
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
File: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft (raw, json)
Hash identifier: DXu9yINTAcWy8zHQpCGVKNKIefxTuVoCCmreeGFuIjs=
Subject key identifier: 73:E2:9A:AE:C8:2E:8D:FA:5C:59:1F:70:0A:1E:26:E4:F5:AA:FA:3E
Authority key identifier: 24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D
Certificate issuer: /CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d
Certificate serial: 0199FC2139D5ED12DBECABAA551F34FA15BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
Manifest number: 22
Signing time: Sun 19 Oct 2025 11:00:59 +0000
Manifest this update: Sun 19 Oct 2025 11:00:59 +0000
Manifest next update: Mon 20 Oct 2025 11:00:59 +0000
Files and hashes: 1: 9lTlIJVzjlfPnvZCoUdbSEtQwhw.roa (hash: 7dGAL4VELHTj+w0KDl5p2Kj2u6qzyQX4PVV9HVfH5AM=)
2: JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl (hash: KzgVQLMZZkrkfo0CX/zLuVujfP8oouqG/hbek1KnjB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:39:d5:ed:12:db:ec:ab:aa:55:1f:34:fa:15:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248719434b6e3b607f647bb0d58a81dc1ebfdd4d
Validity
Not Before: Oct 19 11:00:59 2025 GMT
Not After : Oct 20 11:00:59 2025 GMT
Subject: CN=73e29aaec82e8dfa5c591f700a1e26e4f5aafa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bf:ab:87:06:7d:c9:0c:df:57:fe:a0:0e:60:
8f:e4:d8:64:6a:cd:33:da:24:e5:ee:4e:4c:7c:33:
06:03:5f:ee:f8:e8:8c:1e:05:ce:19:c4:8b:ef:4d:
26:96:5b:28:90:4d:2c:56:ff:d8:ce:d2:da:da:2b:
54:e5:2b:6e:b7:27:46:8e:6a:e1:9d:c6:c9:b7:93:
d2:56:00:33:4e:51:df:b9:14:b2:80:a5:72:19:d6:
8f:24:9e:d7:88:f1:49:ed:59:e9:43:ad:fc:5e:81:
c7:69:b2:2a:32:c0:e8:e1:7f:b6:c6:60:0b:1b:ae:
1d:e2:dc:67:45:67:4d:8c:60:14:88:71:26:e7:43:
4a:6e:41:0c:9d:42:af:c4:9f:fc:cf:53:f1:f1:81:
1a:56:4d:ed:5c:7e:8f:e4:d5:f7:53:bf:6f:ee:f1:
2f:20:c1:bb:d5:ae:4b:dd:9c:4b:da:19:ba:61:6d:
fe:cc:82:00:6f:a2:02:dc:d5:d2:72:4b:7a:57:58:
46:61:1b:21:cf:93:f3:c9:de:e5:26:e1:a2:27:6b:
4a:3f:bf:c1:da:29:44:8f:4b:27:75:af:a3:ac:3b:
4b:8e:bd:55:fb:71:d3:d8:7c:0e:fd:c9:ba:b1:be:
78:74:63:4d:6d:c8:c7:66:8c:8b:fd:74:be:ea:2a:
74:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E2:9A:AE:C8:2E:8D:FA:5C:59:1F:70:0A:1E:26:E4:F5:AA:FA:3E
X509v3 Authority Key Identifier:
keyid:24:87:19:43:4B:6E:3B:60:7F:64:7B:B0:D5:8A:81:DC:1E:BF:DD:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/70eb7a-1ae4-4bbe-8ce0-f3028aea9977/1/JIcZQ0tuO2B_ZHuw1YqB3B6_3U0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:46:76:56:40:0e:7b:94:d2:37:9a:66:4c:7d:7d:19:3e:76:
ac:27:3a:88:85:ad:81:7b:47:48:86:6f:a5:cb:fd:70:28:b8:
67:e4:ed:15:21:16:75:ce:2b:c9:eb:8a:5c:99:b5:e6:43:7d:
82:38:e1:d3:26:5c:b0:02:a4:9b:ac:55:18:8f:4d:5b:db:ce:
22:8d:cd:35:c0:fc:a2:ff:fd:36:d0:4e:ed:19:e9:d0:0f:63:
c5:20:c8:5d:12:52:df:5c:f0:3d:1d:98:28:83:eb:fc:82:38:
87:aa:78:98:e3:cf:fc:bd:88:96:05:bd:d0:9f:7b:f4:37:50:
b7:27:22:02:89:1a:cf:ac:1e:76:d5:47:b0:d2:04:cf:76:3d:
04:a6:4f:1b:6f:2a:8e:1e:37:65:7e:7f:6d:eb:2e:fb:6d:2c:
46:d8:2a:fb:11:32:87:a0:5f:be:59:84:6b:ea:d7:93:a4:5b:
11:12:61:10:b5:49:ba:88:9b:a2:42:d9:d8:da:2c:d4:2e:a4:
60:11:3e:83:c9:65:7d:0e:e5:f4:bf:e7:2f:c0:df:03:45:ec:
d4:59:65:43:eb:ac:97:95:8e:d3:96:4b:40:b4:4c:b2:64:60:
99:11:74:70:28:62:2d:19:1f:20:85:fd:f2:ae:2d:c9:1f:9a:
e2:ec:47:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:03:57 2025 by rpki-client