Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
File: JNClyizxvZEvQsyM9lH2_ojnJqQ.mft (raw, json)
Hash identifier: bcZJyGWvCqtq+vlQGyqb4IVEntWisZPW4YiD1Hvayik=
Subject key identifier: BB:FC:4A:5C:57:68:5B:4F:FA:DA:53:15:17:37:CB:68:10:AE:11:7A
Authority key identifier: 24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
Certificate issuer: /CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Certificate serial: 0199FBB36B5DE5892B2EFD2E0EB060333D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
Manifest number: 02F6
Signing time: Sun 19 Oct 2025 09:01:03 +0000
Manifest this update: Sun 19 Oct 2025 09:01:03 +0000
Manifest next update: Mon 20 Oct 2025 09:01:03 +0000
Files and hashes: 1: 5mE6WJ9C1aVlmVoIkqUjqUKu6GA.roa (hash: iW1w4Z2DczRn4meCeEiq3QUgbwsTpwLpy6/um6q5LvU=)
2: JNClyizxvZEvQsyM9lH2_ojnJqQ.crl (hash: TRwE5tBXTJu6wimpLV4ZnHRK9HQJgFb9E/zvH8z7918=)
3: UABXDisY7UIcuu729SEVeaTHi9g.roa (hash: OYLFe1eOiXjeIqPxbtFA6YEKDGNFPpOrX8ZmLcir4vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6b:5d:e5:89:2b:2e:fd:2e:0e:b0:60:33:3d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d0a5ca2cf1bd912f42cc8cf651f6fe88e726a4
Validity
Not Before: Oct 19 09:01:03 2025 GMT
Not After : Oct 20 09:01:03 2025 GMT
Subject: CN=bbfc4a5c57685b4ffada53151737cb6810ae117a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ce:2b:91:82:4f:66:21:35:53:cc:c2:b3:97:
fa:a6:fd:e2:fc:49:5c:f1:3f:fc:d7:52:55:77:b0:
da:c1:40:db:e2:b6:8b:62:52:2a:fb:47:bd:ed:36:
55:c1:ec:a1:33:a7:5e:17:10:28:0c:de:95:4c:e8:
41:b0:fb:fc:31:8d:5b:cd:15:9d:91:a0:08:6a:f5:
04:f7:69:f6:bd:d3:a3:30:ad:96:46:86:c7:a5:f2:
29:5e:ae:8a:ea:c4:9f:a6:59:a9:82:33:cc:29:89:
5b:3e:c0:42:b0:52:99:71:b5:47:c6:ff:9d:c6:4d:
a7:78:2b:41:69:da:86:1f:2b:c0:47:59:20:b1:f1:
4e:78:cb:af:2e:d5:6b:62:6c:8d:3a:2e:c9:2a:23:
11:e9:42:6e:94:e5:90:1e:d8:56:1d:ac:51:aa:6e:
68:7b:3b:1f:24:d8:2d:60:fc:31:07:f7:49:88:94:
09:37:7b:f7:f1:a7:38:1f:c1:25:d0:5e:13:8f:d6:
e8:57:65:b6:c4:ef:44:db:92:ae:a7:cf:64:09:7c:
a0:f1:ff:b0:93:19:eb:1a:90:92:88:cf:b5:b7:19:
c7:12:e1:cf:dd:89:ae:ea:89:eb:10:03:63:fe:20:
8d:e0:f1:44:ae:84:cb:1b:15:b1:40:b2:66:46:52:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FC:4A:5C:57:68:5B:4F:FA:DA:53:15:17:37:CB:68:10:AE:11:7A
X509v3 Authority Key Identifier:
keyid:24:D0:A5:CA:2C:F1:BD:91:2F:42:CC:8C:F6:51:F6:FE:88:E7:26:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNClyizxvZEvQsyM9lH2_ojnJqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b31935-efc0-4cc8-b85d-db13cc3f1db6/1/JNClyizxvZEvQsyM9lH2_ojnJqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:cb:c2:e3:45:b0:55:e9:e9:30:de:e8:25:e7:3c:b5:fc:ba:
31:de:d5:fd:e2:d5:9c:8d:c6:4c:68:a1:33:e4:d1:cd:87:f0:
e4:05:65:f8:d9:2c:fb:94:40:11:27:a2:fc:9d:bb:96:34:e4:
32:b1:ba:32:0d:54:73:1a:be:c7:14:29:d3:e0:a5:c8:27:1f:
4e:99:fa:be:dd:73:24:80:5d:72:d1:88:09:62:f7:e8:ff:1a:
28:ea:5b:e3:69:28:2f:c0:04:63:5d:5f:87:6f:3f:0a:c1:68:
34:be:09:da:ed:77:a8:e2:e8:b6:c5:01:a5:17:fb:3f:ac:37:
ab:f6:54:56:43:f3:8a:b2:f5:06:52:cf:87:80:a9:58:f8:f4:
17:3a:87:be:94:57:fe:56:40:54:21:c0:cf:8b:ce:f4:f8:af:
d3:a8:e5:7c:f4:82:fb:7a:c2:19:57:be:35:d3:72:3d:eb:8b:
cf:d0:e1:76:b0:46:28:0c:13:c6:15:7c:16:5d:1c:5a:67:c7:
a2:6c:d3:ea:89:2c:5a:b1:a6:eb:94:dc:99:5d:46:15:fb:45:
74:6a:25:2c:73:53:ac:48:ab:f9:ed:9e:ee:38:32:29:e7:07:
c6:cf:9d:37:ea:8b:0b:c6:ef:8e:ad:86:59:14:6f:b4:e6:d2:
7c:f8:45:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s2td5YkrLv0uDrBgMz2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDBhNWNhMmNmMWJkOTEyZjQyY2M4Y2Y2NTFmNmZlODhl
NzI2YTQwHhcNMjUxMDE5MDkwMTAzWhcNMjUxMDIwMDkwMTAzWjAzMTEwLwYDVQQD
EyhiYmZjNGE1YzU3Njg1YjRmZmFkYTUzMTUxNzM3Y2I2ODEwYWUxMTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs4rkYJPZiE1U8zCs5f6pv3i/Elc
8T/811JVd7DawUDb4raLYlIq+0e97TZVweyhM6deFxAoDN6VTOhBsPv8MY1bzRWd
kaAIavUE92n2vdOjMK2WRobHpfIpXq6K6sSfplmpgjPMKYlbPsBCsFKZcbVHxv+d
xk2neCtBadqGHyvAR1kgsfFOeMuvLtVrYmyNOi7JKiMR6UJulOWQHthWHaxRqm5o
ezsfJNgtYPwxB/dJiJQJN3v38ac4H8El0F4Tj9boV2W2xO9E25Kup89kCXyg8f+w
kxnrGpCSiM+1txnHEuHP3Ymu6onrEANj/iCN4PFEroTLGxWxQLJmRlJrgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLv8SlxXaFtP+tpTFRc3y2gQrhF6MB8GA1UdIwQY
MBaAFCTQpcos8b2RL0LMjPZR9v6I5yakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9iMzE5MzUtZWZjMC00Y2M4LWI4NWQt
ZGIxM2NjM2YxZGI2LzEvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9iMzE5MzUtZWZjMC00Y2M4LWI4NWQtZGIxM2NjM2YxZGI2
LzEvSk5DbHlpenh2WkV2UXN5TTlsSDJfb2puSnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMvC40Ww
VenpMN7oJec8tfy6Md7V/eLVnI3GTGihM+TRzYfw5AVl+Nks+5RAESei/J27ljTk
MrG6Mg1Ucxq+xxQp0+ClyCcfTpn6vt1zJIBdctGICWL36P8aKOpb42koL8AEY11f
h28/CsFoNL4J2u13qOLotsUBpRf7P6w3q/ZUVkPzirL1BlLPh4CpWPj0FzqHvpRX
/lZAVCHAz4vO9Piv06jlfPSC+3rCGVe+NdNyPeuLz9DhdrBGKAwTxhV8Fl0cWmfH
omzT6oksWrGm65TcmV1GFftFdGolLHNTrEir+e2e7jgyKecHxs+dN+qLC8bvjq2G
WRRvtObSfPhFNw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:58 2025 by rpki-client