Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
File: JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json)
Hash identifier: 22w2EjAHAXvXlzqnV6erOUJgieCGU1Pj+RtgkcrWsms=
Subject key identifier: 9B:2D:02:46:67:12:00:AB:57:9E:1F:45:5D:7A:C0:51:74:A9:AE:9C
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial: 0199FDDA30580B77ACC116FFFC8B9FFB1054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
Manifest number: 0AF1
Signing time: Sun 19 Oct 2025 19:02:38 +0000
Manifest this update: Sun 19 Oct 2025 19:02:38 +0000
Manifest next update: Mon 20 Oct 2025 19:02:38 +0000
Files and hashes: 1: 6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa (hash: qemS/elZANo0HMcYP0VSYi/2UWeoq+R5j6kNuTymeGQ=)
2: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: oqO+bkYceeXfDJ7hVN7nUzv5LWHsUf9dwts7NsTobco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:30:58:0b:77:ac:c1:16:ff:fc:8b:9f:fb:10:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Validity
Not Before: Oct 19 19:02:38 2025 GMT
Not After : Oct 20 19:02:38 2025 GMT
Subject: CN=9b2d0246671200ab579e1f455d7ac05174a9ae9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:b6:db:a1:95:62:55:74:d6:56:9c:23:91:
65:d2:f3:a2:9f:e0:1d:49:35:71:f9:a9:11:8d:b1:
99:17:60:1b:10:87:cf:ab:23:15:19:5c:50:5e:83:
6d:41:2b:dc:6b:5d:a2:50:64:c6:3f:bc:d8:a8:37:
ac:45:33:6f:a9:17:a7:0f:1a:8a:89:f1:54:4b:1c:
91:db:21:97:39:37:96:73:ba:90:2e:af:a2:7d:32:
70:34:04:4a:ab:39:30:eb:93:e2:91:3d:f4:57:cc:
95:39:f7:b4:3c:d4:8b:55:71:52:1b:db:40:ab:8b:
4d:b2:6b:b6:27:5e:e9:18:84:57:9b:69:dc:0e:20:
39:a7:49:ff:26:a8:63:a9:9d:b5:9e:21:4b:82:67:
d9:74:de:fd:a1:fd:9d:9b:73:30:6d:33:b5:ca:0a:
2d:d4:d7:06:0d:ab:cb:f8:86:5e:f3:20:11:8f:66:
f0:7c:c6:fb:4d:95:18:e7:87:8d:42:9f:cb:ac:4b:
ce:25:55:3d:10:23:f2:05:a4:22:b2:b9:72:ee:a5:
4e:76:a7:7c:38:28:3b:f5:5f:62:de:84:e7:c7:79:
28:3e:ac:4a:7c:39:86:fe:e9:77:e2:49:0e:51:ef:
7a:ce:34:29:dc:ac:f6:ef:d6:ae:66:bf:32:e5:fa:
bd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2D:02:46:67:12:00:AB:57:9E:1F:45:5D:7A:C0:51:74:A9:AE:9C
X509v3 Authority Key Identifier:
keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3a:ff:59:80:d7:39:14:26:5d:2f:4d:be:3e:06:f5:10:bc:
ac:45:88:53:98:78:c4:5f:76:73:18:14:c4:c9:c6:eb:c8:d4:
d7:3f:a5:93:9f:61:d2:45:4a:3f:3e:16:6e:3e:65:fd:91:ac:
f0:5a:a7:87:44:2a:aa:1c:f4:4b:3b:75:49:9c:98:14:9a:98:
a5:0b:cb:8f:a2:6a:7b:eb:d1:e6:91:08:81:92:45:e3:55:13:
1c:e3:bc:e4:bf:86:5e:30:98:6d:cd:fd:39:34:b5:c8:6c:db:
a8:95:db:2e:53:31:f5:ba:d7:de:2a:bd:fd:a7:ff:10:f0:66:
cc:4a:96:a3:84:80:84:47:5a:a9:c5:7d:a1:50:0a:14:50:5f:
2c:16:9b:2e:fb:6f:75:6e:a3:fb:ad:7c:76:36:42:51:df:b3:
6a:38:14:c1:a9:d4:99:16:65:19:2d:aa:e9:2c:9a:65:3d:94:
46:82:f6:00:0e:d3:c0:30:c9:8f:db:b4:3f:bc:cd:11:5b:2e:
f3:1c:d8:aa:4a:cb:42:fb:82:4d:0c:7a:58:1b:2c:08:ce:ec:
cd:3b:d5:8c:0f:42:51:ff:83:a6:48:56:3a:74:f9:43:e6:9f:
ab:9e:4d:9c:c4:61:45:80:58:cd:23:ad:05:0e:28:78:c5:f9:
5b:d3:bd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:02 2025 by rpki-client