Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier: YenQr9nbt3CJgTy/l1Be45MK3nZDJyUWmTQIsOGB6sQ=
Subject key identifier: FD:78:1F:03:F0:F4:71:0E:0B:5A:98:F3:A8:CE:3F:50:56:CC:63:CB
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 0199FBEC1B8BB79937D1392EA62F89106F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 10:02:58 +0000
Manifest this update: Sun 19 Oct 2025 10:02:58 +0000
Manifest next update: Mon 20 Oct 2025 10:02:58 +0000
Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: vtonm7WOUYNYMzcraz9+qSFfB+o9e+QnH9vW+Td/dlc=)
2: UFrxJgzTwVdJL_jkED60zsAU8jc.roa (hash: iRzsXtUX9Sxs+CrzlnzXYrSJNm2lX5qV3x514cI48DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:1b:8b:b7:99:37:d1:39:2e:a6:2f:89:10:6f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Oct 19 10:02:58 2025 GMT
Not After : Oct 20 10:02:58 2025 GMT
Subject: CN=fd781f03f0f4710e0b5a98f3a8ce3f5056cc63cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cf:0c:bb:ae:5a:71:c0:b8:dc:e9:76:ba:f5:
82:e9:e9:ca:dc:d9:1c:ad:66:43:92:01:89:41:af:
16:52:d7:64:9b:fd:bc:e3:c1:d4:7c:9d:1f:2b:f6:
ce:20:60:06:c6:09:b2:d1:36:01:a2:e1:34:33:be:
c2:c2:1c:11:3c:77:1a:20:eb:da:76:2a:6e:d7:4b:
fb:41:49:27:94:64:18:a4:38:cf:aa:9a:aa:7c:be:
ed:cc:aa:03:7f:31:4b:04:01:4d:b3:f9:7e:a8:af:
64:c4:04:68:6a:98:a1:bf:94:83:c8:02:da:c3:fd:
fd:20:e1:32:84:97:49:c5:8e:e1:bc:24:29:f1:d9:
7f:0e:06:59:ac:3a:08:9d:c6:cb:66:37:cc:c0:2c:
e1:a6:e3:d5:b1:cd:b8:36:1b:63:93:88:74:f2:23:
5e:d2:d5:93:62:3a:5f:dc:dc:34:e3:3f:d4:92:2e:
9f:1a:f1:8e:06:4b:28:5c:4d:1a:9b:68:d6:a3:fd:
d2:c0:9b:0d:5c:30:a7:51:76:66:aa:49:96:01:d3:
44:55:e9:d5:fe:a8:19:68:fd:60:0d:e1:e2:63:e1:
a9:7c:3e:d0:52:8a:e7:29:8d:bf:a8:25:e1:80:49:
2b:23:5e:42:6c:3d:64:ce:47:72:4d:28:34:d8:ba:
9e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:78:1F:03:F0:F4:71:0E:0B:5A:98:F3:A8:CE:3F:50:56:CC:63:CB
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:04:c7:82:80:bb:6f:e4:d6:c1:3f:8b:75:3f:cf:38:a4:11:
60:e3:2c:ca:c1:ff:be:66:2d:8b:32:f4:49:72:8c:e1:c3:56:
04:1b:3c:b8:03:39:90:68:c3:60:dd:6f:be:b7:d3:cb:7c:be:
7c:21:7f:f0:55:01:da:bd:52:d3:7b:4c:c4:07:62:f8:54:c1:
ca:28:52:9d:45:35:bd:82:45:e1:4d:68:16:fc:e9:5b:1b:e3:
e2:66:c2:c6:3d:10:d1:29:c9:68:fe:ea:62:87:43:13:c3:4a:
bf:82:6c:9f:54:13:b5:75:03:71:71:42:21:aa:7b:2a:14:b7:
68:96:e8:20:35:54:9d:2d:ef:90:a1:91:fd:af:d7:87:3c:fb:
e9:1d:c7:27:ba:e3:f0:d0:fb:31:3d:00:f1:bb:fd:90:be:6d:
a4:e4:aa:d8:4e:8f:0b:ea:b5:9f:4a:de:49:d4:97:c6:6b:61:
f0:21:fd:42:4d:73:0b:06:64:a5:cd:5a:6d:85:f9:25:f2:d9:
89:ca:2a:30:2e:c7:41:14:1c:e2:30:a2:6f:92:4d:34:f8:96:
8d:0f:a8:62:b2:7f:de:4d:7b:88:1a:b1:38:81:88:11:6b:3d:
58:69:c7:96:80:2d:2f:1f:4a:a2:f8:ac:b4:0a:c6:7c:8f:68:
99:2b:8e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:25 2025 by rpki-client