Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: c4FerwUpoVUXnKUVRG6TWPahiHsOk6702bgo5JAsM0w=
Subject key identifier: 6A:A5:E8:68:FE:57:1C:F2:99:11:4C:A5:93:3D:61:C4:76:D4:79:D5
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 0199FD6AFEBBBB3030884A34F42E70B1216A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 0FD9
Signing time: Sun 19 Oct 2025 17:01:11 +0000
Manifest this update: Sun 19 Oct 2025 17:01:11 +0000
Manifest next update: Mon 20 Oct 2025 17:01:11 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: BQDVcGpEUNdXUmCmmwSJ/T1WaOxqk1XkMbiWw6f95dw=)
2: b_FpEo5mzbhghU7FQIOJJKiIivU.roa (hash: HOe4R50HkhUSwXgPcBKFKJCslwOuwtpIjbbm5rlZl9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:fe:bb:bb:30:30:88:4a:34:f4:2e:70:b1:21:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Oct 19 17:01:11 2025 GMT
Not After : Oct 20 17:01:11 2025 GMT
Subject: CN=6aa5e868fe571cf299114ca5933d61c476d479d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:08:61:41:f4:5c:e7:9a:c1:e9:7e:d3:15:
8c:2a:5b:0c:84:72:61:84:b9:0f:9a:75:1d:de:bc:
1d:be:ec:4e:eb:dc:3b:82:1b:ec:cc:eb:e9:ea:8b:
1a:55:57:b3:4d:b0:6f:ff:07:01:0f:80:d3:85:a6:
2a:40:f6:39:0d:51:ab:29:bf:21:77:8c:6d:4e:1c:
f3:fe:91:8e:68:08:a5:be:ae:4e:53:1d:a3:51:0e:
ee:d5:71:16:f7:29:30:f2:d8:5b:4d:c4:15:8b:79:
11:13:f0:15:19:3e:e6:f0:39:b4:6c:87:c4:d9:9b:
f9:90:6c:4b:f3:aa:6e:aa:cb:8e:c4:35:e4:99:96:
d5:5d:54:04:b0:2b:99:b1:ca:ca:14:17:99:c7:25:
a4:05:39:39:9a:47:61:c5:ff:a0:1b:37:88:fc:2a:
39:6d:33:0c:52:a4:2b:9e:73:82:6b:af:22:09:14:
54:40:c6:2a:87:81:25:87:02:1c:8b:ad:6b:c4:15:
a9:98:3e:47:e5:31:a4:67:f9:a4:94:08:59:25:21:
b5:9f:e5:0a:73:87:6d:4a:fb:46:6c:ae:5e:be:95:
a6:a0:8f:8d:44:f3:d2:84:b9:ac:f6:da:5a:fa:a6:
69:63:0b:4b:7f:4b:67:8f:4e:6b:f1:93:75:93:a2:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A5:E8:68:FE:57:1C:F2:99:11:4C:A5:93:3D:61:C4:76:D4:79:D5
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:34:6c:de:98:68:75:0f:ae:ce:6f:2a:74:73:94:5b:2a:b5:
ef:c3:f2:00:22:0f:d2:a3:a2:0c:4b:4c:ef:23:d2:47:0b:47:
d8:98:c1:fb:f7:2b:51:26:5b:44:e1:f2:b2:02:bb:ec:df:30:
43:fb:9f:0e:46:a2:0d:21:1a:01:6d:25:9f:3a:b7:ba:8a:95:
7c:ed:99:bb:64:56:6e:49:2f:ab:20:1f:a3:89:35:b6:71:87:
dd:48:d9:07:b0:ec:35:ff:a7:2d:f3:a7:50:d4:f6:14:5a:5d:
23:54:72:98:c4:03:04:a4:6f:07:b8:1e:b7:65:24:e5:33:80:
11:94:ac:93:8c:07:45:e5:58:16:9b:50:ca:ec:02:19:c2:b6:
c0:0e:40:67:28:4a:aa:b2:44:4a:a3:9f:21:a1:bf:12:9c:a9:
e2:b7:ed:79:b2:cb:fa:fc:d0:01:d6:69:9f:a5:fe:10:f3:b8:
bd:69:56:b0:1c:d0:d8:3a:87:dd:be:c0:c2:75:86:cc:2b:ac:
c3:0d:64:1c:cc:a7:cd:80:16:a0:c5:cb:8a:94:1a:42:eb:63:
4f:17:17:ad:d2:c9:52:67:02:e9:fa:8c:9c:b3:4c:03:d0:fa:
57:f1:81:ae:01:f3:b8:99:4e:9a:7c:9c:fd:09:0e:2c:b1:93:
9e:14:20:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:44:17 2025 by rpki-client