Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
File: JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft (raw, json)
Hash identifier: AM7Izd/UXsSzlm9ArF8REFsAKA5eFSyGKvAc13NspFA=
Subject key identifier: F0:C0:DD:9C:86:F8:65:D6:F2:0A:E1:82:E9:1D:7F:37:68:38:CF:78
Authority key identifier: 25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
Certificate issuer: /CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Certificate serial: 019A006C0811D5B28AE49BB30ADAB863BE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
Manifest number: 1539
Signing time: Mon 20 Oct 2025 07:01:11 +0000
Manifest this update: Mon 20 Oct 2025 07:01:11 +0000
Manifest next update: Tue 21 Oct 2025 07:01:11 +0000
Files and hashes: 1: HNZKASXvOu7ez_JH9PuMKg51dfc.roa (hash: E5GVRIyB2FPDqpFEdeZFkQOEeY/IVLgHRxxoYqNwjnk=)
2: JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl (hash: P2fKnKA2nYeSleZwBW+l+DT663iWYtG5cu8Q0Lnwb30=)
3: ZiGKQNYVWU0UTegHy0tzFPtdAFA.roa (hash: 8ysxTHtlcBGpselXIHgOo3ohrRPYZzrFKyhkLGGKcWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:08:11:d5:b2:8a:e4:9b:b3:0a:da:b8:63:be:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256452a3420f4f18dfa3a14d26b3348fdfcf3d3b
Validity
Not Before: Oct 20 07:01:11 2025 GMT
Not After : Oct 21 07:01:11 2025 GMT
Subject: CN=f0c0dd9c86f865d6f20ae182e91d7f376838cf78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:05:4e:c4:96:5a:4d:44:e4:ad:6e:41:7f:d6:
c4:1d:d0:12:d1:53:cd:73:dc:4f:24:bf:61:a1:46:
0f:22:11:02:52:ab:d7:05:39:c8:a6:01:17:8e:cb:
3e:1b:8b:6d:75:ad:6a:c1:50:36:88:df:08:90:fb:
2d:a6:c5:30:99:1c:e3:28:a7:39:39:d0:61:45:ba:
23:03:3d:7a:af:8d:84:f6:98:b2:cf:19:98:cc:91:
24:5f:34:e5:54:52:fd:a2:7b:f5:cd:a5:b4:01:b4:
c4:22:e4:31:92:d3:1e:ec:27:5f:3c:e6:19:bc:0c:
85:52:29:f0:93:67:f5:cf:3e:09:fc:ce:04:84:4f:
65:49:0a:d2:08:07:af:36:b5:fc:56:37:d5:24:7c:
e2:00:ec:68:b0:49:e2:56:48:e7:ed:61:2a:4f:c8:
5d:3c:e3:4b:7e:20:d5:ef:6a:3a:5f:b0:0b:2c:96:
2e:d3:0b:60:92:1a:61:41:c2:70:66:39:e1:b6:bc:
28:8b:be:21:03:38:a0:14:06:30:e7:59:ac:13:61:
ec:e5:0b:c6:7f:1e:2e:0b:2c:79:71:6e:f6:5a:e0:
d6:a4:df:cd:b4:29:93:b6:41:77:7b:5d:d1:dd:b1:
53:7b:59:60:dd:fe:47:01:b5:63:88:59:fe:e7:af:
39:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C0:DD:9C:86:F8:65:D6:F2:0A:E1:82:E9:1D:7F:37:68:38:CF:78
X509v3 Authority Key Identifier:
keyid:25:64:52:A3:42:0F:4F:18:DF:A3:A1:4D:26:B3:34:8F:DF:CF:3D:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWRSo0IPTxjfo6FNJrM0j9_PPTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a48388-2ed7-44cf-9557-f38b289ff969/1/JWRSo0IPTxjfo6FNJrM0j9_PPTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5f:0c:49:46:2d:85:cf:29:1c:ea:2f:72:6b:88:2d:61:48:
30:34:6e:92:19:0b:65:52:4d:1d:00:68:52:8d:1b:46:86:3b:
d1:d2:46:51:7d:3b:5e:07:5e:de:e3:59:07:2d:32:cb:d6:c6:
84:5d:17:f3:1a:a8:31:19:f6:98:e9:bf:34:80:67:63:aa:f1:
b0:4f:f7:a3:04:68:93:7b:b8:75:6a:36:d9:73:31:39:4e:88:
2d:83:e1:1b:bb:e6:9b:ba:e5:23:41:78:a1:e7:f0:22:a9:57:
e6:9c:87:84:1b:ff:ba:42:29:cc:50:64:71:85:4f:85:d5:69:
83:71:0d:e3:00:37:7b:8e:0e:27:e4:b5:52:c6:d8:2e:1e:32:
af:d0:fd:de:58:76:a2:65:22:36:49:0d:3a:ce:b2:91:3a:f1:
27:9f:3f:fd:be:84:b7:8c:ae:11:27:38:f9:94:42:ba:3c:16:
1a:22:d9:a5:ac:16:76:ad:03:7d:7d:7a:c3:da:bf:82:1f:b0:
b3:50:51:2e:d1:ef:5f:4b:a0:64:3b:ed:33:b6:12:8c:61:fc:
43:a1:ff:15:30:4d:54:c4:8c:e8:bb:49:2b:1d:d6:cf:3a:51:
03:03:7a:87:19:5d:85:36:f8:4b:94:c2:1c:84:4e:de:99:b4:
16:a9:d0:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbAgR1bKK5JuzCtq4Y75vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NjQ1MmEzNDIwZjRmMThkZmEzYTE0ZDI2YjMzNDhmZGZj
ZjNkM2IwHhcNMjUxMDIwMDcwMTExWhcNMjUxMDIxMDcwMTExWjAzMTEwLwYDVQQD
EyhmMGMwZGQ5Yzg2Zjg2NWQ2ZjIwYWUxODJlOTFkN2YzNzY4MzhjZjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6QVOxJZaTUTkrW5Bf9bEHdAS0VPN
c9xPJL9hoUYPIhECUqvXBTnIpgEXjss+G4ttda1qwVA2iN8IkPstpsUwmRzjKKc5
OdBhRbojAz16r42E9piyzxmYzJEkXzTlVFL9onv1zaW0AbTEIuQxktMe7CdfPOYZ
vAyFUinwk2f1zz4J/M4EhE9lSQrSCAevNrX8VjfVJHziAOxosEniVkjn7WEqT8hd
PONLfiDV72o6X7ALLJYu0wtgkhphQcJwZjnhtrwoi74hAzigFAYw51msE2Hs5QvG
fx4uCyx5cW72WuDWpN/NtCmTtkF3e13R3bFTe1lg3f5HAbVjiFn+5685dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDA3ZyG+GXW8grhgukdfzdoOM94MB8GA1UdIwQY
MBaAFCVkUqNCD08Y36OhTSazNI/fzz07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9hNDgzODgtMmVkNy00NGNmLTk1NTct
ZjM4YjI4OWZmOTY5LzEvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9hNDgzODgtMmVkNy00NGNmLTk1NTctZjM4YjI4OWZmOTY5
LzEvSldSU28wSVBUeGpmbzZGTkpyTTBqOV9QUFRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFV8MSUYt
hc8pHOovcmuILWFIMDRukhkLZVJNHQBoUo0bRoY70dJGUX07Xgde3uNZBy0yy9bG
hF0X8xqoMRn2mOm/NIBnY6rxsE/3owRok3u4dWo22XMxOU6ILYPhG7vmm7rlI0F4
oefwIqlX5pyHhBv/ukIpzFBkcYVPhdVpg3EN4wA3e44OJ+S1UsbYLh4yr9D93lh2
omUiNkkNOs6ykTrxJ58//b6Et4yuESc4+ZRCujwWGiLZpawWdq0DfX16w9q/gh+w
s1BRLtHvX0ugZDvtM7YSjGH8Q6H/FTBNVMSM6LtJKx3WzzpRAwN6hxldhTb4S5TC
HIRO3pm0FqnQ8Q==
-----END CERTIFICATE-----
Generated at Mon Oct 20 15:41:26 2025 by rpki-client