Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
File: JQ599DyC0SChPTyGXx8G9JZEseE.mft (raw, json)
Hash identifier: tm9WxCugkYa7vO+6+JSMHHd7qcXCdaGkbPn3lyBBS3g=
Subject key identifier: EE:3C:A8:0C:76:E0:C2:DC:94:47:86:63:8D:AA:66:25:BC:F1:A8:B2
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Certificate issuer: /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial: 0199FD33F39C50D3807C64B1A9A03227C453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
Manifest number: 0EC8
Signing time: Sun 19 Oct 2025 16:01:04 +0000
Manifest this update: Sun 19 Oct 2025 16:01:04 +0000
Manifest next update: Mon 20 Oct 2025 16:01:04 +0000
Files and hashes: 1: JQ599DyC0SChPTyGXx8G9JZEseE.crl (hash: 8CiteFe5WDz4sioUlwvwY9KCRkucMN0Egd+lfFMUaqU=)
2: NxEFYabQ1De2D9MRDvZOgIu0R4g.roa (hash: lAojMYDzIDb75W7SBnvnLzGQZua9BCv398UHDwqthXo=)
3: uBhMU8FaL6yzEgI8KXo0amRkPt0.roa (hash: rZaJZ+vs9poyZNeTB4YM94eOiwwWluQ2wWx8JrMOGHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f3:9c:50:d3:80:7c:64:b1:a9:a0:32:27:c4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Validity
Not Before: Oct 19 16:01:04 2025 GMT
Not After : Oct 20 16:01:04 2025 GMT
Subject: CN=ee3ca80c76e0c2dc944786638daa6625bcf1a8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e0:c8:c3:0a:60:e7:3d:22:2a:44:25:33:e3:
03:d8:ba:bf:be:a0:99:f8:93:48:4d:d9:2b:34:d7:
8c:c6:42:a8:69:ef:47:aa:98:fd:8f:b3:52:ed:e5:
61:f6:5c:22:b0:52:4c:a1:4d:fc:63:c8:f6:b4:e6:
15:be:75:ae:91:8c:e2:60:39:8d:ad:42:a6:d1:ad:
3d:3e:cf:2a:d4:0a:52:bd:db:5a:7a:de:f0:79:53:
d2:77:0b:38:a4:d5:9b:c8:08:8d:3b:f6:45:71:94:
ea:9a:49:a2:27:c2:80:29:e3:67:13:bd:c9:27:14:
2b:19:c8:a2:9d:de:dc:25:04:d0:8e:0f:cb:ba:38:
7d:d3:2c:4a:49:50:0f:13:90:bd:c5:59:72:a0:52:
4c:ec:e4:4f:b1:e6:12:8e:04:99:a2:d1:35:ae:7c:
78:a0:39:4d:c8:42:20:26:b2:68:48:26:f8:59:3d:
62:5f:99:8e:f1:42:ff:c4:35:dd:6b:94:18:4e:29:
f4:61:77:b2:b7:11:cc:f2:6f:5c:34:c6:46:c3:b6:
18:80:e9:27:1c:bc:8e:ad:38:eb:48:a4:c9:7c:a9:
83:8f:af:79:8c:e9:fb:ae:5a:91:37:cc:61:56:4c:
c3:5e:31:e5:ed:d1:95:49:ae:0a:07:9c:7d:40:13:
46:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3C:A8:0C:76:E0:C2:DC:94:47:86:63:8D:AA:66:25:BC:F1:A8:B2
X509v3 Authority Key Identifier:
keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b0:9d:7a:d3:90:69:a0:5d:81:c2:fc:90:8d:83:2c:d3:51:
03:e4:06:e1:d1:34:08:2a:c3:ae:38:f2:79:bf:de:eb:31:1f:
84:6f:0e:d5:d7:85:8f:f4:a1:27:01:cd:5f:2f:2d:b4:36:e0:
ac:a4:8e:92:e7:76:40:c8:77:13:ef:e2:2f:ec:87:c6:99:4a:
44:82:a1:07:e5:d6:3b:82:49:c7:76:dc:49:52:93:40:57:e7:
62:e7:29:00:34:e1:47:34:3b:4a:10:50:10:a1:fa:ee:9e:3b:
c8:8e:90:8a:d0:64:be:0c:10:a3:44:34:35:8d:10:98:af:6c:
ba:88:8a:0c:75:44:b8:ef:df:ab:aa:94:7e:96:0c:86:ed:da:
0e:cf:59:f6:c5:a2:f0:84:f9:00:81:d4:be:ce:11:77:4f:be:
77:33:a7:b5:c8:e9:d2:6f:28:91:27:2a:2e:2b:9f:14:43:4a:
65:a2:a0:7d:c0:a4:4a:a4:d3:4e:57:6a:ec:dd:cb:9d:41:a2:
95:35:33:39:39:75:7f:5d:89:36:45:65:19:b3:4f:6c:4c:09:
7a:44:9a:c6:11:90:0a:ef:5c:b4:2d:3d:49:b9:b3:a0:ab:e2:
13:78:fb:0a:cd:95:e8:6c:f2:d2:c5:f0:20:f3:18:4e:b6:2f:
90:64:15:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:03 2025 by rpki-client