Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier: 5XZPyr8ffo3I3rtHeGUO6Kxkw6MmfqoDUZr4h+op9uk=
Subject key identifier: 01:8D:2B:2E:7E:56:DB:05:BE:30:96:5A:19:46:F0:30:97:CD:8A:F2
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 0199FCC6A49578C8C020827739567720E7B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 14:01:40 +0000
Manifest this update: Sun 19 Oct 2025 14:01:40 +0000
Manifest next update: Mon 20 Oct 2025 14:01:40 +0000
Files and hashes: 1: 1-29V0La4_P0UpNW2hXVyslRw2K4.roa (hash: PRcWahKcQ2LuKI711vQsn8rwzS7rSwXmqcqEY1pScJk=)
2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: VRdK6b9Ig2VYHcwJ5a2KZRQKBoLta51lviU+b0bFuPQ=)
3: pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa (hash: oBPfYvQmBc3Rm7ciqYTDbiAEwbpepUx9w2RLYYy+K/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a4:95:78:c8:c0:20:82:77:39:56:77:20:e7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Oct 19 14:01:40 2025 GMT
Not After : Oct 20 14:01:40 2025 GMT
Subject: CN=018d2b2e7e56db05be30965a1946f03097cd8af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:8a:b5:d6:ad:d7:49:f8:1a:af:a4:e6:ef:
48:f6:f3:19:97:1f:7e:a0:96:67:17:f4:33:6a:08:
fb:ed:76:7c:ef:14:a0:e5:6c:0a:e8:0b:81:04:64:
83:2e:42:98:4f:ab:ba:f9:0f:51:83:a6:a1:ae:62:
61:32:ac:6e:38:e6:a2:09:39:33:cb:c3:0a:c6:c8:
df:73:18:1e:61:b5:b9:3b:0f:ed:79:55:c3:d2:2c:
07:a8:d5:16:85:a0:a4:17:e7:87:41:df:1f:74:3f:
a1:e5:90:ee:d9:f3:6f:1b:dc:cc:dd:d0:d1:29:98:
71:41:5f:45:8a:9c:16:fa:f2:5f:d5:d6:7c:ff:67:
9f:ec:26:84:13:ae:d9:26:fa:5c:42:9e:18:c1:5a:
b6:ef:f9:82:b0:bd:c2:17:a7:e7:9d:02:17:e4:60:
ec:fe:be:a7:47:90:f6:a2:1e:a6:aa:aa:fb:d7:f7:
c6:b1:39:10:bd:41:d7:a7:c6:75:7b:98:b9:53:12:
d0:5f:ba:d0:24:34:55:a0:ce:24:f6:3c:1b:d9:8a:
10:b7:89:be:b6:df:44:ea:0a:66:37:cc:11:e4:06:
90:5a:4d:88:5f:3b:b5:59:2c:cd:34:da:1c:72:ec:
48:84:1f:fc:0a:9e:bd:8d:5c:d5:5a:e9:a5:06:2f:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8D:2B:2E:7E:56:DB:05:BE:30:96:5A:19:46:F0:30:97:CD:8A:F2
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a7:65:45:d5:05:e6:0d:2b:88:65:ac:fc:05:32:cc:0b:bd:
be:1c:c0:4a:9d:ed:bf:85:62:61:20:1f:34:04:6d:c2:b7:d9:
eb:69:20:11:d1:6e:ab:ac:35:04:c0:19:14:8d:5f:1d:28:6b:
5e:e8:7a:21:f2:90:1a:c9:94:07:78:2f:57:d7:4a:6b:fa:cc:
4e:f0:54:b9:c3:45:27:e1:73:97:04:5c:2f:90:53:49:75:6d:
5c:22:d8:29:d3:da:3c:81:94:10:d1:42:d9:48:b2:71:bd:1d:
67:71:47:3d:83:17:98:0e:8c:2f:54:fc:d1:e9:2b:1d:02:ba:
00:c0:68:0b:45:02:b3:3e:4b:ba:03:12:bc:47:6c:52:9d:80:
ff:da:99:d2:9a:2e:2d:9d:39:1d:2e:ba:98:82:3d:b0:73:3d:
eb:b5:98:10:88:af:4c:a2:8f:83:7d:b8:52:36:2b:61:35:74:
f3:be:18:8f:25:ee:c1:7a:cc:c3:71:a8:d9:bc:7f:fc:24:fc:
9f:77:f5:8d:6f:33:bd:e4:56:69:fc:1f:46:3f:bd:51:73:bb:
18:c5:1a:73:8b:08:3f:d3:49:c5:da:3f:e8:d1:88:fe:ee:d5:
83:63:66:8e:81:42:79:5e:f1:66:45:e7:72:43:e2:47:96:b2:
79:1b:89:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:44:51 2025 by rpki-client