
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: e3fs0vDOGmNcYMtjguxKpT0DpXgCUeDkWh+H2qAdzyw=
Subject key identifier: BB:D0:CB:84:A1:A0:87:74:FA:8F:76:FE:54:67:0B:4E:C2:3D:7E:D2
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 0199FCC669D8570E19984F04381AD1235338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0B93
Signing time: Sun 19 Oct 2025 14:01:25 +0000
Manifest this update: Sun 19 Oct 2025 14:01:25 +0000
Manifest next update: Mon 20 Oct 2025 14:01:25 +0000
Files and hashes: 1: ByXM_Ln1i6sp51H3UoiAVLtk9H4.roa (hash: WkKv5GmFkjNS11QcfAX/i3RvuDqUCdANkXDcqukdiOw=)
2: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: hJImEFGV8b+y6EQwdo7GACrdch9RufyyXYPIoQhOsuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:69:d8:57:0e:19:98:4f:04:38:1a:d1:23:53:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Oct 19 14:01:25 2025 GMT
Not After : Oct 20 14:01:25 2025 GMT
Subject: CN=bbd0cb84a1a08774fa8f76fe54670b4ec23d7ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:9e:48:96:9e:6f:32:8b:df:9d:60:13:10:
3c:40:4a:1d:d6:b8:2c:73:aa:a6:93:02:48:7c:67:
90:20:08:2f:01:61:9f:82:06:3e:72:35:58:7c:d8:
6c:26:8a:f0:6e:2b:81:18:5b:ed:37:d3:ff:05:87:
e5:31:ad:09:3f:86:fc:ac:9f:34:36:0c:0e:a6:d0:
69:c0:71:6c:30:2f:6c:df:ce:f0:0d:e9:57:89:4e:
56:2a:4a:59:4c:ad:61:3e:1b:66:0b:47:e3:7e:02:
a7:42:09:db:a3:a3:26:07:82:91:cb:8f:89:7e:0e:
4f:c9:50:13:eb:0d:ca:b3:44:76:a6:9c:79:b5:e5:
f9:06:07:a3:84:2b:9d:63:a1:15:0f:50:77:db:ba:
cb:b2:ab:e6:ae:fa:d9:60:33:c0:82:28:38:d2:54:
86:e8:9d:c7:ee:bc:af:84:04:86:e2:c7:3f:75:bc:
8f:1d:3e:52:61:36:a2:28:5e:fb:83:96:94:6d:db:
35:cb:86:c7:6e:cc:cc:9a:b3:75:f9:df:06:92:2b:
61:61:24:36:7f:20:e1:6a:b2:ad:34:c6:e4:11:1e:
7d:48:96:03:60:7e:bb:dc:e3:48:2d:98:85:2f:b6:
a3:bf:d1:75:73:66:2f:df:40:2a:e2:04:15:6b:ab:
37:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D0:CB:84:A1:A0:87:74:FA:8F:76:FE:54:67:0B:4E:C2:3D:7E:D2
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f0:32:9d:3c:8c:01:5f:e6:14:2b:81:8d:6f:85:b2:40:af:
31:85:fd:75:eb:ff:32:9a:a3:fa:d7:08:34:83:da:66:62:ff:
6d:3f:2e:f4:00:03:7c:ec:6d:e3:85:06:aa:fd:65:ab:06:a5:
0f:f2:3e:10:72:7e:65:3b:af:54:17:09:27:f4:b5:e2:69:47:
10:4f:0f:12:bc:86:dc:63:80:67:f3:fe:c2:46:cb:ff:a6:bc:
9e:9d:b4:41:24:50:92:c8:3c:76:e0:9c:3e:9a:51:8e:c8:9f:
21:8e:af:91:0c:66:bf:fa:f8:30:34:f5:43:d3:69:78:a7:40:
97:0b:8e:11:bc:ba:77:55:d8:11:b5:77:0d:56:27:81:97:7d:
0c:3e:bc:c1:71:c6:28:7b:55:c9:1d:0d:e6:ed:80:c6:76:99:
c8:bd:f7:90:57:93:48:bb:bc:77:4b:d6:24:6b:fb:3d:da:7b:
8a:6d:bb:77:ef:2b:5d:5c:39:2e:b9:ab:78:d7:da:cb:95:66:
05:53:70:ec:39:1e:60:ad:9c:95:c3:3a:08:49:d8:11:98:5d:
77:8e:6d:27:d5:28:ba:c9:28:70:b6:d5:ba:79:c2:71:cb:ee:
bb:33:0c:08:01:24:53:b8:c0:3b:8d:09:5a:58:04:d1:72:b3:
bc:df:53:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:46 2025 by rpki-client