Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier: bYgYBJut5wNqf+XkM9uAy6tERp2aSCE8TwC4i5KdBaM=
Subject key identifier: 5D:42:01:3E:43:D9:73:17:34:BB:10:CE:C5:BD:5A:DF:B1:DE:75:EE
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial: 0199FC58B9F8BB957BAA8566E1E24C275BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number: 07BB
Signing time: Sun 19 Oct 2025 12:01:37 +0000
Manifest this update: Sun 19 Oct 2025 12:01:37 +0000
Manifest next update: Mon 20 Oct 2025 12:01:37 +0000
Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: GqsukWNI63jJlu60nXZJrlgIJAr0xWfKkyVCz9VL2NI=)
2: P05t3kiYPDkZIteTxzHkdWLEeeU.roa (hash: BIrJT8z8EjrhQoOfb8QVBhdG6eDY7ydaRNIxS8nhYAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b9:f8:bb:95:7b:aa:85:66:e1:e2:4c:27:5b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
Validity
Not Before: Oct 19 12:01:37 2025 GMT
Not After : Oct 20 12:01:37 2025 GMT
Subject: CN=5d42013e43d9731734bb10cec5bd5adfb1de75ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:80:a7:62:36:9d:ca:2d:b0:0a:db:9a:03:
d9:2d:1c:1b:d2:9b:9d:b7:b5:d5:7a:fa:9f:ed:76:
ff:33:73:50:d7:d0:64:cb:c6:d0:b4:6b:d6:2c:42:
41:b0:83:6b:05:51:f7:4c:a1:72:e0:68:ba:8a:6e:
ad:64:71:2e:41:de:ea:28:11:5b:b2:84:b2:d4:05:
62:b1:65:26:f5:74:40:7a:8b:0d:b7:3f:27:88:b5:
42:1a:11:71:d9:4a:69:35:3e:ce:39:79:79:46:5c:
c5:1f:dc:7f:39:a7:1a:dc:44:1c:09:fe:45:63:8a:
ff:e8:46:c3:a8:49:c7:c4:7c:e0:f3:dd:cc:a7:79:
a1:58:7a:0d:68:87:3c:dd:6b:9f:1b:af:e1:0c:38:
ad:5a:e0:cb:de:2e:00:26:1d:26:60:d7:e0:3a:e5:
05:e4:20:29:14:77:45:d9:91:1b:cc:64:d4:09:fc:
8f:51:30:96:2d:bc:ca:0d:41:d6:e4:9a:59:0a:86:
e8:77:b5:b2:60:c1:93:e5:9c:97:62:42:1f:f5:e5:
c0:a3:18:2b:39:7a:9f:36:5b:29:d0:a2:07:88:ea:
41:96:a0:0e:9d:ac:02:fb:b0:fd:40:39:95:46:2d:
05:88:74:ed:3b:2b:16:e5:65:95:83:dc:0b:f7:b5:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:42:01:3E:43:D9:73:17:34:BB:10:CE:C5:BD:5A:DF:B1:DE:75:EE
X509v3 Authority Key Identifier:
keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:be:40:7d:3a:06:69:6c:e6:1b:3b:54:0c:8a:a8:66:f2:9b:
a1:28:25:99:f7:c5:00:40:f0:46:c0:33:38:f9:7b:3a:dd:6d:
89:55:c6:24:8a:9e:52:17:c9:61:b3:1b:a5:4e:6b:cd:c2:78:
8c:af:7c:39:4e:64:d4:6a:b9:66:d1:cd:b9:6b:e8:db:62:56:
d1:9f:db:57:07:ed:27:7f:d0:e3:76:db:fd:38:de:48:e5:cb:
fe:f4:9c:7e:fe:75:93:b9:70:a9:fe:fb:3d:9f:c4:4b:c9:38:
3e:d7:cd:f4:bb:47:4e:8c:1a:7d:7f:04:1d:ac:91:98:04:6f:
2c:5e:0f:c3:af:d4:51:b4:36:b4:7a:a9:76:4e:55:59:e6:16:
c3:f8:d2:d5:0e:41:08:05:c2:e6:7d:4c:cd:dc:b2:65:c7:08:
da:38:6f:33:16:a1:7b:e9:21:53:bc:77:da:0b:b8:0d:92:d2:
df:1b:e7:e1:22:11:8c:a4:e0:5e:b1:30:88:df:0a:08:63:c9:
ce:2b:df:b0:7d:c9:1e:c6:a5:be:55:0b:6d:c3:b1:ae:97:a8:
a8:d7:f4:c0:1e:fe:eb:c0:33:4e:ad:90:ca:d7:cd:9a:73:4e:
49:4c:03:4e:7f:af:75:f0:a3:42:95:69:21:84:b4:e9:01:5c:
c7:4e:ce:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:58 2025 by rpki-client