Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
File: JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json)
Hash identifier: h4aIZDnYcqNpd/yOEu2JXI6cU/k9oxOowIuFGc2T8t4=
Subject key identifier: 3C:1F:C4:EA:76:20:9E:41:BF:F8:38:9A:B6:1A:BD:B5:D4:5E:C2:7C
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial: 0199FB0EEBF32F35D579776D96441CD8CC89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
Manifest number: 0D76
Signing time: Sun 19 Oct 2025 06:01:23 +0000
Manifest this update: Sun 19 Oct 2025 06:01:23 +0000
Manifest next update: Mon 20 Oct 2025 06:01:23 +0000
Files and hashes: 1: DdP_Bqbhgl16gdJsvkBhi1YcDjQ.roa (hash: I6Jh8sH5S9Q2lg3Ub1gkdbdEGtUo1NZqfvOrCbSIvmc=)
2: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: XKNTB89JtjRK6aUYDG5Lu0ssS9Oy4b1rvQSAQc5G9p8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:eb:f3:2f:35:d5:79:77:6d:96:44:1c:d8:cc:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Validity
Not Before: Oct 19 06:01:23 2025 GMT
Not After : Oct 20 06:01:23 2025 GMT
Subject: CN=3c1fc4ea76209e41bff8389ab61abdb5d45ec27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:82:62:45:22:87:b1:0f:67:89:8c:5e:af:e5:
69:54:ca:63:71:dd:4c:4e:52:12:75:4d:05:7d:b0:
37:5b:16:f2:c0:9c:ff:45:77:ae:39:9a:3d:11:31:
c7:15:c2:83:37:ee:2b:86:6f:03:9b:63:1c:d4:b9:
e3:7d:72:21:f2:57:e9:0b:f4:48:3c:56:7a:f5:06:
79:c2:e3:59:8a:01:47:e3:1e:83:04:1f:e2:db:96:
63:b9:f3:a7:0d:db:06:d8:78:77:20:37:41:88:56:
88:13:bb:b6:01:cc:15:e6:93:71:ee:d1:96:00:d4:
21:eb:ff:48:61:27:82:db:16:c3:a5:27:3a:8f:44:
bd:b9:a4:1a:78:6b:52:4a:62:0d:e1:eb:5b:cb:b0:
17:ea:06:01:cb:7d:6d:27:fa:8d:4e:dd:1a:96:aa:
40:43:6d:de:eb:7a:99:e0:fc:d5:eb:92:90:b7:7f:
f5:28:ac:94:98:ea:15:55:ed:99:d3:32:97:7d:13:
ae:8b:e4:25:7a:b2:73:ca:ab:0a:87:24:66:47:f2:
97:42:b4:fa:c2:83:c6:76:96:52:7d:b2:c1:a3:80:
67:fe:ea:7a:a4:43:db:80:92:5d:11:f9:cc:db:55:
af:e8:f6:72:6a:42:6b:22:c5:88:75:02:a1:12:8b:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1F:C4:EA:76:20:9E:41:BF:F8:38:9A:B6:1A:BD:B5:D4:5E:C2:7C
X509v3 Authority Key Identifier:
keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a1:3a:19:cf:9f:8d:7c:62:c0:8f:6c:da:bc:c5:fb:80:a2:
52:67:0d:53:d3:e9:75:fd:b2:37:d6:5b:14:d0:bf:ba:aa:ae:
21:54:6a:e6:fc:77:8b:38:9c:9b:15:13:b1:e3:e0:c0:da:0d:
2c:50:37:c4:1d:52:ea:b0:fa:b1:b3:03:7e:36:ab:31:8a:75:
a8:1c:86:94:af:46:3c:51:cb:fa:32:39:52:bc:2b:b4:2d:02:
49:44:b8:99:70:c9:17:b6:68:24:bc:78:b0:b0:da:22:2a:4e:
a2:e1:5a:a5:86:1b:6b:bb:53:5b:95:d5:91:ca:51:6d:f0:60:
94:c4:bf:62:51:38:5e:21:b4:9d:f4:f5:1c:5d:5c:c7:44:45:
f3:e1:d6:78:28:0e:4a:14:fe:ea:04:5a:72:07:42:00:c5:7a:
22:51:4e:25:ce:4f:37:98:59:64:e0:26:2f:4e:27:fc:92:1a:
b4:17:3d:99:bc:c8:48:d7:d2:8c:2f:4c:3e:04:3a:e0:bf:09:
0b:58:cd:60:2e:e7:5a:8b:e0:dd:1a:b1:6e:50:ce:75:df:ea:
fd:40:45:ac:93:05:9b:bd:78:07:8e:f6:ee:a7:6e:98:31:d5:
4f:1b:c5:b1:94:12:96:82:b6:89:de:5d:0c:43:48:44:ba:11:
dd:6c:0a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:26 2025 by rpki-client