Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
File: JSxOK_XyE4Ri70pdng9uenY1MP4.mft (raw, json)
Hash identifier: Jq3DNmMus0N0ICCwn02cuZAXWmxM5oaV/ShWMTHsUtQ=
Subject key identifier: 1C:19:27:9A:49:2F:3E:A2:99:A5:35:84:E4:77:2A:2C:26:41:CD:63
Authority key identifier: 25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
Certificate issuer: /CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Certificate serial: 0199FB7C96ED6ADBD96018DD2CA3C8E86E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
Manifest number: 128F
Signing time: Sun 19 Oct 2025 08:01:10 +0000
Manifest this update: Sun 19 Oct 2025 08:01:10 +0000
Manifest next update: Mon 20 Oct 2025 08:01:10 +0000
Files and hashes: 1: 5FKgboa-jVuSGiVGPFr01etCXj4.roa (hash: dzDU7TqrJaisytQvX6tLA3RUIS+a2Ff3OaHBS+AZWlk=)
2: 5ustdSbbm9ST-2wIKJ8CEQFm9uA.roa (hash: yKpgpIHIG2BTdF1Lf8tbsgQ4B2uw7L1E3SOAOBNc6b4=)
3: JSxOK_XyE4Ri70pdng9uenY1MP4.crl (hash: IBEC0t92Jp+TF+CM5XKniYiU2p+6m2SxPanLce7vhAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:96:ed:6a:db:d9:60:18:dd:2c:a3:c8:e8:6e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252c4e2bf5f2138462ef4a5d9e0f6e7a763530fe
Validity
Not Before: Oct 19 08:01:10 2025 GMT
Not After : Oct 20 08:01:10 2025 GMT
Subject: CN=1c19279a492f3ea299a53584e4772a2c2641cd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:79:db:5c:2b:40:ca:b7:e2:0d:b7:5c:0c:
ab:b3:c1:df:de:b4:03:56:f2:c3:45:9d:8c:95:8c:
ab:64:a5:49:cd:3f:6a:c9:ec:a9:0a:a3:5a:e1:82:
35:3b:ac:78:81:4c:8f:b9:56:2a:d6:96:69:a4:cb:
a2:23:90:fb:99:af:dd:51:b0:91:6f:90:f0:5f:6a:
5a:42:d2:88:b8:d2:44:83:9f:07:a1:a8:7c:31:35:
24:a6:7f:36:14:87:18:84:68:96:b5:75:cd:91:26:
2b:7b:1f:5e:b2:19:a9:53:90:60:8f:6e:6d:da:53:
0a:53:45:b3:cf:24:ab:2d:16:fe:c5:c8:7e:ac:ad:
3a:50:57:a3:68:e4:79:8c:92:ab:18:ba:02:b1:8d:
bf:1c:bd:8d:34:90:b8:c3:f0:eb:00:15:5a:28:41:
ff:96:26:a9:b4:55:b3:4f:e1:25:fe:39:a8:17:95:
b5:52:48:93:61:31:4a:42:0e:e4:e4:02:e4:7c:53:
f0:c1:dc:f5:53:30:9d:8f:92:a7:e8:18:e1:6e:89:
3f:ed:18:8b:63:ce:cc:82:9f:fa:61:a6:a4:cd:f2:
10:51:4a:93:a9:7c:19:72:b2:d3:f2:09:b9:b9:f1:
09:d9:ea:90:df:fb:a5:58:7b:f3:d9:e1:c8:34:a9:
12:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:19:27:9A:49:2F:3E:A2:99:A5:35:84:E4:77:2A:2C:26:41:CD:63
X509v3 Authority Key Identifier:
keyid:25:2C:4E:2B:F5:F2:13:84:62:EF:4A:5D:9E:0F:6E:7A:76:35:30:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSxOK_XyE4Ri70pdng9uenY1MP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/bbba88-1344-4d89-8f52-6df7bf59e326/1/JSxOK_XyE4Ri70pdng9uenY1MP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:77:b1:d3:b3:b2:2c:11:06:06:99:3d:e0:41:9c:96:bc:77:
1d:c8:0a:6b:b0:a2:82:86:2f:cc:6e:76:d9:90:1f:49:f5:f9:
3f:89:8e:80:73:5b:5a:c2:bd:e9:4d:f6:2f:f3:d7:40:1a:3b:
a0:70:0e:4b:f6:48:58:e4:ee:a1:c6:32:7c:cd:68:68:90:e6:
a3:ec:6c:3f:31:31:05:0f:c9:d9:35:4d:bb:b3:58:37:ca:6c:
ab:b2:6b:ea:e8:54:17:6c:01:92:16:a0:be:2d:79:1e:4d:f4:
f4:8b:4b:46:a7:b9:d5:a3:35:96:a5:3a:c5:eb:5e:20:06:5e:
4c:6d:9b:a5:d3:28:17:2f:ea:f7:57:fc:ee:ee:a9:63:93:ab:
6c:28:c2:3c:ab:0c:df:50:90:97:27:30:65:c1:1d:42:17:2a:
c2:b3:df:26:84:0d:df:c6:07:91:e2:14:4b:95:a7:5b:11:a5:
18:0c:29:7f:0b:47:18:20:55:9e:8f:e6:1d:0f:f9:68:6c:8f:
c9:34:58:73:f4:a9:39:da:77:38:26:92:7a:22:c5:7f:4c:cc:
7e:6b:6a:e4:6e:ea:cc:2a:60:da:70:34:87:ce:d9:ee:30:f1:
b3:35:59:76:6a:72:9b:7a:e0:c1:63:f4:15:20:1e:d1:79:a9:
f0:bb:d6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:28 2025 by rpki-client