Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
File: JLcItlJ6u9LeK5s3NJarwddItuc.mft (raw, json)
Hash identifier: +uwmA6jMKx696ITte2M3XNRQ0mjZMesfaOi60MGtTTQ=
Subject key identifier: 88:40:39:BF:D8:18:29:BC:02:73:E3:B2:9C:91:1E:52:8F:85:C3:01
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial: 0199FB0F02EFE2B0D60AE643DF1C179B4937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
Manifest number: 142F
Signing time: Sun 19 Oct 2025 06:01:28 +0000
Manifest this update: Sun 19 Oct 2025 06:01:28 +0000
Manifest next update: Mon 20 Oct 2025 06:01:28 +0000
Files and hashes: 1: JLcItlJ6u9LeK5s3NJarwddItuc.crl (hash: INCTu72Xh0JwixdrX7HLm/T1EoS8tVgXsYYtMaDxUcg=)
2: vZBmS-EA2uBUhcAI4deCtG0tMbQ.roa (hash: jDBhmRUhtmMAlFzmv4saGBsUFOT3KgtgZMefYA3RiUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:02:ef:e2:b0:d6:0a:e6:43:df:1c:17:9b:49:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Validity
Not Before: Oct 19 06:01:28 2025 GMT
Not After : Oct 20 06:01:28 2025 GMT
Subject: CN=884039bfd81829bc0273e3b29c911e528f85c301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:a6:7a:87:7f:a8:3c:e0:37:c2:f6:6e:09:
eb:46:91:07:ce:e8:7e:7c:37:72:2a:02:cf:ac:b3:
00:bc:c6:5d:2d:9b:d1:a7:7b:2f:63:6b:b0:02:ac:
a3:7a:1e:9d:8e:ee:d7:71:95:bb:d4:e2:ee:34:6a:
e0:7d:46:9d:9f:07:d8:b0:75:45:b5:ef:02:ae:f2:
cc:b4:45:1e:b0:a9:d5:5e:5e:ff:1b:94:be:0c:89:
05:e0:77:7d:69:fa:94:28:9e:a2:e3:3b:91:df:d5:
e0:0f:67:2c:e6:e2:fc:b9:65:51:c1:09:9a:70:9f:
cc:fc:bc:87:06:dd:44:2e:5c:aa:98:9e:15:03:2d:
af:11:54:cc:08:1f:a5:34:9f:20:77:48:d2:0e:6c:
27:df:e9:16:f0:38:89:c8:ad:f0:be:c4:8d:8d:98:
32:64:c4:a9:d9:2a:ce:9c:db:ef:91:88:19:e0:c1:
8f:fc:f8:34:f5:40:cf:a9:47:0b:37:f2:a3:5f:b6:
27:62:96:c5:27:e8:3d:d2:7c:03:c9:f5:6c:25:f7:
ac:a6:d1:fe:d5:67:33:88:74:57:13:f6:09:1d:da:
42:91:89:48:03:bd:45:33:c3:1b:87:b6:df:de:c0:
b8:bf:d6:35:84:d5:72:da:96:4b:45:24:ef:b3:e9:
ed:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:40:39:BF:D8:18:29:BC:02:73:E3:B2:9C:91:1E:52:8F:85:C3:01
X509v3 Authority Key Identifier:
keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:80:ff:5a:3d:5d:2f:d3:ef:bf:c4:4f:03:c6:15:a0:2d:4f:
6e:55:38:83:e4:d9:49:c7:5b:6b:b0:4e:44:94:d7:ac:5d:9e:
14:6e:bd:21:14:df:ac:22:3d:86:44:41:2d:df:b0:a9:7e:63:
88:b4:16:3e:9f:a3:08:2e:17:ff:5a:04:c1:b2:b7:89:b9:44:
e1:db:a1:b9:38:0c:00:6b:d0:28:79:b3:a2:4b:43:fb:15:dc:
ed:8e:5b:a6:da:d7:cf:f4:a7:f4:67:db:41:92:7f:87:b3:74:
c0:15:3a:f0:c7:d3:ff:de:c5:4e:dd:64:22:3f:97:be:d2:7b:
88:15:9e:8d:67:c0:bd:d9:87:24:f2:c0:1b:4c:8d:fb:0b:d7:
1e:2b:fe:fd:ab:af:a0:0a:06:62:48:2e:80:ed:e1:b5:dd:b3:
cd:08:56:08:69:08:9a:3b:81:3d:4e:fc:53:d9:10:c8:64:9c:
27:eb:a4:2b:47:a2:37:41:2c:0a:6e:e2:72:26:2a:fd:46:82:
3c:f9:9e:da:4f:54:96:1d:91:9d:63:b0:3c:6f:98:5b:69:5f:
04:9e:14:c1:6e:5b:f8:ea:de:a8:af:c9:53:a5:ac:66:d7:ed:
0c:6a:e6:a0:95:d9:38:0f:05:43:a5:70:4c:1a:ab:32:c6:18:
9c:28:f9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:40 2025 by rpki-client