Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File: JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier: 6XMQ4xG700Qh7kUlKmQ8QLuOeihS0uPUvESW/Ja2XrI=
Subject key identifier: E2:3E:19:40:5E:6A:08:88:3B:18:00:78:5C:FD:FD:9C:FC:DE:44:E7
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer: /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial: 0199FEB4FF4A666833B076E0D90E2ED7D47F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number: 0877
Signing time: Sun 19 Oct 2025 23:01:38 +0000
Manifest this update: Sun 19 Oct 2025 23:01:38 +0000
Manifest next update: Mon 20 Oct 2025 23:01:38 +0000
Files and hashes: 1: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: 2fEDOtr4WKxL9qq/2XGeVU9Prf/ryup5bs2G9+VFjQo=)
2: yQOovkVgBPdQUYWIP8s5JEl_do0.roa (hash: teGG3Giw/XqatuTMOZRs13KC4GUJoaqGETNz76LPhGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:ff:4a:66:68:33:b0:76:e0:d9:0e:2e:d7:d4:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Validity
Not Before: Oct 19 23:01:38 2025 GMT
Not After : Oct 20 23:01:38 2025 GMT
Subject: CN=e23e19405e6a08883b1800785cfdfd9cfcde44e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:34:77:14:f2:86:8d:7b:71:d7:da:ec:5d:
c1:ed:81:7b:19:4b:b3:3a:c8:8d:55:ac:d4:5e:13:
eb:eb:a7:57:9f:10:48:4c:63:10:2c:2d:c3:13:a0:
71:44:2b:bb:a0:74:a9:99:d4:29:99:0b:ed:c2:56:
c3:d8:45:30:45:63:7c:6b:5c:7a:b0:a8:ed:bf:a3:
a8:d1:b8:ed:bc:25:5c:b5:42:fe:94:b6:2f:12:55:
ec:8f:c6:e3:df:89:00:2d:f4:ea:3b:d5:e0:8e:0f:
66:fa:44:e6:99:29:3c:ac:da:c8:51:05:ac:be:fd:
d3:58:1e:a9:88:f4:a8:a7:c5:1c:10:78:d2:c6:e9:
07:21:f2:90:6e:fb:af:e0:5f:7a:f2:00:a0:2c:3e:
7a:97:3e:9b:9c:24:6c:7a:e0:da:e2:54:44:41:48:
2a:6e:f7:61:b8:d5:2a:cf:ac:de:44:20:2d:fa:08:
45:b2:cd:4c:c6:e5:f6:f6:ee:20:aa:3d:7c:c1:79:
9f:4a:2b:fa:15:ad:a2:25:86:1c:7a:27:1e:d9:64:
8d:1b:2e:ed:d8:ed:fd:db:3b:c1:57:77:05:22:9b:
ae:99:4e:a5:42:69:73:b6:c0:05:a7:54:e8:d4:4f:
39:20:b3:9d:e6:56:f9:6b:02:06:68:ee:b1:7b:8a:
50:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3E:19:40:5E:6A:08:88:3B:18:00:78:5C:FD:FD:9C:FC:DE:44:E7
X509v3 Authority Key Identifier:
keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:63:fc:74:d0:17:b6:59:c0:d2:15:61:ce:a4:c3:57:a3:0e:
be:22:39:94:d2:9c:1d:95:b4:a9:5e:29:81:eb:fc:1a:f4:16:
9d:b3:24:64:d0:61:7f:78:48:7e:45:68:08:e1:79:87:40:3e:
24:4d:e1:fc:3f:f9:de:15:fa:5c:ea:60:de:49:cb:8c:4d:e6:
04:dc:fc:26:af:24:6a:b6:4d:46:8c:7b:e4:d9:24:c4:73:e5:
d7:ba:ee:10:e5:1a:c5:f1:1b:3f:cf:05:24:e5:f1:1c:4c:79:
8e:91:fa:71:dc:c4:b8:ac:22:32:b0:f1:73:54:3d:52:e1:3a:
1d:e6:94:23:69:5e:09:9f:e9:bd:06:d2:28:7a:05:09:bf:54:
28:71:94:03:5e:71:93:92:5d:bd:dd:59:74:83:2f:fa:39:31:
29:8d:b8:1c:96:8e:82:86:6b:1b:24:a2:9f:23:ee:02:74:c0:
1f:42:69:c0:83:84:85:54:f5:70:48:a6:5a:8d:40:f4:6f:78:
80:74:ec:74:b7:f4:72:41:cc:31:9f:2c:24:df:56:0f:e6:6c:
e8:86:82:5b:f9:e7:b4:f0:d8:9f:fb:17:84:82:d1:66:38:56:
48:c9:7d:b8:0c:24:9b:4f:b7:c2:c0:df:6f:fb:7d:2c:8c:55:
8a:18:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:29:20 2025 by rpki-client