Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
File: JxnUEBB2de7YtizK1DUzb4GeCm0.mft (raw, json)
Hash identifier: zACNgwGV5TfrKaCWbyLTs8jTDZhQ+1MdFCJq8N3BsrI=
Subject key identifier: 20:BC:35:7D:1E:A6:23:E8:81:CF:CA:02:6F:35:FE:2E:F5:65:13:1B
Authority key identifier: 27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
Certificate issuer: /CN=2719d410107675eed8b62ccad435336f819e0a6d
Certificate serial: 0199FC5911F1430247A538EAEA6F989BF658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
Manifest number: 0922
Signing time: Sun 19 Oct 2025 12:01:59 +0000
Manifest this update: Sun 19 Oct 2025 12:01:59 +0000
Manifest next update: Mon 20 Oct 2025 12:01:59 +0000
Files and hashes: 1: JxnUEBB2de7YtizK1DUzb4GeCm0.crl (hash: vnYV8aW4E6mtO7WpnsvEkEBHcxVpTzpJJBt+K/fofwk=)
2: ZFYqKvxguHm4smQvy9awnquW2qU.roa (hash: 8vWdx+ga/HPoDaDg67DCWpBBfssC0K3uCo1oOh4juXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:11:f1:43:02:47:a5:38:ea:ea:6f:98:9b:f6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719d410107675eed8b62ccad435336f819e0a6d
Validity
Not Before: Oct 19 12:01:59 2025 GMT
Not After : Oct 20 12:01:59 2025 GMT
Subject: CN=20bc357d1ea623e881cfca026f35fe2ef565131b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:50:1a:5f:a9:77:4f:5d:de:84:a2:18:62:
f4:6d:ad:7d:92:2e:d7:74:7f:36:60:77:45:07:3b:
d8:f3:83:1b:5e:58:10:c8:c9:b8:f4:6c:89:86:4b:
18:76:cb:a2:34:17:25:01:e8:20:07:ed:9a:9e:2e:
9e:56:21:1f:9a:4b:59:81:bb:5e:d8:8c:c9:00:cf:
a9:9f:5f:84:df:3d:42:1f:f6:d3:47:32:fe:55:39:
aa:bb:8b:dd:d9:57:bc:df:ac:bc:09:d9:2a:49:55:
ce:30:5b:1d:fd:f0:3f:7d:ae:97:16:00:0d:3c:90:
bc:65:3c:f0:25:c2:d2:e1:b3:6a:bf:00:ba:88:1c:
2f:b4:ce:77:57:43:cb:f6:c5:c3:bc:65:1e:e0:74:
5d:44:73:50:84:7c:77:d3:90:a8:0f:86:1d:ee:a1:
82:57:a4:96:71:fa:c9:a9:3c:8e:d4:9e:8e:52:97:
92:94:e8:75:20:df:26:b0:f6:42:76:ac:83:4d:cf:
89:f8:26:40:38:32:8c:59:2e:1f:29:9e:3d:58:83:
a9:ca:33:c8:51:fe:1d:1d:ab:3a:8f:3c:92:5a:df:
30:e4:17:0b:81:e6:ca:28:f6:44:3f:6a:26:9f:d3:
5e:81:45:8a:aa:18:e1:34:72:10:05:5e:b5:dc:30:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BC:35:7D:1E:A6:23:E8:81:CF:CA:02:6F:35:FE:2E:F5:65:13:1B
X509v3 Authority Key Identifier:
keyid:27:19:D4:10:10:76:75:EE:D8:B6:2C:CA:D4:35:33:6F:81:9E:0A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxnUEBB2de7YtizK1DUzb4GeCm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/715ef2-06e9-455d-8b71-7718512f0def/1/JxnUEBB2de7YtizK1DUzb4GeCm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d5:0f:9d:db:7a:a3:27:2c:74:fa:39:8c:31:ad:e2:21:78:
3b:8e:32:0d:8b:eb:d9:4e:e3:5b:20:d5:a7:07:ed:02:5d:80:
9c:6e:eb:55:2f:9c:08:0b:42:72:6d:e7:10:9d:7e:4e:a9:83:
ed:c7:78:d5:13:4a:18:bf:b6:4f:f3:e9:41:f0:f5:79:17:a0:
a7:6f:8b:56:2f:84:23:ff:a1:7a:f7:38:8b:56:dc:38:52:9b:
59:02:45:76:48:5d:05:49:be:f8:0f:01:41:c3:67:c2:76:71:
18:2c:11:d2:a0:eb:21:c1:15:60:59:fe:2e:5b:c5:11:e3:65:
2f:9b:a2:1a:71:ca:2e:94:f5:7e:80:26:f7:f9:51:94:01:c9:
0b:42:04:48:a9:16:29:4d:8b:2c:cb:bf:27:6b:0f:ec:de:ed:
f4:2a:58:4f:3c:c4:06:7a:e3:4c:cb:b6:56:a2:5c:d6:13:f1:
42:fd:f6:e8:21:5f:7a:ba:c3:66:0f:ce:5b:5e:73:f0:eb:25:
ba:09:e4:4a:63:de:d7:e1:48:64:66:46:62:e3:56:db:97:40:
15:7e:5e:b6:df:26:50:46:56:44:9a:0c:72:46:17:f7:ef:1f:
d6:3b:82:ce:58:07:5d:fd:c5:a2:85:d8:1c:f9:b7:5d:32:cb:
47:8e:b5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:04 2025 by rpki-client