
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
File: JeqXR70BpFf6K7AvzArIIxQLUY8.mft (raw, json)
Hash identifier: LYA37QnYorn6imHUfFWJcDGLEILz7C7qcFHoh31yNEw=
Subject key identifier: E0:A3:CC:71:9E:6F:60:16:BA:29:8A:C8:85:3C:F4:87:47:4D:22:67
Authority key identifier: 25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
Certificate issuer: /CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Certificate serial: 0199FB0ED2184179977E28960EAF7393EA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
Manifest number: 058A
Signing time: Sun 19 Oct 2025 06:01:16 +0000
Manifest this update: Sun 19 Oct 2025 06:01:16 +0000
Manifest next update: Mon 20 Oct 2025 06:01:16 +0000
Files and hashes: 1: JeqXR70BpFf6K7AvzArIIxQLUY8.crl (hash: aKq2UHHs4WjjG5E07p5eVw9vr4yFM7EljW+sXFEicRs=)
2: MmaQNXqdY0uKh-k6Q3lAXI1Chz8.roa (hash: gbTLg78j8QXaXHSAXv6UFJxOI7JnWlqhBTReKaDFIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:d2:18:41:79:97:7e:28:96:0e:af:73:93:ea:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25ea9747bd01a457fa2bb02fcc0ac823140b518f
Validity
Not Before: Oct 19 06:01:16 2025 GMT
Not After : Oct 20 06:01:16 2025 GMT
Subject: CN=e0a3cc719e6f6016ba298ac8853cf487474d2267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:5c:f7:87:17:83:0c:e3:33:7d:a1:78:f7:
5d:c3:53:7a:f2:16:38:10:24:01:16:24:37:aa:14:
11:cf:3d:0f:4b:1b:3f:ef:e0:de:0f:ff:bf:e1:e2:
aa:b4:73:1c:b4:2c:57:e6:91:6c:ca:6f:36:0f:fa:
a5:48:8d:d4:c0:1e:1a:c3:c4:4b:b5:ad:67:ae:cd:
3e:54:72:ea:2a:df:54:b9:b5:6c:a6:55:e0:3c:33:
79:2a:35:0d:ac:a0:ee:be:99:c8:b8:7a:0e:6f:b7:
83:a8:81:00:a5:7b:7c:f9:01:88:33:ab:6c:fb:e4:
a8:dc:7a:2f:5a:a4:53:be:05:23:05:54:41:32:27:
65:ab:76:96:0d:31:08:75:ad:89:64:34:ef:1a:b3:
2d:f7:14:54:4f:ec:ff:78:80:f0:49:f7:11:d2:32:
85:8b:b0:5e:e5:4b:a5:a7:74:00:cd:d3:d5:d9:ed:
1c:43:cd:2c:36:ed:f9:14:ef:45:c1:e9:4d:0c:8a:
01:53:62:be:20:6a:79:f3:0d:5a:4b:4c:50:fa:3a:
99:c1:b0:72:df:f4:d2:60:60:06:e5:9a:3e:be:45:
3a:a7:cf:83:3a:96:22:0e:e3:37:35:3b:0f:f0:22:
73:24:b2:75:bc:bc:11:5b:10:6b:34:fa:c2:d8:5e:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A3:CC:71:9E:6F:60:16:BA:29:8A:C8:85:3C:F4:87:47:4D:22:67
X509v3 Authority Key Identifier:
keyid:25:EA:97:47:BD:01:A4:57:FA:2B:B0:2F:CC:0A:C8:23:14:0B:51:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeqXR70BpFf6K7AvzArIIxQLUY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/4fef00-908e-443c-9ff2-016d6dcfad81/1/JeqXR70BpFf6K7AvzArIIxQLUY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:8e:01:08:10:73:e1:c1:92:2b:aa:00:79:73:3e:49:19:a2:
2c:04:d2:c5:e1:01:fe:6d:6a:92:3a:38:28:df:1e:8d:37:16:
37:7c:62:c3:6a:3c:55:e2:e9:f6:b2:82:8e:b4:0c:3b:3b:19:
62:dc:e4:4b:cc:2e:5f:e1:39:fe:94:91:8e:73:05:f5:50:0b:
d4:14:dd:38:5f:7b:15:19:a1:e8:b5:c2:73:81:99:62:aa:0c:
0c:b7:90:d0:91:f8:b7:4a:0b:42:fd:2f:e0:41:36:fc:30:d7:
ec:6a:e8:ea:6b:54:21:21:f2:63:1b:ee:0f:6b:af:b5:0d:6e:
69:74:62:a0:69:88:25:8d:6c:b6:2d:71:7e:60:66:9a:19:ec:
fd:4f:bd:2d:fc:a7:83:fd:95:5e:a4:a3:d8:74:68:79:89:96:
4e:90:dd:bc:23:6c:4a:47:b9:b0:ac:39:a6:33:ee:68:e8:86:
b1:f2:55:0b:d5:7f:b1:1b:bc:8f:4f:f3:0c:6a:0b:4a:08:66:
ca:f9:86:ff:e6:5c:bc:0b:9d:b8:da:3a:15:a0:64:75:a0:cf:
90:da:56:a7:1c:bb:64:89:2e:52:84:72:a7:53:3e:ea:45:7d:
47:65:b7:e6:c2:3d:e8:66:63:48:7a:2b:92:13:ab:ce:d4:3f:
5e:77:73:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:11 2025 by rpki-client