Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: sehXwtZ1fBU6HOfUwZ619s3ltOM0pLvoPHk14xl9ipY=
Subject key identifier: 0C:D1:8C:93:74:39:42:F5:81:82:69:28:76:2A:A2:31:74:04:82:87
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 0199FBEBCB9A90086902E0F8757F334BB5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 096D
Signing time: Sun 19 Oct 2025 10:02:38 +0000
Manifest this update: Sun 19 Oct 2025 10:02:38 +0000
Manifest next update: Mon 20 Oct 2025 10:02:38 +0000
Files and hashes: 1: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: imPzB6XyKKsPwiUiXLkhWdxD4oj6E82XLxYz+Fkiihc=)
2: P7b5zmQiLmwTefl5liI-KoZJpcY.roa (hash: VJKcy+JlG04cLK8U6Txf4TogJYWS6O9qHAuZFHI6UVY=)
3: fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa (hash: FGOPoxO9vvC4y9ljtcZplGO40KLgXf+OUCl+F6C8Bmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:cb:9a:90:08:69:02:e0:f8:75:7f:33:4b:b5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Oct 19 10:02:38 2025 GMT
Not After : Oct 20 10:02:38 2025 GMT
Subject: CN=0cd18c93743942f581826928762aa23174048287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:81:4b:9a:b5:82:21:31:4f:6e:cd:c2:40:29:
75:3a:4a:17:05:ba:fa:61:e4:d2:df:06:c7:03:55:
39:4f:3a:e5:71:2e:e0:b3:1a:c5:41:65:69:b4:12:
bb:90:35:2f:8c:70:cb:5f:61:87:77:2b:0a:a6:65:
32:6c:63:84:ce:ab:bb:d3:ce:5c:35:95:c1:ef:54:
db:37:ff:86:2b:28:96:e1:3e:d5:64:53:ac:d5:b1:
ad:48:ce:e4:4b:bf:d2:cd:a5:5f:1f:9c:47:e9:2c:
f0:2c:8b:65:f9:30:ff:70:e3:24:c0:99:8e:1f:63:
6c:a8:89:10:5e:34:86:63:84:0b:4d:12:c6:1d:e2:
23:b7:4f:71:f3:cb:fd:9a:77:fb:2d:85:56:6a:2c:
d4:3c:11:0b:a8:be:6b:61:49:44:db:03:eb:1e:06:
cb:8b:f1:85:a7:38:08:0c:0e:6d:49:72:63:92:1a:
6c:d0:d2:d0:0b:6a:0d:68:90:8d:4c:d1:3c:73:ab:
a1:1f:5a:d6:df:b7:cc:7f:3a:61:17:8e:4f:63:23:
83:97:4e:4b:5a:51:5e:b3:3b:42:28:5d:39:c0:d4:
5d:ed:a5:21:68:31:57:41:2d:37:fc:91:67:9b:f9:
2b:b3:b0:21:7c:83:bc:2e:94:ad:f0:c1:32:a5:21:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D1:8C:93:74:39:42:F5:81:82:69:28:76:2A:A2:31:74:04:82:87
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5d:fb:d4:5d:2d:d8:63:88:cb:a6:fa:4b:21:38:f5:e5:43:
b9:89:7b:d2:65:ac:23:19:60:16:cd:38:52:af:b5:a1:d1:73:
24:cb:d0:02:29:bd:c2:ff:15:95:0f:39:b4:f8:00:47:75:3d:
ae:b9:cd:04:d4:62:ee:71:23:10:ac:3d:11:cd:c0:8b:74:ec:
6f:69:21:ad:81:ea:5c:73:b8:54:4d:88:5b:8f:e2:13:18:d9:
23:9d:f3:6e:c1:10:17:75:fd:ad:63:24:89:57:14:40:57:69:
2e:f6:6d:db:7d:82:fd:29:65:19:56:7e:ae:d6:6f:cc:e7:5b:
b6:45:80:0f:86:28:28:34:d7:35:db:60:cb:f0:a0:42:dc:c3:
bd:02:e3:7e:ba:63:69:b4:1c:bd:f6:97:89:15:51:07:40:a1:
8b:3a:51:35:65:44:27:f8:42:f3:26:a7:72:de:e7:72:c7:f5:
42:51:0e:b2:0d:f5:c1:cc:43:56:87:fb:54:01:2d:47:9c:fc:
38:94:91:d1:f1:5f:cd:e8:ae:25:5a:81:c0:74:0e:d4:82:03:
c9:35:fc:b6:f6:bf:a4:a3:a0:74:9c:42:67:c2:f6:4f:03:a3:
35:e3:21:b8:44:2c:19:95:3e:ac:e7:c1:d1:13:e0:5f:d2:4d:
0c:c2:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:46 2025 by rpki-client