Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
File: JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft (raw, json)
Hash identifier: kcnAVtuH//EUvhCN1oiljLXtDzOSKMjMBJgJgNOTUe8=
Subject key identifier: 62:0D:5A:19:A8:DB:BB:43:48:8E:E5:61:A4:4C:8B:60:78:0F:B5:1C
Authority key identifier: 26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
Certificate issuer: /CN=261b941dbe59651fafbba9724a12775e07edb635
Certificate serial: 0199FC217D1933FC6ABE04313F4C4A94CBD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
Manifest number: 0CD0
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: C03oYsQeKmNqstjprcrpWU_C_FA.roa (hash: XjHgFgaeV7edOP+rVRUhxH/PoL1vk7vdaF1YjoWE+DE=)
2: JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl (hash: 804jFVqa3oSUAFuBJwQmJl2/+XtZBt4IZppa6i8h4qc=)
3: _5zMdOWOnuF29ViyjTYdqmiabT0.roa (hash: bOHD6ebnTlGjO2kqvQSoKN6+pQ2e9dKaoGGov9ljW5w=)
4: iz1oLphOz4C0RKqGaCjwgWp4k-4.roa (hash: Spyiz27gUIj8vniKoNjV++85gF3fncVYgrGF+1dIJog=)
5: j4xQMv8fOD6vNafgvqaj-sinhSA.roa (hash: g/n7i1hhBBo3Q/tKawsn3d1mvtP+3frbkbuj6wZhZkE=)
6: uXwQWRGTbp4iQG2hqxNhBERgVfM.roa (hash: ZMVua8ZiPI5nY6upqsZo7sTjSdm1cARPTecfc5Wvr3E=)
7: zhL3mw3tfGz22FNWwzYf3uLwlM0.roa (hash: zAOff2Kw1dbM05MiGj7aU4wK2pL5mdV5s1R3xN1PATI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7d:19:33:fc:6a:be:04:31:3f:4c:4a:94:cb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=261b941dbe59651fafbba9724a12775e07edb635
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=620d5a19a8dbbb43488ee561a44c8b60780fb51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9c:ad:15:c4:70:b9:29:fc:29:bc:b2:4c:e4:
9c:63:9f:3d:f7:0b:63:a2:ee:ff:1e:15:85:b4:49:
cb:63:48:bd:d0:2d:ac:d0:09:56:1d:7c:9b:0f:4b:
a0:d0:4b:6e:58:04:c0:e3:4f:e2:10:91:9c:42:e7:
c3:f8:e8:e6:24:aa:a8:f6:be:c3:c4:1c:63:e7:c3:
e8:9b:34:d9:58:64:bc:db:62:ce:cd:d4:29:ef:30:
38:a5:05:68:3e:5a:ba:5b:9a:79:d9:0d:86:48:ab:
92:95:a4:b7:1f:5a:f2:27:aa:5f:7a:5f:de:17:4f:
05:cc:04:e2:f2:a8:09:01:53:27:95:cd:9b:f8:58:
4d:a1:60:5b:7e:0a:b1:4a:b7:14:f4:d9:52:39:ca:
de:0a:9f:35:00:fd:17:44:06:37:a0:71:88:db:76:
36:0d:9e:f7:fb:c1:27:e2:fe:86:88:3c:65:da:4d:
c5:29:67:b8:d7:95:14:fa:a5:ad:d0:f0:71:04:aa:
5f:d2:87:8a:a2:a2:16:e8:41:cc:25:5e:fb:4e:22:
49:cd:78:d0:21:cf:43:35:34:d5:df:bb:ae:79:7e:
4c:30:a2:8d:30:70:de:3a:ca:f2:42:12:bd:77:bb:
e9:9a:45:0d:9b:5b:16:79:01:68:52:36:62:22:f6:
05:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0D:5A:19:A8:DB:BB:43:48:8E:E5:61:A4:4C:8B:60:78:0F:B5:1C
X509v3 Authority Key Identifier:
keyid:26:1B:94:1D:BE:59:65:1F:AF:BB:A9:72:4A:12:77:5E:07:ED:B6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhuUHb5ZZR-vu6lyShJ3XgfttjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/2f830f-af4d-4d33-a300-b98df544bc20/1/JhuUHb5ZZR-vu6lyShJ3XgfttjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4f:fa:1c:0c:62:52:96:fc:8a:f0:4b:40:bc:07:2b:8e:19:
8e:3a:43:8a:dc:9e:75:a9:23:f5:23:4a:5a:70:5f:09:b8:27:
29:54:36:71:15:6d:7c:8d:55:e8:4c:bc:de:fb:2a:bf:ae:82:
95:7f:7b:01:df:c4:45:11:20:4f:92:6f:16:b8:3c:88:25:70:
fb:b2:cb:6e:ab:95:89:78:ed:fe:6d:09:0c:20:0d:33:31:aa:
ce:a2:e8:24:34:85:cf:90:b1:a2:a0:b7:4c:9b:e6:c0:b4:7e:
74:bd:19:5b:26:07:8d:a7:41:78:49:5e:89:b3:a5:e5:f7:a1:
c0:95:ec:0f:d8:93:c9:62:98:6c:e5:65:81:88:b9:e1:38:21:
e0:14:2c:35:98:b6:f1:9f:a6:87:9e:fb:4e:9e:32:c1:fb:63:
12:de:e3:e0:35:e2:8f:9a:95:a7:8a:07:d9:73:f7:15:25:1a:
67:be:66:4d:dc:fc:a6:26:3d:cc:bb:a7:0c:9a:d5:10:3f:9d:
a8:7e:56:3e:f1:f9:3d:5e:44:ed:b5:d5:a4:b4:dd:15:3b:9e:
12:7d:90:87:d2:f2:32:b7:47:0e:bb:e9:88:c3:ff:00:ba:a7:
e0:73:9c:e1:8a:38:b9:73:8a:d7:7c:78:97:4f:52:36:27:f3:
c8:63:71:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:58 2025 by rpki-client