Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
File: JcX73HIgV6ZfqduxF_xL33LtwKc.mft (raw, json)
Hash identifier: f+Gdx3x3Z9dJ+3MfaYkQceMQ5nqhRE/8XUJPXE5KgUY=
Subject key identifier: 3A:8F:EE:8E:3F:22:AE:6E:DD:AC:66:62:18:1B:11:10:0B:F3:22:96
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 0199FC21C56D3A496695C9651DF8F63E0649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
Manifest number: 1664
Signing time: Sun 19 Oct 2025 11:01:35 +0000
Manifest this update: Sun 19 Oct 2025 11:01:35 +0000
Manifest next update: Mon 20 Oct 2025 11:01:35 +0000
Files and hashes: 1: FcPnx9NX1kH5RYqBRj5NJyCtJeY.roa (hash: O/Wex6DgjEsk/AVu9hB9e1DPWw/FwSgD3IoluP19PJM=)
2: JcX73HIgV6ZfqduxF_xL33LtwKc.crl (hash: 4Sa2Lz7ZZhd87JoYg1brPz11Y1AkE0JLXyWNV+J0SWQ=)
3: WuDdHOb-0ajIhQAb_bev4tWYHyY.roa (hash: zmi6poZ6GsB58gk/yWshjgBBh9ru+rdC1Ii/B8DXWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c5:6d:3a:49:66:95:c9:65:1d:f8:f6:3e:06:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Oct 19 11:01:35 2025 GMT
Not After : Oct 20 11:01:35 2025 GMT
Subject: CN=3a8fee8e3f22ae6eddac6662181b11100bf32296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:69:0d:60:05:74:1d:56:89:08:8c:0b:d4:
c7:c1:9c:93:75:d4:d9:58:61:22:98:66:fc:fc:00:
af:d5:2a:dc:84:cc:e4:97:92:8b:15:6d:82:9c:dc:
39:a4:a6:62:61:27:86:3b:a5:1f:8b:4a:fc:43:d0:
c0:90:c1:ed:6a:d4:14:8a:3c:fb:79:7b:a8:8f:b3:
dc:90:22:39:87:8e:60:80:05:ae:3b:ce:ac:ec:50:
bd:94:34:e2:c7:5f:bd:88:8d:34:d0:b4:b1:b1:c9:
d1:3d:43:7d:9e:67:b3:f2:49:cb:c7:86:95:d1:a9:
3f:37:fa:48:64:d6:44:d6:8f:44:f2:6c:30:f5:e6:
c4:cb:e7:80:43:e5:4e:60:fa:56:08:a3:f4:0a:ab:
df:1b:6c:21:4a:3f:73:e8:47:93:76:03:01:07:2e:
89:df:7c:3b:88:db:d8:60:9f:d0:24:21:ae:9d:c4:
43:44:db:96:d8:b5:5a:b4:71:9c:d4:8c:6b:4a:e9:
e8:6b:9e:c3:6c:81:b6:c9:d5:ee:68:25:bd:37:83:
71:da:3b:80:b5:64:25:44:35:51:7f:87:84:23:a3:
bf:d8:ae:f0:52:57:ed:18:83:45:11:3c:9d:90:0e:
10:b0:15:4b:4b:ed:ea:06:87:63:89:ab:05:ef:d4:
64:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8F:EE:8E:3F:22:AE:6E:DD:AC:66:62:18:1B:11:10:0B:F3:22:96
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2d:52:1c:80:67:fe:68:1e:39:a4:ca:a8:96:83:b1:72:32:
2c:72:1e:28:a2:df:2a:f3:b1:f8:4b:50:ed:3c:db:ec:d7:ed:
9d:dd:bd:83:54:b4:15:85:d2:69:be:df:90:93:1a:f2:8b:fb:
65:f6:d3:d6:4e:3b:6f:38:b0:b0:15:a5:91:0b:56:b7:4a:98:
a2:bb:0f:64:97:e9:81:76:78:32:2e:89:2c:60:e7:1b:86:6e:
ed:2c:38:d6:39:2d:ff:3b:68:e4:11:3e:b6:bb:9a:6b:83:63:
68:cc:17:28:11:1a:ea:1d:f6:22:97:49:bc:c5:a5:ae:dd:7b:
77:8f:e5:13:b5:f4:fe:4d:ba:03:e7:44:84:41:eb:39:9e:75:
92:57:e4:e9:02:74:a6:11:42:2d:62:aa:89:5f:86:30:0a:b8:
3b:6d:cc:a3:67:fb:63:d8:cd:59:45:d4:16:8b:67:b3:10:7f:
20:ca:96:18:e2:f6:84:a7:0a:3f:8e:d1:e9:95:23:5b:11:ae:
89:53:2f:f7:8f:89:74:4a:bb:6a:a7:3a:5b:5c:c3:dc:c6:b4:
15:18:68:08:20:5c:25:03:3a:4e:a9:73:bf:15:27:81:1b:8a:
b3:02:b5:be:38:43:bd:86:cc:83:6c:88:2d:15:a7:cd:bb:7a:
80:ab:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:07 2025 by rpki-client