Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
File: JJkvMtdIbftKMsLngQhUrGpmjjQ.mft (raw, json)
Hash identifier: jzN1Hk+UWYIAMVnxWgkyq4+3rrciBu4OkgrYn7gCUSc=
Subject key identifier: A3:CE:5F:9E:4B:0C:BA:E2:F8:F3:39:CC:F9:3F:14:0D:AD:F9:6E:73
Authority key identifier: 24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
Certificate issuer: /CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Certificate serial: 0199FD349A91F7B0E05DD49385899E9470F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
Manifest number: 09D8
Signing time: Sun 19 Oct 2025 16:01:47 +0000
Manifest this update: Sun 19 Oct 2025 16:01:47 +0000
Manifest next update: Mon 20 Oct 2025 16:01:47 +0000
Files and hashes: 1: JJkvMtdIbftKMsLngQhUrGpmjjQ.crl (hash: C6m/18FkdVIDXk7zhJ/uACzJXwKpYpzufQqW3x/Ikfg=)
2: SvgtOmag1Ed_NFITsp_g8SM3OYs.roa (hash: CvglQLYhu3pHLDYJxUoGcvgzwDqOLBBqoRW5UuJHkAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:9a:91:f7:b0:e0:5d:d4:93:85:89:9e:94:70:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Validity
Not Before: Oct 19 16:01:47 2025 GMT
Not After : Oct 20 16:01:47 2025 GMT
Subject: CN=a3ce5f9e4b0cbae2f8f339ccf93f140dadf96e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:79:81:11:61:63:d2:4b:c6:31:45:61:22:
81:d0:9c:68:64:bc:1d:35:a8:69:92:d2:b8:3a:02:
d4:15:21:04:4b:bf:b3:4f:f4:3a:3e:b5:db:5d:b1:
2b:68:4f:d2:86:10:93:65:cd:d1:82:20:33:95:5f:
ba:9b:bf:47:84:e7:5f:3e:e3:18:b2:d2:98:95:5c:
62:ec:9a:0c:63:6d:ea:55:cc:06:24:0d:8f:24:43:
f4:65:f9:de:dd:84:34:c4:b6:1c:f5:f0:63:87:be:
ee:b6:06:2d:aa:cb:2a:7f:d4:7b:06:c4:d7:e5:db:
dd:bc:ec:ca:bc:18:49:92:7d:0b:b3:28:b2:fd:57:
fc:aa:a3:14:97:59:8a:5c:79:65:7c:3b:f3:ea:f5:
78:20:b6:4f:a7:22:26:2e:e9:11:05:d3:22:a7:89:
87:c9:c2:ec:b2:e8:2e:91:e5:a7:0e:c3:20:9e:14:
dd:4e:e8:50:11:e6:40:32:b3:3c:7e:e7:b0:95:cd:
84:1e:92:56:40:e3:e4:17:d1:29:ad:b1:5e:44:ba:
1e:ba:0d:87:1c:7d:bc:fe:3b:69:47:d8:84:ae:b5:
9c:80:54:e6:92:36:35:3a:8b:ad:c3:ae:63:c2:cd:
92:a9:60:3c:a2:ca:dd:77:fa:38:9b:a6:1e:15:31:
97:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CE:5F:9E:4B:0C:BA:E2:F8:F3:39:CC:F9:3F:14:0D:AD:F9:6E:73
X509v3 Authority Key Identifier:
keyid:24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c4:86:65:40:18:9d:14:12:ed:fe:88:cf:a6:87:5e:ab:12:
46:26:7a:bf:46:2b:7c:e6:c6:7b:64:30:68:98:d8:56:60:c6:
b3:c1:f2:68:86:46:d3:62:d4:56:99:ed:e7:51:e5:f2:d9:f7:
3d:24:37:76:86:61:67:12:32:0f:be:de:2e:84:23:3a:31:4a:
78:8b:42:4a:6c:24:40:1f:09:0a:d2:87:7f:44:14:af:30:16:
43:68:73:4b:c0:61:6a:17:0b:95:4a:14:2d:a6:a4:8e:a3:17:
70:86:11:fc:04:4e:24:86:07:b1:e6:85:4d:ac:0b:f4:d0:f1:
ae:72:04:76:54:8e:ee:55:62:9c:54:ca:48:83:04:c1:c0:93:
cd:53:21:8f:0a:33:f7:4b:97:74:af:78:38:bd:c4:4d:4b:af:
12:1d:78:65:2e:2c:3c:24:bc:49:75:59:aa:98:3c:0d:13:54:
20:df:14:6d:54:d5:40:2b:ea:30:33:0e:5d:ee:eb:88:be:ee:
72:2c:ca:8a:ae:b5:13:7d:b1:02:a7:b1:13:b6:0a:f1:37:c6:
aa:fa:be:53:d6:4a:84:6b:72:34:aa:89:7e:5e:23:63:82:bc:
b1:0c:79:e6:b4:f6:9f:2f:e0:69:c2:1a:60:09:7a:4c:15:4f:
1e:76:ec:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:11 2025 by rpki-client