Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
File: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft (raw, json)
Hash identifier: HVG2jizRhZEveIQvZ9LazVdSphKjZ2Ua92IQ9wtUuOA=
Subject key identifier: C5:E0:0C:BD:C5:57:C9:F9:AB:3F:DB:B8:B2:D6:04:A5:E0:99:C2:E1
Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
Certificate issuer: /CN=261c8e2b00a3d5957d4112daf35b66e429375505
Certificate serial: 0199FBEC4F9C5CC1EE4F466C3CF5B9FA3BB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
Manifest number: 0463
Signing time: Sun 19 Oct 2025 10:03:12 +0000
Manifest this update: Sun 19 Oct 2025 10:03:12 +0000
Manifest next update: Mon 20 Oct 2025 10:03:12 +0000
Files and hashes: 1: JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl (hash: wjD4skdhsUhpFeQncwa8B3yQJksUGeW7TIepOF1YZOA=)
2: pi3_amo42v-V9gBkLtFw7VXHyt8.roa (hash: ptd1oveMAvBnjDaa3RzGQR3dUT03hcO6XNO/IHbTQeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:4f:9c:5c:c1:ee:4f:46:6c:3c:f5:b9:fa:3b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505
Validity
Not Before: Oct 19 10:03:12 2025 GMT
Not After : Oct 20 10:03:12 2025 GMT
Subject: CN=c5e00cbdc557c9f9ab3fdbb8b2d604a5e099c2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:56:84:30:8e:33:86:5f:b3:68:9a:8d:d7:
91:81:d0:9e:69:ff:a8:aa:17:c7:f7:f1:06:ed:1d:
d7:a0:8a:a3:9d:70:c6:ea:9b:f6:6b:d7:55:60:25:
7a:36:0a:d4:60:ef:47:39:36:06:54:70:be:58:e0:
ab:7c:85:ec:95:20:7e:db:23:0f:26:fb:55:4b:eb:
83:c8:9d:fc:d4:d0:06:5d:d6:d7:49:6a:c7:9f:14:
7b:57:fe:41:e3:a1:95:3c:5c:bd:77:03:0e:c7:4c:
5e:4d:25:50:b9:de:a1:ac:97:d7:b4:83:bb:54:eb:
50:9d:2b:5b:55:00:e1:87:7f:57:46:1b:cd:ec:23:
0f:f7:b3:5d:31:a5:80:f3:71:7e:71:a8:db:3d:7a:
e0:77:81:27:0a:39:4b:4b:3b:11:b9:59:f0:52:ab:
14:e7:c5:8f:98:11:29:5b:6a:22:67:93:25:6a:c3:
3a:23:20:2b:3a:e0:19:7a:fd:fa:73:83:da:b2:a7:
2c:18:e0:07:5b:32:cf:fb:fc:7e:e4:ef:be:a7:a4:
76:e7:60:45:64:f3:45:59:18:44:b2:64:4a:84:4b:
8b:fc:27:70:65:de:b1:0b:46:85:fd:57:6f:2e:9c:
c6:38:03:fb:bd:db:25:56:c6:7b:a9:f2:fc:a4:83:
23:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E0:0C:BD:C5:57:C9:F9:AB:3F:DB:B8:B2:D6:04:A5:E0:99:C2:E1
X509v3 Authority Key Identifier:
keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:15:f4:f6:75:de:6e:97:77:42:3b:e6:24:bb:5d:43:68:95:
bd:2d:df:db:6d:40:5c:b8:be:f5:a9:73:04:72:10:96:4d:bc:
c3:eb:6d:89:c7:2c:5b:04:19:94:c7:58:8c:29:e3:1b:8a:22:
38:27:03:aa:74:a3:4b:a5:cb:0e:c4:a7:c9:e4:56:20:d0:f1:
c5:c7:90:3e:51:f2:17:94:be:b7:05:48:aa:e4:01:8f:f7:1f:
80:12:61:55:07:c3:33:62:c8:52:2e:2b:69:9e:08:15:e8:ef:
24:f9:0d:22:45:ce:c1:bc:59:54:3d:e5:01:46:47:b0:f5:81:
0e:1d:82:5d:6a:4c:9d:f4:6e:42:01:b5:89:59:72:c3:e9:ed:
07:2a:c8:4c:c5:74:52:cd:80:0c:c4:24:3d:3e:7e:f6:c6:b7:
1a:e0:5c:ff:81:92:b7:fa:54:da:b9:d0:55:9e:f8:63:e8:a7:
23:9f:16:5c:04:b3:92:02:15:4c:15:29:99:ad:8d:e8:b0:b7:
57:9b:15:e7:00:c0:8c:e3:f5:4f:d7:73:70:10:1d:62:33:ec:
02:19:35:9f:56:ca:dc:47:ea:0d:16:47:b0:79:ff:a3:63:20:
13:c3:94:16:b7:fc:87:49:c0:a8:20:cb:e1:7f:52:f2:8d:ea:
7f:57:d9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:44 2025 by rpki-client