Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
File: JJtVjEhVDgYjTF3f_Kofzy6axv8.mft (raw, json)
Hash identifier: HfJ87jOdSN2k/SB53XFSytBI5dRKaJeCL2m6f5LPje0=
Subject key identifier: AD:10:41:22:03:ED:01:ED:7A:CE:58:51:97:5D:7C:17:22:15:AD:16
Authority key identifier: 24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
Certificate issuer: /CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Certificate serial: 0199FC58BA3BCFB6D9A75742FD5E95150714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
Manifest number: 122C
Signing time: Sun 19 Oct 2025 12:01:37 +0000
Manifest this update: Sun 19 Oct 2025 12:01:37 +0000
Manifest next update: Mon 20 Oct 2025 12:01:37 +0000
Files and hashes: 1: JJtVjEhVDgYjTF3f_Kofzy6axv8.crl (hash: /QRu9NLLK4ROfNiAw5SrjkVbKJSm8N7ePGTwzNSMyd0=)
2: _9h5ZKwqdSKkErlK3fCYBbj_WJI.roa (hash: UW9SDNl7M71q4Lr8IwhlaiOjT1v+Jp+baAjrn4Vs/Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ba:3b:cf:b6:d9:a7:57:42:fd:5e:95:15:07:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249b558c48550e06234c5ddffcaa1fcf2e9ac6ff
Validity
Not Before: Oct 19 12:01:37 2025 GMT
Not After : Oct 20 12:01:37 2025 GMT
Subject: CN=ad10412203ed01ed7ace5851975d7c172215ad16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:10:cc:8e:ca:a1:94:f8:45:2d:80:cf:9d:23:
de:f8:81:be:bd:8c:e5:e0:69:24:86:aa:c2:c1:c5:
d6:67:b5:97:a7:34:a5:4f:a4:9d:5a:fb:f4:d3:dd:
1f:ac:6e:5b:d5:39:0f:23:6a:d4:6a:50:80:dd:d7:
ff:a2:cb:6c:06:80:06:08:ab:6d:6d:93:a6:0b:6d:
2d:c2:97:2c:1d:4c:da:da:ab:6b:f7:0d:71:ed:9b:
03:de:7e:61:30:42:02:80:ec:53:38:7f:99:dc:d7:
89:a5:f4:c1:34:54:8a:d1:56:a1:4e:56:83:1d:a9:
cc:ae:60:b8:2e:6d:08:74:a5:20:96:96:e9:74:8d:
5d:cc:ab:17:58:f4:7c:e1:7f:56:c0:d9:16:37:ec:
2d:3b:31:0a:54:f8:8e:0b:ab:d4:c2:86:a1:15:f4:
80:0d:91:bc:47:cd:38:13:36:4a:e7:66:f7:33:6a:
cc:4e:00:ef:52:9b:8e:90:48:3a:39:24:cd:73:5b:
01:e1:5c:e0:16:90:2e:4b:97:ac:80:64:93:37:c2:
d2:1e:ee:f0:1d:36:23:7e:ab:97:36:27:4d:05:0a:
de:54:c2:f4:8e:5e:2b:8f:af:5b:a9:78:ed:50:79:
50:87:40:e2:ac:51:d2:e5:76:1d:dc:71:d0:1c:c0:
08:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:10:41:22:03:ED:01:ED:7A:CE:58:51:97:5D:7C:17:22:15:AD:16
X509v3 Authority Key Identifier:
keyid:24:9B:55:8C:48:55:0E:06:23:4C:5D:DF:FC:AA:1F:CF:2E:9A:C6:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJtVjEhVDgYjTF3f_Kofzy6axv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/31d275-acfc-4878-8f57-121d535085d6/1/JJtVjEhVDgYjTF3f_Kofzy6axv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:b3:60:ee:04:3e:f8:4f:21:93:98:ac:c5:cc:93:3d:44:7b:
0f:1f:b7:3c:c2:bc:98:ec:7c:1c:9b:4e:ae:f2:ae:1a:82:97:
f0:42:08:77:c6:53:c2:22:ed:e9:3c:7b:36:b2:ef:bc:1c:18:
bb:92:85:5f:bd:38:fa:12:4f:01:67:50:7f:db:bb:d6:c5:8b:
08:df:d4:58:e5:cf:47:e8:7e:0c:99:b6:eb:4e:fb:0b:b5:4d:
e8:a9:bc:39:07:a6:8a:d4:61:c3:99:fb:9b:14:fe:6d:9d:c4:
5e:49:64:9f:29:97:b3:b2:4f:c3:2f:e7:09:a8:f0:f4:b2:4d:
62:50:ac:fd:bf:58:d9:83:42:04:fe:e2:3c:64:ff:29:88:1d:
9c:6c:e3:5c:d1:40:4f:c5:82:89:50:c9:ea:0e:76:4f:a5:2b:
0b:00:00:9a:0d:f8:a6:b6:39:a3:b8:b9:ca:51:00:c4:bc:6c:
1d:4b:6f:67:29:34:ff:3d:96:65:d2:11:1f:50:76:4b:bd:cd:
da:ec:03:43:63:f2:bf:b0:2d:8c:90:64:4a:97:b9:43:da:ce:
8c:48:bf:61:40:8f:04:e2:c8:62:5e:1a:bb:50:a7:2a:93:6f:
bd:ba:69:3e:e5:e5:a6:3c:01:93:0f:b0:53:73:18:79:eb:b7:
3d:14:d0:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WLo7z7bZp1dC/V6VFQcUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0OWI1NThjNDg1NTBlMDYyMzRjNWRkZmZjYWExZmNmMmU5
YWM2ZmYwHhcNMjUxMDE5MTIwMTM3WhcNMjUxMDIwMTIwMTM3WjAzMTEwLwYDVQQD
EyhhZDEwNDEyMjAzZWQwMWVkN2FjZTU4NTE5NzVkN2MxNzIyMTVhZDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/xDMjsqhlPhFLYDPnSPe+IG+vYzl
4GkkhqrCwcXWZ7WXpzSlT6SdWvv0090frG5b1TkPI2rUalCA3df/ostsBoAGCKtt
bZOmC20twpcsHUza2qtr9w1x7ZsD3n5hMEICgOxTOH+Z3NeJpfTBNFSK0VahTlaD
HanMrmC4Lm0IdKUglpbpdI1dzKsXWPR84X9WwNkWN+wtOzEKVPiOC6vUwoahFfSA
DZG8R804EzZK52b3M2rMTgDvUpuOkEg6OSTNc1sB4VzgFpAuS5esgGSTN8LSHu7w
HTYjfquXNidNBQreVML0jl4rj69bqXjtUHlQh0DirFHS5XYd3HHQHMAIxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0QQSID7QHtes5YUZddfBciFa0WMB8GA1UdIwQY
MBaAFCSbVYxIVQ4GI0xd3/yqH88umsb/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkp0VmpFaFZEZ1lqVEYzZl9Lb2Z6eTZheHY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8zMWQyNzUtYWNmYy00ODc4LThmNTct
MTIxZDUzNTA4NWQ2LzEvSkp0VmpFaFZEZ1lqVEYzZl9Lb2Z6eTZheHY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8zMWQyNzUtYWNmYy00ODc4LThmNTctMTIxZDUzNTA4NWQ2
LzEvSkp0VmpFaFZEZ1lqVEYzZl9Lb2Z6eTZheHY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLNg7gQ+
+E8hk5isxcyTPUR7Dx+3PMK8mOx8HJtOrvKuGoKX8EIId8ZTwiLt6Tx7NrLvvBwY
u5KFX704+hJPAWdQf9u71sWLCN/UWOXPR+h+DJm26077C7VN6Km8OQemitRhw5n7
mxT+bZ3EXklknymXs7JPwy/nCajw9LJNYlCs/b9Y2YNCBP7iPGT/KYgdnGzjXNFA
T8WCiVDJ6g52T6UrCwAAmg34prY5o7i5ylEAxLxsHUtvZyk0/z2WZdIRH1B2S73N
2uwDQ2Pyv7AtjJBkSpe5Q9rOjEi/YUCPBOLIYl4au1CnKpNvvbppPuXlpjwBkw+w
U3MYeeu3PRTQ6w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:02 2025 by rpki-client