Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File: JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier: 8msXXmBWY26yYkpyVS3sy3DJL0S0qs+kW9N9Pt7e6eI=
Subject key identifier: FB:5C:FB:00:F1:0E:E2:48:FE:CA:FD:6C:1B:5C:E5:AE:73:8F:BF:C1
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 019A0035A93B05BD29597868FC8B7B923067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number: 0F15
Signing time: Mon 20 Oct 2025 06:01:47 +0000
Manifest this update: Mon 20 Oct 2025 06:01:47 +0000
Manifest next update: Tue 21 Oct 2025 06:01:47 +0000
Files and hashes: 1: CicZBBxXimIHZjGjJxw0-P_TKwA.roa (hash: WCF5D0GYPfyQKw7aRx70x9QWu1BJyay4IJiNMiHqns8=)
2: H9YBLTYVXKAT5WhHfkCcfarIS3Y.roa (hash: VX1SELBTMMOXweJZC3AHO0K6SmWP/UMVdMCZso8oNU4=)
3: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: R7hPWNdx5js3wcr9Hb74BwGkk9AsLMY4iwDyWn1zYR4=)
4: KBHAEuTQwMUyiCX_3RfZwtGUVwk.roa (hash: MrQgPzvtmJ1OylGpfrcHItYSdYG/3jwcYZSpyY/5nO0=)
5: Xud5emWKez2CWje3_uKElUeeYZM.roa (hash: JEEaFQSLgyko90PuBT5aCnY8R+bLlVoo/ly+wTonPTM=)
6: aLqHk2UMrsAFp8O_WkYeTwl3zWg.roa (hash: KSJSQQgNlVfvoPK0hF2rIvdyy8wj5LGpw3RQ1LyRxBU=)
7: gQWFEkun2ccvVh53BL0LLh5mo3I.roa (hash: Tz3OrEHIL28w3om3xiZeD8yyhg/V93Fe5zZKo9SAMIg=)
8: lyRiID6blcYjTxuro8RbRo8yBq8.roa (hash: URzaCIkjGunchT54U9dPfC35zUMjoPWxJXeabV1SOog=)
9: yfa_WQD3YpUEPvOqlipnQtZKTbU.roa (hash: aUGBtF0Q+ZPDnjAMxIqBivvu5PiTIPwqlssloFoWyho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:a9:3b:05:bd:29:59:78:68:fc:8b:7b:92:30:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Oct 20 06:01:47 2025 GMT
Not After : Oct 21 06:01:47 2025 GMT
Subject: CN=fb5cfb00f10ee248fecafd6c1b5ce5ae738fbfc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d9:70:e6:64:04:4e:0a:e8:20:ef:48:c2:df:
f0:4a:0c:6e:65:fc:58:e7:fe:fb:35:1a:b3:c9:c3:
e3:db:24:dc:17:48:e8:f1:b5:69:5c:72:f7:82:dc:
62:cf:1c:06:c5:d1:7d:68:a2:b6:ec:9a:ac:10:b6:
25:20:17:6e:75:5b:11:da:8d:79:17:b5:48:cf:cc:
2c:4a:61:e5:6a:51:5d:09:b7:3e:29:61:bd:3b:4a:
92:55:e5:18:7f:49:ce:ca:cb:17:32:62:6b:df:08:
4c:54:a2:1b:6d:54:75:d0:40:f7:a5:79:fb:8d:74:
7d:d0:a9:9c:1d:00:0b:c7:dd:59:f1:80:60:e7:04:
63:6f:6d:67:74:40:4d:84:97:9b:a7:ca:20:6c:c9:
04:36:37:87:f6:02:27:0f:f4:d5:6f:96:aa:33:d9:
5c:1b:52:4e:61:2e:b1:81:bd:ab:82:36:f6:07:f3:
c5:44:3d:00:15:71:cd:83:36:f6:6c:af:90:da:0d:
a5:f3:65:b8:9b:19:7c:ed:70:5a:b7:b0:60:d4:32:
15:71:52:ff:5f:65:27:b5:08:10:e0:85:e8:8c:02:
58:8e:18:f5:65:71:38:c4:05:a3:dc:3e:7e:30:9b:
3f:b7:a8:bc:d8:3c:51:ae:d2:2e:58:2d:1b:52:6d:
58:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5C:FB:00:F1:0E:E2:48:FE:CA:FD:6C:1B:5C:E5:AE:73:8F:BF:C1
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:57:3f:87:ab:6d:a0:5f:3f:51:c2:44:c9:65:86:b1:b8:00:
f7:9e:68:08:12:84:c4:2d:94:85:13:e8:a6:e9:5b:15:31:fc:
a9:12:11:1a:3f:ef:9e:89:49:b1:5f:21:eb:3f:6f:5f:27:6a:
78:1e:bb:c8:ee:73:31:a9:da:6f:d1:9e:4c:ea:b0:46:d2:af:
41:1c:9d:cf:59:42:95:a0:18:d1:7a:98:52:64:7c:d9:39:ea:
de:6c:73:fd:b7:e4:fa:32:86:1a:aa:c6:55:ff:b0:53:7d:f3:
42:05:da:d4:77:75:4b:b0:a2:ed:65:63:ce:8c:66:59:a1:8d:
d0:1b:14:76:9a:5d:66:d3:1e:c7:05:bf:3f:46:14:12:0d:0f:
ea:37:3b:2b:05:ab:e0:a0:a0:46:ef:86:f6:32:aa:6d:61:d5:
32:e8:6b:19:6f:ab:da:ba:10:c8:1e:0b:5b:9c:ca:f4:07:da:
f1:21:fb:83:3f:c7:32:e6:ff:18:55:24:db:49:d5:3c:b2:86:
c9:90:89:18:83:28:8c:e7:36:96:be:13:ca:7f:e1:15:79:26:
03:4c:d7:5f:58:df:27:c2:a2:10:ff:4f:4b:87:e0:95:4a:ac:
85:3c:7a:85:ff:4e:8e:06:7e:54:7e:1d:c7:38:99:a3:d5:2d:
40:09:a4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:05:21 2025 by rpki-client