Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
File: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft (raw, json)
Hash identifier: cyX4hQc2JaXE1DbrL47Fcr9K7R6rrUFUc7mKJk/LJT0=
Subject key identifier: FB:8D:4F:CC:7B:E3:5E:A4:D3:D2:35:D8:0D:3C:DE:28:7E:FF:EC:8F
Authority key identifier: 26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
Certificate issuer: /CN=264d04c39641b82b5dc3844cf5ff550f54044689
Certificate serial: 0199FBEBB3AC448A36DD364031DF6B380242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
Manifest number: 0F64
Signing time: Sun 19 Oct 2025 10:02:32 +0000
Manifest this update: Sun 19 Oct 2025 10:02:32 +0000
Manifest next update: Mon 20 Oct 2025 10:02:32 +0000
Files and hashes: 1: FAPasEirS5CbUB6PjBrAMteNaOo.roa (hash: HbkkLdFOGhY92Tbv9fOfCuB90ZHdJx6ePREhkoIqvyA=)
2: Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl (hash: 9ohnoX9D/p8gGb/4cD657IilxLMng8xqaFgtjVWulDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:b3:ac:44:8a:36:dd:36:40:31:df:6b:38:02:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=264d04c39641b82b5dc3844cf5ff550f54044689
Validity
Not Before: Oct 19 10:02:32 2025 GMT
Not After : Oct 20 10:02:32 2025 GMT
Subject: CN=fb8d4fcc7be35ea4d3d235d80d3cde287effec8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:b7:aa:e0:44:a9:10:c6:7c:49:30:d4:30:
f4:98:86:ce:51:0a:6f:b0:b5:5b:2f:12:e1:28:3f:
4c:0d:bb:4c:97:0e:cc:d8:e7:39:24:b6:42:05:58:
95:a4:ac:35:81:b0:2b:e3:68:0e:78:5a:47:e4:20:
92:71:68:b1:6f:75:e9:23:b6:72:c0:72:42:f2:f1:
e1:f7:a9:60:f0:81:35:aa:dd:f9:fc:10:ac:cd:5f:
3c:45:91:f6:8f:c3:3e:46:c6:a8:3d:ab:48:23:05:
22:49:cb:24:dc:47:32:e8:98:41:95:31:a9:c9:60:
a8:35:82:c6:45:47:fc:ec:cb:80:a7:5e:50:8e:93:
c2:88:41:c6:43:5d:1c:85:96:bd:47:4a:a5:96:f5:
4d:ca:5a:f0:fd:ca:b1:61:72:e7:26:1e:15:ef:5c:
24:d6:d1:0d:d7:7f:c4:49:f2:e5:df:0c:b4:31:5d:
a1:71:6b:b6:4f:d0:bf:f3:63:08:46:7d:c2:7e:99:
c6:fe:22:c6:33:46:df:22:b3:b9:9a:6b:c5:7c:36:
93:a9:1e:2a:45:1e:c0:77:cd:50:0d:40:ec:bc:43:
9f:43:5d:aa:30:5d:91:02:43:35:7e:a7:79:b2:be:
a9:fa:07:53:6c:c6:a3:23:01:41:9e:19:0e:18:3f:
8b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8D:4F:CC:7B:E3:5E:A4:D3:D2:35:D8:0D:3C:DE:28:7E:FF:EC:8F
X509v3 Authority Key Identifier:
keyid:26:4D:04:C3:96:41:B8:2B:5D:C3:84:4C:F5:FF:55:0F:54:04:46:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a0099c-d860-49a5-b459-3d0036603ea0/1/Jk0Ew5ZBuCtdw4RM9f9VD1QERok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ab:5a:be:a9:f5:03:b6:27:03:d2:a7:a8:ee:cc:e1:34:94:
b9:fd:79:07:6f:0b:94:a8:f3:1a:a7:06:34:0b:c8:1c:0d:cc:
ae:d7:7e:e9:b7:91:44:8d:36:e7:d0:bf:e0:bb:f4:e2:ee:12:
3e:1e:f4:13:95:e7:c1:47:0e:b5:1e:73:51:5a:f5:19:37:96:
5e:a4:3a:10:d1:f0:fa:46:16:7f:5c:63:26:7a:9a:37:ef:69:
a3:c9:dc:23:d7:1e:57:7d:bd:1b:52:ef:6d:f1:22:17:03:41:
11:40:db:87:99:c9:77:fe:df:22:36:1b:b9:d7:e8:25:c4:1f:
96:f0:f2:5e:73:6e:d3:fe:37:71:e5:41:b7:08:10:8e:85:6a:
a6:73:cd:fa:75:ae:e0:59:be:b7:ef:fb:a7:6d:88:89:49:fb:
63:12:6d:cd:76:cc:7a:1c:e5:a1:c5:9a:01:19:2f:0a:38:f2:
ba:5b:24:03:48:2a:0a:91:7c:17:70:6b:56:49:29:e2:a0:9c:
70:2d:3f:4a:5e:be:1c:f8:a7:0c:a3:65:e0:fb:a2:5f:46:48:
07:38:cc:8b:7f:b6:03:df:e2:9f:84:ec:db:bd:64:b5:de:ed:
72:a3:58:2c:60:8e:94:40:17:60:72:a4:f8:8a:7c:39:cc:ac:
eb:a5:d8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:51 2025 by rpki-client