Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
File: JVnpvh-9HmkJoL6akLOA-CT6saU.mft (raw, json)
Hash identifier: LyYksfwwSaw9n8rK81Z6AxqHrFPXuv3tHEDz1dI0RUg=
Subject key identifier: E6:EB:DC:86:52:01:B8:4A:E1:8B:14:5B:3D:5D:FE:5E:77:66:E1:03
Authority key identifier: 25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
Certificate issuer: /CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Certificate serial: 0199FC58DDAEE661356985897DCC2173D2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:46 +0000
Manifest this update: Sun 19 Oct 2025 12:01:46 +0000
Manifest next update: Mon 20 Oct 2025 12:01:46 +0000
Files and hashes: 1: 04EXo_aa8R-wCVS1fC9fkSKHbQk.roa (hash: D39mfhIOXghwegUx11UFZTXpnVcMRyxswgHcx5Y2hRA=)
2: BlZm0sYSiIU1jZrNYK3L2v3x4VM.roa (hash: czqqE6msCgy8fH0iDys1D75RKoCAAvAyOHtekUZuaxc=)
3: JVnpvh-9HmkJoL6akLOA-CT6saU.crl (hash: n4wfAZZPdHsUVEpKHOOk8jWbl824PnTkQMK9TA7xEQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:dd:ae:e6:61:35:69:85:89:7d:cc:21:73:d2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2559e9be1fbd1e6909a0be9a90b380f824fab1a5
Validity
Not Before: Oct 19 12:01:46 2025 GMT
Not After : Oct 20 12:01:46 2025 GMT
Subject: CN=e6ebdc865201b84ae18b145b3d5dfe5e7766e103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1e:ad:ac:cc:6b:56:b5:9f:ed:4e:77:b8:6d:
77:c4:92:4d:f0:d0:4a:1f:51:a4:e2:54:c7:ce:7f:
da:60:04:2a:68:33:42:da:7f:0f:82:2d:98:09:0c:
b3:07:9b:81:c4:2a:de:b1:65:8d:76:d3:8d:7b:03:
10:05:97:a7:ba:8f:80:8d:ea:8f:e5:86:a6:d0:62:
a0:c2:2b:30:ea:1d:db:db:13:c7:1c:fd:09:1c:c8:
db:ba:03:f7:7d:3a:b6:b5:81:d9:45:31:49:3a:e4:
2f:3f:cc:27:c5:3a:d5:51:c4:c4:2c:a3:44:34:78:
13:d8:8a:4c:90:a4:7d:f0:3f:2b:13:31:cf:07:77:
f4:94:02:0e:17:27:37:ce:8f:13:c8:5e:d0:f2:71:
b1:8c:83:95:85:1e:7a:7e:b8:40:5c:2d:5c:71:04:
ad:45:a8:a2:42:92:86:f3:79:3c:89:c0:8d:4c:21:
86:f5:24:b1:fa:0d:a2:52:a3:52:9b:49:15:cf:00:
9c:8f:f4:67:79:ca:66:ef:98:f0:d8:7a:06:fc:47:
54:cb:4b:87:2a:68:38:87:42:11:39:6a:8d:43:cb:
e6:09:b3:3b:15:69:3b:81:42:a1:9f:d7:17:f7:45:
b5:cd:ba:f4:ac:b8:68:da:e3:20:7f:1f:af:1d:5e:
5c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EB:DC:86:52:01:B8:4A:E1:8B:14:5B:3D:5D:FE:5E:77:66:E1:03
X509v3 Authority Key Identifier:
keyid:25:59:E9:BE:1F:BD:1E:69:09:A0:BE:9A:90:B3:80:F8:24:FA:B1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVnpvh-9HmkJoL6akLOA-CT6saU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5edd6f-2c65-447d-bcad-4aaada65d71c/1/JVnpvh-9HmkJoL6akLOA-CT6saU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:1e:37:ee:a5:9e:81:09:37:22:11:52:97:dc:14:83:fb:8c:
b9:b2:8f:41:ba:2d:76:51:4d:9b:a0:c9:96:fb:e2:a6:ef:b2:
db:17:aa:36:e7:f0:db:e2:50:00:d0:0a:bf:32:22:09:74:03:
de:5d:98:70:31:05:ce:d7:8c:20:23:96:fb:b8:e9:9a:8c:3e:
bf:2b:c6:d6:f9:72:a7:2e:40:33:90:54:29:1c:d3:f9:26:0c:
78:7d:8e:7e:c1:ca:13:78:17:dd:17:f9:64:bf:89:0c:1a:fb:
45:79:9a:16:33:37:a4:ac:ad:64:d2:e8:0a:7a:c1:28:fe:64:
8a:a9:8e:d6:67:db:17:d4:3c:6f:27:d7:c8:26:7d:4c:6a:63:
d3:9e:94:37:82:f3:b5:cf:bd:b5:bd:7c:48:b9:41:9f:66:8f:
e9:4b:61:a1:38:8e:89:87:84:5f:e7:0d:4a:a3:f6:e7:53:4e:
f0:ad:8b:19:f6:91:70:39:00:7c:93:81:00:c6:90:c6:1d:84:
b4:1d:4c:e3:7f:62:df:69:02:35:65:c1:e3:1a:74:75:1e:67:
a3:a6:0c:b0:89:6b:e2:ef:0f:b8:7a:2c:78:62:ea:9f:50:f3:
22:74:8d:80:e3:ac:3e:fe:d3:5a:d2:38:31:14:28:1b:26:44:
e3:41:c8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:06 2025 by rpki-client