c:d0:73:5c:be:c3:be:24:c4:f7:
ad:9f:fc:ab:64:46:ad:27:27:97:92:38:06:51:1a:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A5:C1:B0:DA:7F:01:2F:67:15:CE:0C:A7:61:66:AC:EA:1A:93:FF
X509v3 Authority Key Identifier:
keyid:24:05:10:80:40:09:40:FF:47:C8:07:DD:67:42:BE:CB:B4:ED:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/0bf5e9-d910-4037-8d37-5d39d5018f78/1/JAUQgEAJQP9HyAfdZ0K-y7Tt8i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8e:36:4f:ce:d9:0f:08:2f:4d:61:2b:27:e8:57:07:88:0e:
25:b8:50:e1:de:2e:c6:31:26:39:c1:af:37:4e:69:4a:2f:54:
11:70:04:d6:22:3e:1c:49:8f:c8:9d:d5:5a:0f:96:ef:4c:04:
07:54:85:80:e8:f0:67:a7:47:78:e2:e5:62:c8:eb:03:aa:7a:
93:ec:57:c4:d0:04:95:5f:47:7c:35:7a:90:d6:4b:e8:85:a4:
f3:9e:ab:14:e7:da:47:60:56:a5:f9:18:b3:82:06:7d:c5:c8:
3b:01:3c:31:d9:6e:22:c1:34:9d:f3:4e:80:55:b5:40:f9:d8:
2b:b2:c6:99:16:eb:f1:b1:13:f7:04:d2:9a:9e:92:4d:5e:1c:
aa:57:68:db:22:a5:f2:aa:b5:7a:84:d2:3f:d1:f2:d6:da:c9:
5e:03:82:6e:9c:89:58:cc:07:0a:ed:c0:5a:93:63:bb:9a:73:
d7:23:3a:c3:b2:de:4e:01:1e:07:43:6e:75:a7:b9:f4:68:5e:
60:bb:b8:82:4c:b3:c5:cb:ee:f3:dc:84:63:8f:34:b5:a6:6d:
67:87:71:30:05:c7:1a:6e:dc:7a:ee:18:4f:5d:cf:9a:53:8a:
16:52:2f:22:b4:76:8b:32:44:61:b6:57:53:8e:7b:51:28:4b:
df:cd:8b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:16 2025 by rpki-client