Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
File: JKmv_35_6wbhjeksJzVjuYAzMWs.mft (raw, json)
Hash identifier: LOb4zZ+9mvlghD3x8rd9EsgRk3NTR6cf59VOOuQIzXM=
Subject key identifier: FB:65:9B:55:EF:16:9F:C8:F0:BF:A2:6B:1F:6A:59:0B:E3:53:C0:D2
Authority key identifier: 24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
Certificate issuer: /CN=24a9afff7e7feb06e18de92c273563b98033316b
Certificate serial: 019A01B5B6A9A9D083B60E6E3B9EDD231EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
Manifest number: 01D0
Signing time: Mon 20 Oct 2025 13:01:17 +0000
Manifest this update: Mon 20 Oct 2025 13:01:17 +0000
Manifest next update: Tue 21 Oct 2025 13:01:17 +0000
Files and hashes: 1: JKmv_35_6wbhjeksJzVjuYAzMWs.crl (hash: LZGez/yaQbzDk8FN1inX7608mdKTGDQsr19hgg1C+AQ=)
2: KG8CBSi1ldaOc_7McAlQkyEmOQA.roa (hash: DpzAqMaMhdv82TzpA9vIGD7n6zlPP/KwSYGZ3tPypWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:b6:a9:a9:d0:83:b6:0e:6e:3b:9e:dd:23:1e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a9afff7e7feb06e18de92c273563b98033316b
Validity
Not Before: Oct 20 13:01:17 2025 GMT
Not After : Oct 21 13:01:17 2025 GMT
Subject: CN=fb659b55ef169fc8f0bfa26b1f6a590be353c0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:14:f9:4c:5e:be:8a:c3:ed:15:79:de:92:74:
a4:ca:33:4a:64:c0:cb:f6:2c:b5:2b:c3:64:d4:be:
82:6e:46:34:a9:e7:8a:74:95:b8:74:19:15:4a:09:
e1:ae:d5:b0:d5:78:ab:46:fc:ca:a0:f6:2c:aa:00:
58:67:be:5b:19:93:cc:fc:7a:b4:ea:9e:99:7c:c1:
52:5a:92:d0:a5:92:8f:27:18:c6:1c:5b:10:ea:24:
4c:39:42:1c:c5:f0:ba:54:c4:de:85:39:94:af:94:
c2:41:3b:db:db:23:98:3f:72:4c:be:79:0b:78:95:
b8:c9:e1:31:bc:df:f2:77:6b:f8:c4:07:7a:d6:1c:
fb:71:35:f8:71:ba:af:0e:68:da:a1:7f:c6:18:e4:
ff:db:76:3c:cd:ee:ad:18:c4:d0:a7:2c:1c:25:f6:
ec:d3:c7:aa:1e:3c:1e:66:0a:78:7d:b8:ab:c2:75:
30:a9:6f:88:72:cd:ed:65:0a:65:dd:3e:bb:ac:ea:
14:9a:8d:f3:a7:44:0a:9a:e6:0b:03:20:7d:56:94:
e9:16:84:71:55:cf:ef:4d:bd:1b:5c:49:a4:43:87:
0d:46:d3:b8:3f:cf:05:67:56:d2:f5:b8:87:db:8c:
fe:5e:14:34:c6:36:94:d1:0e:55:d9:e8:ff:d7:19:
f1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:65:9B:55:EF:16:9F:C8:F0:BF:A2:6B:1F:6A:59:0B:E3:53:C0:D2
X509v3 Authority Key Identifier:
keyid:24:A9:AF:FF:7E:7F:EB:06:E1:8D:E9:2C:27:35:63:B9:80:33:31:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKmv_35_6wbhjeksJzVjuYAzMWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cecd11-bc80-453a-8201-716120ab2db2/1/JKmv_35_6wbhjeksJzVjuYAzMWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ce:72:3c:60:06:d5:bd:c6:d0:f3:18:71:54:c6:2f:7e:d0:
32:0b:29:1b:2d:87:d4:de:d4:c3:16:c4:a5:b6:92:39:f5:96:
fa:ef:5b:18:d4:b5:f9:80:8d:4a:c9:2c:de:f6:5c:fa:2c:60:
a1:c5:80:0a:10:93:b9:87:87:cf:96:79:f7:dc:1b:f7:dc:68:
ef:ad:b0:3c:9c:75:a7:5e:a5:0d:de:28:27:89:1a:25:f5:3f:
97:2f:10:3f:53:ff:1f:e1:04:7a:17:7f:d4:e9:a9:82:0d:68:
3c:36:b2:28:99:a1:60:f9:7f:e1:76:5f:62:c8:6e:40:12:85:
25:cc:40:8e:3e:e9:a9:5a:61:49:65:3f:dd:c7:59:8d:fb:6b:
9b:66:1c:26:9e:d1:37:fc:53:0f:b1:88:57:d2:5c:67:4e:db:
ae:78:41:5c:83:94:2d:6e:0b:32:75:f6:1d:dd:dd:13:c2:5b:
f4:37:bf:1d:3b:c1:60:b7:01:23:70:fa:1a:48:dd:a3:55:fa:
d4:37:42:6d:96:99:b4:dd:3d:68:8a:d9:cc:d5:95:11:4f:c6:
5d:e2:33:57:f3:f6:fa:21:26:f8:84:0a:ad:84:c7:6a:4d:c0:
0c:77:2e:2c:e9:bb:32:26:66:93:08:b7:b8:d6:d7:98:d9:59:
1f:e8:13:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:41:00 2025 by rpki-client