Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
File: JOzROuAn838DhidJNHBEomICjrA.mft (raw, json)
Hash identifier: Q1YoAC2gT0Va9i2d7VVyeL0ZUuH+/Bvb2eSVRGm3FCw=
Subject key identifier: 5D:CA:E4:A0:11:B6:7A:8D:FD:37:7A:09:F4:F0:BB:4A:3C:2B:3B:5B
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 0199FCFD7E538A6A0A1F55B5BCF228945780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 15:01:35 +0000
Manifest this update: Sun 19 Oct 2025 15:01:35 +0000
Manifest next update: Mon 20 Oct 2025 15:01:35 +0000
Files and hashes: 1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: p+KxA7gC3hh46x2qdH1l9OVjpJRpBsmlz35p60QDtuA=)
2: kDftkP-w1YBe-HJAv5LXS10Il0Q.roa (hash: +/EpK+4hyPfZfhLX+mr8yi7klGBJXOB+8POH+U7AuxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:7e:53:8a:6a:0a:1f:55:b5:bc:f2:28:94:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: Oct 19 15:01:35 2025 GMT
Not After : Oct 20 15:01:35 2025 GMT
Subject: CN=5dcae4a011b67a8dfd377a09f4f0bb4a3c2b3b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:00:12:a2:af:78:0e:89:28:ca:07:95:64:
2d:79:ac:72:8f:cd:a1:9a:ce:d8:ff:ef:03:81:85:
fe:51:37:60:e1:f5:e1:7d:73:40:db:d5:d2:e1:0d:
18:3a:78:b4:ef:d1:53:84:81:d4:23:ec:2d:a0:51:
e7:47:59:5e:9f:42:6b:ed:41:4c:b2:09:ed:87:be:
0d:87:14:5e:fb:1c:f8:a7:12:80:75:a6:19:b5:16:
45:ec:2b:6c:a4:2f:43:a9:73:73:3a:8e:a1:49:0d:
b0:88:8d:53:08:4e:78:7f:ff:7c:41:c1:5f:c4:40:
13:f8:c4:ce:8d:ed:66:80:77:c7:a7:64:a7:0d:54:
73:75:8e:31:c9:f1:3a:dd:ce:af:4c:94:5e:90:47:
96:e2:94:fe:d2:03:ca:69:e3:d0:0a:84:2f:dc:3e:
87:ae:f7:3b:e4:78:62:74:d5:a5:87:49:1d:79:e9:
88:1b:90:3d:00:09:bb:58:fe:62:95:3e:0a:a6:1a:
90:56:b6:eb:c0:f1:6e:f7:0a:fc:6e:8d:c1:6c:32:
74:f8:78:41:68:c0:fe:e1:13:9a:08:c5:b5:f0:ec:
b2:54:a0:15:7a:0c:ca:e2:d9:ee:d9:9d:87:5c:f8:
c5:bb:fd:cb:1c:d0:b8:fb:e1:a3:13:16:2b:5b:ea:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CA:E4:A0:11:B6:7A:8D:FD:37:7A:09:F4:F0:BB:4A:3C:2B:3B:5B
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:dd:a3:59:77:59:e6:15:21:ae:90:4c:e7:75:4e:eb:9c:c0:
a4:6f:43:1f:e3:bb:4b:48:bd:fb:57:7c:0d:14:c5:12:b8:d5:
20:63:b1:36:a3:7f:b7:98:e1:32:8e:05:39:46:f4:9e:32:2f:
ea:06:5e:d6:cb:a7:61:25:1c:37:fc:9d:23:76:a8:58:98:85:
56:4c:5a:38:79:86:c4:9e:a9:5a:a4:4c:ac:1c:8d:fb:62:6b:
d4:61:99:e1:1c:ce:47:a0:e3:9e:a1:23:4d:b5:47:37:ef:1e:
62:bf:6c:e7:1e:12:d2:be:8f:e8:40:ef:10:bd:84:9f:65:87:
d9:6b:39:78:ef:6a:99:2c:3c:e3:11:18:bb:98:8c:a7:d3:a4:
c5:82:a7:16:bc:4d:e7:6c:1a:de:45:f7:5c:81:e7:fa:a9:30:
8d:ab:04:a8:eb:70:e2:69:c1:e5:83:ba:c9:37:33:a8:84:ba:
c8:32:df:ef:18:74:07:5b:85:3d:d0:ef:eb:fb:b0:ab:39:48:
ff:c1:59:1e:d4:20:81:39:d5:d8:bf:05:1d:18:04:50:d5:d2:
72:13:db:f4:a4:c1:1d:ec:79:d0:5b:11:50:be:9d:f3:37:81:
82:05:90:f3:74:f3:94:8f:36:a6:87:99:1e:aa:f8:2f:76:67:
90:20:42:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:19 2025 by rpki-client