Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: nyeWkmDGqlElwAqNCZUUvZkiQsxJOWZJ0orGpE7zdYc=
Subject key identifier: 72:DF:0E:E9:8A:B5:45:C1:5B:55:AC:0F:47:63:FE:6D:68:AC:28:69
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 0199FB461D107B431133B7BE6DD9D6E1C2A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 07:01:40 +0000
Manifest this update: Sun 19 Oct 2025 07:01:40 +0000
Manifest next update: Mon 20 Oct 2025 07:01:40 +0000
Files and hashes: 1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: n1KT/uL6z5stMdA01vYzXeNOlniBgIdb4aDX5SmCUXk=)
2: e2Te0aWCQ8EtrlV0PLf_q38tHSg.roa (hash: 4ft8eS+VBA6HZC5LW6/i8Z2mYfS+sEEPwTfWda0kvP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:1d:10:7b:43:11:33:b7:be:6d:d9:d6:e1:c2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Oct 19 07:01:40 2025 GMT
Not After : Oct 20 07:01:40 2025 GMT
Subject: CN=72df0ee98ab545c15b55ac0f4763fe6d68ac2869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:f8:68:52:70:03:63:a3:2b:33:3e:a5:b6:
83:4e:b6:24:ec:d5:33:bf:4d:5a:e9:22:63:25:73:
95:41:9b:13:17:24:78:2e:8a:4b:41:64:80:a9:6b:
d1:71:2a:eb:ed:21:ff:6c:f0:f2:7c:94:f0:83:0b:
2b:eb:77:31:17:87:5d:56:87:1a:c9:ee:4c:d3:e7:
28:44:4e:98:14:39:91:fc:c5:01:4c:3b:89:94:46:
65:52:6c:8c:e9:12:31:3e:b0:15:95:27:ac:b0:42:
f4:34:f6:3d:a9:04:1a:f9:4a:f4:39:93:56:b1:f6:
14:96:44:32:f2:32:58:01:0a:e4:c0:72:20:f2:42:
f8:80:37:1c:58:85:69:c2:6b:03:f6:26:96:3c:8f:
25:fe:24:2e:3d:72:62:83:37:48:74:5d:cf:8d:54:
fd:17:91:06:a2:36:e9:56:75:4d:ba:5f:cd:d7:94:
c8:27:70:9c:bb:cc:50:6e:f7:5c:d3:6b:ac:0b:71:
99:1a:06:f4:75:3d:f1:6f:cb:0a:65:7d:02:98:0f:
9f:33:c8:cc:28:e8:c6:fa:27:8a:7e:05:f9:dc:21:
fc:01:8d:e5:d0:1d:a9:79:16:60:4c:05:a6:70:da:
4a:fc:bd:50:2e:c6:96:71:6f:2f:3e:c3:8c:00:a7:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DF:0E:E9:8A:B5:45:C1:5B:55:AC:0F:47:63:FE:6D:68:AC:28:69
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e5:52:65:a4:2c:06:1e:69:da:6b:d6:3e:a2:bc:71:28:2a:
c3:29:88:59:3d:9a:4a:3e:4e:0b:37:b2:b7:2e:f6:bb:7c:bf:
d7:12:3c:56:38:8f:f5:41:11:9a:30:2a:92:10:06:2b:c2:3c:
18:d1:f8:64:87:18:41:ae:c2:c4:e9:43:34:71:ec:d4:d6:ad:
9e:88:68:1c:fe:b9:30:39:ca:48:9a:b1:89:2d:07:41:91:58:
88:13:d8:7e:99:5b:14:84:dd:67:88:e2:7e:66:26:b9:15:be:
6d:41:1e:9f:09:d4:c7:d6:09:1a:37:4c:68:6b:f1:d3:9e:d8:
45:cf:3c:b6:18:ca:9a:d8:d5:37:87:d6:ad:40:5e:eb:60:8d:
93:5c:ec:24:e1:c8:5e:40:63:10:a0:80:cb:1f:28:fe:17:ed:
80:22:85:da:b6:b7:56:26:2a:97:ab:fb:73:ca:1f:64:48:87:
7d:ac:f5:d9:51:18:5b:eb:1e:e8:92:73:28:06:b0:d4:22:4e:
4d:e7:05:f7:5a:7e:d2:24:1c:24:b2:d4:38:8a:7e:1b:d1:25:
e4:a6:51:74:b5:ff:e0:46:16:e8:34:d9:57:5b:9c:0c:79:c0:
10:07:92:71:8d:aa:1c:53:39:69:f0:dd:9b:7f:0a:79:e3:09:
a2:4c:88:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7Rh0Qe0MRM7e+bdnW4cKoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGZkMGQzMzg4NmQ4MzljNWNjOTAxMDNhMTg2ZTEzYTM0
OGFkNTAwHhcNMjUxMDE5MDcwMTQwWhcNMjUxMDIwMDcwMTQwWjAzMTEwLwYDVQQD
Eyg3MmRmMGVlOThhYjU0NWMxNWI1NWFjMGY0NzYzZmU2ZDY4YWMyODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf34aFJwA2OjKzM+pbaDTrYk7NUz
v01a6SJjJXOVQZsTFyR4LopLQWSAqWvRcSrr7SH/bPDyfJTwgwsr63cxF4ddVoca
ye5M0+coRE6YFDmR/MUBTDuJlEZlUmyM6RIxPrAVlSessEL0NPY9qQQa+Ur0OZNW
sfYUlkQy8jJYAQrkwHIg8kL4gDccWIVpwmsD9iaWPI8l/iQuPXJigzdIdF3PjVT9
F5EGojbpVnVNul/N15TIJ3Ccu8xQbvdc02usC3GZGgb0dT3xb8sKZX0CmA+fM8jM
KOjG+ieKfgX53CH8AY3l0B2peRZgTAWmcNpK/L1QLsaWcW8vPsOMAKeoCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLfDumKtUXBW1WsD0dj/m1orChpMB8GA1UdIwQY
MBaAFCQP0NM4htg5xcyQEDoYbhOjSK1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMt
ZjI2YmZmOGI0OTk0LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMtZjI2YmZmOGI0OTk0
LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOVSZaQs
Bh5p2mvWPqK8cSgqwymIWT2aSj5OCzeyty72u3y/1xI8VjiP9UERmjAqkhAGK8I8
GNH4ZIcYQa7CxOlDNHHs1NatnohoHP65MDnKSJqxiS0HQZFYiBPYfplbFITdZ4ji
fmYmuRW+bUEenwnUx9YJGjdMaGvx057YRc88thjKmtjVN4fWrUBe62CNk1zsJOHI
XkBjEKCAyx8o/hftgCKF2ra3ViYql6v7c8ofZEiHfaz12VEYW+se6JJzKAaw1CJO
TecF91p+0iQcJLLUOIp+G9El5KZRdLX/4EYW6DTZV1ucDHnAEAeScY2qHFM5afDd
m38KeeMJokyIDA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:34 2025 by rpki-client