Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
File: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft (raw, json)
Hash identifier: CxKpz1h9BrVN0Hv2JrpbkHV23UNYaOGdvdkdE0uwi+I=
Subject key identifier: 84:B3:FE:E2:10:3E:6B:06:22:04:C4:F5:BE:7C:A6:CE:98:91:80:6C
Authority key identifier: 25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
Certificate issuer: /CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Certificate serial: 0199FB0ECECD8C904880D1B2AAE6459728D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
Manifest number: 0D9A
Signing time: Sun 19 Oct 2025 06:01:15 +0000
Manifest this update: Sun 19 Oct 2025 06:01:15 +0000
Manifest next update: Mon 20 Oct 2025 06:01:15 +0000
Files and hashes: 1: JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl (hash: xrNiu3fckKvnfZwIPAgRSrXEwnCf/yVpSahdXNYuOUM=)
2: onIKXkQooL-gKM4FNa_iPOCUh28.roa (hash: p9VhepPylQixNxjdmUg1Yw/ZjccT3GaAzNYioyvMSo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:ce:cd:8c:90:48:80:d1:b2:aa:e6:45:97:28:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c674ab1806dd6afe213be38e92a35fbc64ce34
Validity
Not Before: Oct 19 06:01:15 2025 GMT
Not After : Oct 20 06:01:15 2025 GMT
Subject: CN=84b3fee2103e6b062204c4f5be7ca6ce9891806c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:19:65:c4:a6:3a:a2:a0:b9:a6:62:4f:8e:
13:8f:02:e0:65:ba:c0:47:8b:76:68:8f:e7:30:01:
75:72:69:ce:f5:c8:c0:0a:c4:69:3b:68:22:87:d1:
e3:7d:8b:d8:2e:b6:ab:ea:ba:23:85:68:98:74:5b:
c9:16:e2:18:65:46:64:c2:ed:b1:6d:f1:19:c0:5f:
df:39:01:b8:33:36:cd:e9:01:ac:1c:a5:c6:95:98:
25:ce:f1:6a:23:58:67:40:09:d1:06:5d:90:29:64:
c5:2f:a1:aa:2d:8b:09:e5:9c:8d:38:f0:7e:b9:2a:
e2:fb:b4:cf:20:da:b8:f0:41:cd:52:47:7e:3f:68:
c4:5d:b2:ca:1b:97:c0:40:b3:3b:2b:1a:98:06:0a:
44:80:65:70:7a:00:03:26:ce:ad:ab:0d:9c:73:87:
31:76:0b:9b:bf:0b:56:f0:61:2e:b5:cc:f8:65:70:
c9:98:6f:fa:5e:ad:73:c4:75:fa:f5:92:17:4e:12:
7c:b5:6e:1a:ee:d7:c5:8d:bd:63:af:9c:01:41:85:
25:2a:f9:6e:d6:a9:d9:3b:94:6f:e0:39:43:4e:83:
ed:44:23:66:90:82:59:ca:56:8e:4c:26:54:f7:90:
c4:9a:94:83:1f:c5:b7:5f:ca:37:9c:65:74:68:fa:
3a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B3:FE:E2:10:3E:6B:06:22:04:C4:F5:BE:7C:A6:CE:98:91:80:6C
X509v3 Authority Key Identifier:
keyid:25:C6:74:AB:18:06:DD:6A:FE:21:3B:E3:8E:92:A3:5F:BC:64:CE:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/56be8a-c8be-48f9-a67c-f5cd0d7116eb/1/JcZ0qxgG3Wr-ITvjjpKjX7xkzjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ba:a8:98:1c:2e:16:56:3c:aa:2f:b9:bf:ec:2c:f3:5c:a7:
3b:70:27:6f:26:ef:fa:99:80:c9:84:0f:b5:1f:db:6e:c4:40:
9f:00:b8:70:ae:99:17:f1:2c:a6:a8:41:99:4f:28:d4:1a:8c:
7c:1e:93:10:1f:32:e2:36:78:55:3d:ef:c4:28:8d:a6:4f:aa:
89:3b:10:d5:d8:61:43:24:06:59:26:02:f4:b6:81:bf:58:6a:
fe:19:eb:74:94:e5:f7:ad:06:c4:09:73:25:2c:e8:2c:2f:29:
9f:4d:d2:8f:5d:e3:86:5a:9e:e1:e9:f7:fe:5b:0d:20:9e:39:
4d:ab:23:a0:41:e5:08:dd:38:65:28:5e:84:cb:f2:0b:48:d8:
ef:84:0d:62:73:4b:87:b4:b3:7d:b3:2d:c0:e1:66:f6:b6:ea:
42:03:94:94:40:cc:e5:1c:71:38:5b:34:ba:62:15:b2:ef:e7:
bf:20:74:ca:d3:7e:0d:97:bf:6c:b7:ab:8f:61:b2:88:1c:7e:
71:c4:2a:49:b2:1f:f0:00:3c:72:7a:6c:7e:d4:c1:9d:68:ce:
87:eb:76:8b:bd:cd:90:84:eb:cc:4f:5c:da:fb:30:61:23:0e:
e2:66:d9:15:d6:d5:7a:38:1e:4f:4e:42:b5:93:a4:df:14:59:
ce:a1:a3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:24 2025 by rpki-client