Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
File: JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json)
Hash identifier: nADYBp1+CrsrjBcjutLAu1KQfuM3aEIpVQwE6wKDB8E=
Subject key identifier: C1:11:A7:0E:B6:47:B9:F3:C9:51:3E:F8:0A:3F:42:6B:98:2F:35:FF
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial: 0199FC589CCB810847C884680D9B38F90876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
Manifest number: 120F
Signing time: Sun 19 Oct 2025 12:01:29 +0000
Manifest this update: Sun 19 Oct 2025 12:01:29 +0000
Manifest next update: Mon 20 Oct 2025 12:01:29 +0000
Files and hashes: 1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: EdkEdZ0OiFyLWVWHk71TFypAsWZGlWTjXycyiBPC1K0=)
2: _d1GEPj08rPnUJ5e0jIgKD6QCFQ.roa (hash: vnr1x2ojeLhbVafxW9oqVV43qotLr8cLQwIIuErWSfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9c:cb:81:08:47:c8:84:68:0d:9b:38:f9:08:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Validity
Not Before: Oct 19 12:01:29 2025 GMT
Not After : Oct 20 12:01:29 2025 GMT
Subject: CN=c111a70eb647b9f3c9513ef80a3f426b982f35ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:be:cd:24:54:8a:9a:98:86:dc:10:f1:ad:
df:7c:0f:c9:91:02:ea:f5:5d:89:51:89:62:e9:64:
68:5d:11:85:3f:45:e8:10:e9:02:62:e0:c9:b7:31:
1d:fd:82:5e:cb:9b:d8:3a:20:97:9a:1e:ad:11:04:
a8:99:4b:18:af:17:26:0e:29:15:18:80:5d:e3:4b:
2a:ba:53:53:08:e5:bb:af:be:e8:ee:ea:9d:c9:04:
19:2d:3e:b3:c6:80:33:25:98:76:2a:d4:21:f4:bb:
fb:c9:96:ff:a8:0c:a0:2e:55:97:99:f4:6d:ca:83:
d5:82:22:7f:f2:15:d6:76:5d:48:4c:66:6a:aa:04:
8c:eb:d8:d0:e4:98:ac:b5:57:41:64:4e:e0:af:00:
b6:63:bc:cb:66:ba:1a:d6:29:10:66:fe:c2:1d:c2:
20:6e:d4:c3:cd:13:39:91:35:61:b3:b9:33:36:8d:
11:8c:9f:3f:0d:af:28:58:02:1f:f9:53:5c:93:9c:
c2:e3:a0:4f:bd:25:7e:44:29:d8:b0:fa:75:97:cc:
26:a0:92:b8:a4:5b:c8:22:e8:57:a8:2c:a1:9c:83:
f2:e3:e4:f2:58:9f:30:89:55:3d:2e:1d:63:07:1b:
06:d0:53:88:a5:c5:4a:c7:cf:72:67:4a:a4:64:8f:
11:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:11:A7:0E:B6:47:B9:F3:C9:51:3E:F8:0A:3F:42:6B:98:2F:35:FF
X509v3 Authority Key Identifier:
keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:01:74:c2:a8:92:44:7d:97:b1:11:83:8c:bb:cb:dc:20:7b:
a0:f4:5e:17:2f:ca:ad:c4:89:db:90:4d:2a:a8:7f:de:11:80:
a0:cb:17:23:cc:66:e2:a6:b2:e5:58:35:d4:5b:fc:a5:b6:a9:
4a:7d:66:94:d7:41:45:48:e0:d8:e3:08:fe:3e:8c:f6:50:bb:
67:53:77:53:0b:95:c4:99:44:63:df:46:41:a3:f6:9a:ce:9e:
8d:0c:95:f1:c5:c9:24:a5:58:57:f9:4e:e9:24:23:13:28:16:
e1:a2:29:34:c6:18:56:e9:8a:5b:4b:91:04:55:e2:d1:52:9f:
cc:97:fe:7f:82:7d:51:e2:e4:5b:65:4c:ef:ec:c7:db:2e:e9:
99:83:0a:6f:4f:2b:8d:9e:da:1b:9c:35:d6:32:1e:a1:b0:27:
9d:4d:ab:2c:37:14:d6:43:a5:c2:3c:f8:a6:ac:1f:d5:c1:07:
4b:98:01:d1:75:1a:0c:ff:d4:d5:58:dc:e1:b9:9a:27:86:c6:
6a:5c:36:59:9a:5a:d2:d1:30:b4:ed:3f:ed:f6:93:44:c6:02:
3b:9c:66:7d:b6:56:9e:a3:82:5d:d1:ba:0c:31:ba:21:fa:06:
8e:45:a2:fe:63:45:a3:d8:39:e2:4b:3f:f1:26:38:f7:4d:60:
b8:52:9c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:20:17 2025 by rpki-client