Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File: JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier: 33KIMyeshN+Z9PA56bYiWmYjtFrW2+oe0kR/Vcuh5/M=
Subject key identifier: B5:5B:C6:7E:3F:08:88:48:64:C7:74:1D:41:C1:B3:B0:83:35:5D:43
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer: /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial: 019A0259CD9EF412A1B722E4200EA8217791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number: 02B0
Signing time: Mon 20 Oct 2025 16:00:31 +0000
Manifest this update: Mon 20 Oct 2025 16:00:31 +0000
Manifest next update: Tue 21 Oct 2025 16:00:31 +0000
Files and hashes: 1: 7Neyj-EgqtHn8yPIzyvgflhPyEk.roa (hash: RiX60C1lYHQe9i54rwed/ld2R6Zxx+sj83TfysW1UZM=)
2: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: RXdsiAu/qJvqDNHNNXpeSN7MecMqIwHdwYOrBfRtqHM=)
3: LtRuJcDQFgXrBJSxyY1nA0HvnuU.roa (hash: Fm9L8uM5OQuU38BmCU77e5/o3WHCT2yCoE5kiEsmZuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:cd:9e:f4:12:a1:b7:22:e4:20:0e:a8:21:77:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Validity
Not Before: Oct 20 16:00:31 2025 GMT
Not After : Oct 21 16:00:31 2025 GMT
Subject: CN=b55bc67e3f08884864c7741d41c1b3b083355d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d1:4b:47:1b:93:86:a4:be:13:a4:3d:82:47:
c0:dd:5a:00:6d:02:8c:2c:a2:5d:be:bc:ce:1b:d2:
1f:31:c1:12:83:28:45:19:e2:fc:c1:f5:4d:4d:b8:
01:25:8e:f5:86:26:26:e5:b9:3a:c3:2b:6b:f7:78:
0b:3c:dd:a0:03:27:8c:8e:7d:d9:09:24:aa:f4:7d:
fb:dd:14:6c:05:20:6b:cc:85:90:6c:6b:3f:0c:15:
6f:e6:32:8c:07:c4:ac:9a:12:a1:e2:29:1e:e6:60:
bf:6b:7d:23:39:3a:74:b1:fc:dd:c6:da:82:da:27:
ed:ce:b3:77:11:db:26:c1:72:fb:1d:71:32:e8:f2:
ab:34:bb:a2:e0:21:be:8c:ff:42:da:2c:f0:e1:b5:
64:b3:9d:ff:36:98:17:de:a6:7c:71:ff:d1:55:3e:
b9:04:66:32:10:41:d2:dd:5c:ee:c1:5b:a9:e7:79:
ac:b1:f7:d4:08:56:50:15:b7:12:fb:86:8f:ea:b2:
11:9a:58:a5:65:fc:5d:44:a1:df:5f:63:06:29:4d:
f5:83:7e:df:ef:69:fb:f2:75:14:d0:3d:83:41:31:
1d:bb:00:f2:08:2f:6f:cf:5a:63:c7:a0:c4:90:a4:
7f:69:dc:2d:9e:4f:f4:ac:19:e9:2a:b4:99:b0:26:
7a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5B:C6:7E:3F:08:88:48:64:C7:74:1D:41:C1:B3:B0:83:35:5D:43
X509v3 Authority Key Identifier:
keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:73:5b:ec:a0:f6:7c:84:ff:92:c4:14:a6:5a:cf:59:72:08:
5b:7e:63:c3:0d:6b:05:ca:b5:80:03:a8:c2:a1:11:79:ac:92:
49:9a:a7:5e:45:19:84:a2:a6:3d:ee:4e:9f:74:0b:c3:a5:a1:
78:a6:79:1c:fc:63:9a:1c:56:ec:55:6f:70:d3:8a:5b:67:06:
d9:e5:91:36:d7:57:b3:84:7a:3c:32:1c:1d:aa:1f:6c:c3:64:
0c:19:0f:e9:00:9a:06:1f:fd:ad:b9:40:86:ee:f5:8a:0c:d9:
b7:f6:ac:5e:58:ee:fb:4b:ca:91:98:1b:e8:71:b1:04:87:e2:
0f:e6:0f:e6:65:63:07:b8:58:10:81:e7:6d:0c:2e:55:3f:bb:
16:fc:09:28:9a:77:dd:28:ad:c4:49:ae:74:c3:af:ba:3c:86:
91:0b:bd:d6:30:ee:14:72:41:c5:d0:db:96:52:7c:9e:3d:53:
b5:fb:5e:92:8b:f7:ea:f9:b7:e5:c6:78:ee:c2:87:5f:93:fd:
8d:f9:46:91:fc:1e:6d:f6:84:95:24:16:8c:c5:53:12:3e:fe:
79:46:2c:3a:0a:cc:ff:fb:7a:83:7a:c6:24:87:a9:c1:9f:78:
d9:c2:51:ee:7e:ff:6c:64:24:8b:aa:a4:be:ca:7c:2a:b7:c4:
64:e0:46:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:25 2025 by rpki-client