Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
File: JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json)
Hash identifier: 9MG0ElBTlonRWrLRwxa0xSY7DoUDLuqAhWGTJ2MLE1Q=
Subject key identifier: 79:DF:FC:3A:AF:CA:B7:39:D6:71:5F:0C:81:B7:22:8F:4C:F0:7F:4B
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 0199FEEBB0AE504A1B976DC687EE2610E1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
Manifest number: 162B
Signing time: Mon 20 Oct 2025 00:01:22 +0000
Manifest this update: Mon 20 Oct 2025 00:01:22 +0000
Manifest next update: Tue 21 Oct 2025 00:01:22 +0000
Files and hashes: 1: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: GHtgqAKcyWci9ROkSwFBKcrG8ig6EjFqmf9J3LfrX0k=)
2: gC97AQKQbgiW9Krq-_q2apqCHmc.roa (hash: IvEX/4r+S7SQha7hWBWTDBpux0NlV5BKH8odMNrPeJQ=)
3: g_n97b-ezr2pU8M_arTz7b0GI28.roa (hash: f/1b/CBZ/cmdffSZ/BO1Ow8CLoficDzJ57IxUPZ8+ZA=)
4: zhoAHh4wgcaK6VZRodYWCuN75nI.roa (hash: kV8XnwO8Zz8GVVhAZVUdjX5IeFTvNwptdgYC4YvJ97E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:b0:ae:50:4a:1b:97:6d:c6:87:ee:26:10:e1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Oct 20 00:01:22 2025 GMT
Not After : Oct 21 00:01:22 2025 GMT
Subject: CN=79dffc3aafcab739d6715f0c81b7228f4cf07f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:86:07:12:f8:f8:d2:25:30:0f:75:0a:b9:
6f:ab:34:0e:7d:bd:e5:11:bc:d9:72:3e:a3:c4:b9:
ef:7d:46:62:21:5e:bb:74:da:7b:22:af:b8:6e:a4:
f7:2c:ae:9b:f8:5e:24:38:a1:8b:bf:e2:af:ff:66:
67:22:2f:64:7f:b3:1a:d3:6c:cb:c2:91:27:ed:ca:
99:ad:e2:14:5c:93:a1:e3:01:49:6b:95:e5:a7:9a:
c4:a7:7b:60:49:13:8b:63:2a:ff:56:9e:aa:e4:dc:
87:b2:18:82:ce:2b:e3:3f:7f:27:af:10:77:60:85:
c1:82:63:ca:f0:20:a1:c4:c7:16:0f:29:fc:a0:42:
19:9a:0e:53:f2:69:ab:15:f7:74:34:d9:d6:89:60:
5f:18:21:55:77:d4:25:ee:07:69:98:57:9f:b6:e5:
b0:c3:4b:ab:36:be:76:d2:32:48:16:6f:c9:62:22:
e5:09:ab:48:33:dc:fe:b6:4f:fb:7a:72:ed:bf:d7:
b9:24:4c:1c:e2:91:83:62:3c:a1:84:c4:7f:8b:72:
b6:e6:36:81:88:90:69:e8:5f:92:30:4d:b1:5c:a3:
0d:56:58:dd:7e:89:a6:97:b0:7f:64:39:16:f1:8a:
e2:ed:6f:e8:89:2c:3b:3e:50:17:71:c2:f0:69:86:
46:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DF:FC:3A:AF:CA:B7:39:D6:71:5F:0C:81:B7:22:8F:4C:F0:7F:4B
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:27:40:ae:da:1c:e0:2e:56:66:a5:0c:c0:22:9a:e8:3c:6d:
1a:8b:7f:63:bd:aa:b3:d5:fd:e5:20:e5:10:00:7e:c3:f5:b0:
f6:df:71:4f:3a:bc:59:78:15:e6:27:d6:f8:f8:8a:59:e7:31:
c1:c3:d8:41:9c:10:99:bf:bb:0c:f0:77:89:01:f5:b8:64:ac:
cf:95:0a:e4:14:13:de:19:b4:91:9f:77:90:c4:82:cb:99:23:
2e:b5:9d:9f:ff:aa:02:b6:3b:72:9a:8f:f2:fe:c8:8c:a8:a0:
c5:d1:cb:73:7e:06:dd:c2:96:65:6c:24:13:4b:bd:27:39:2f:
e4:5e:fb:33:0b:fa:c7:67:b1:92:46:76:fb:70:17:c5:3f:85:
99:2d:ff:af:9b:89:a3:78:7a:e2:b0:16:98:68:cc:d9:a5:e0:
90:f9:d6:90:e6:e2:64:b1:03:0b:7c:f3:35:73:51:00:74:58:
32:20:87:8b:d8:ce:80:80:ff:c3:ad:84:ce:5c:f9:95:62:f6:
1c:65:0b:fc:6c:f8:46:58:19:04:14:29:2c:97:00:01:13:dc:
5f:f1:50:13:63:67:b7:c5:c2:0a:98:02:d3:25:22:b5:59:54:
d0:1e:c1:12:ef:fa:e8:8d:46:ce:4f:2c:92:04:18:3f:f9:60:
54:af:69:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:52:32 2025 by rpki-client