Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
File: JGDLdNAZgkw0siOu1McJqFeyxgY.mft (raw, json)
Hash identifier: yGx+ZwLeYBeLGKgKBXecc58ySLBv123saoZ6Az9dnU4=
Subject key identifier: 23:F9:5E:AA:F6:78:97:2A:0C:9D:1B:72:93:E6:59:56:38:DD:09:EC
Authority key identifier: 24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
Certificate issuer: /CN=2460cb74d019824c34b223aed4c709a857b2c606
Certificate serial: 019A02C769A8322CDFDDDF88CF1E96565EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
Manifest number: 0563
Signing time: Mon 20 Oct 2025 18:00:14 +0000
Manifest this update: Mon 20 Oct 2025 18:00:14 +0000
Manifest next update: Tue 21 Oct 2025 18:00:14 +0000
Files and hashes: 1: JGDLdNAZgkw0siOu1McJqFeyxgY.crl (hash: 0TdyhmBIP9dOnB0sMLJ5uYciIpfIi3lTmRc6qioXohY=)
2: Po9Kd95ItrzwaoslHVQ8GkKDEsg.roa (hash: TRai4O+tEgZgd6yxFrk6Ul1AehRTWxDzlup3pEvU2bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 18:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:c7:69:a8:32:2c:df:dd:df:88:cf:1e:96:56:5e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2460cb74d019824c34b223aed4c709a857b2c606
Validity
Not Before: Oct 20 18:00:14 2025 GMT
Not After : Oct 21 18:00:14 2025 GMT
Subject: CN=23f95eaaf678972a0c9d1b7293e6595638dd09ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bd:cd:fe:b0:58:c4:64:b0:7e:f6:21:22:9e:
44:f8:94:80:4b:bc:3c:70:7d:33:01:d3:2e:74:60:
79:44:ce:cd:f2:a5:3c:ba:19:72:a1:7d:59:14:d0:
23:16:1c:2f:f6:af:63:a7:20:a8:57:9d:ed:7e:ce:
86:1b:e9:be:52:85:8b:4d:36:01:84:62:c8:63:80:
02:2f:e4:39:d5:a2:d4:89:19:94:14:a4:f4:f9:c2:
01:05:c9:7c:bf:32:d9:11:44:ff:c4:39:0a:a8:e8:
7e:1b:49:a8:19:af:e3:bd:a4:a6:3c:8b:46:b7:07:
5a:1a:64:36:fe:3f:63:49:73:59:df:e6:cc:4c:df:
26:65:d3:1f:a4:05:3d:20:a6:25:09:bf:64:16:57:
b1:9c:6b:89:da:63:34:85:36:ad:0e:15:3e:ba:df:
2e:45:5f:d6:cc:6a:73:d0:53:83:6e:27:e5:b6:68:
c1:0d:3e:13:47:96:94:92:d1:ef:35:22:aa:f0:47:
29:53:ba:79:ba:58:08:fd:52:8f:30:73:a1:67:a2:
0d:e3:73:fd:dd:24:1e:ca:4b:ed:f5:71:dd:98:5b:
27:e5:5d:d7:c0:57:40:80:25:fe:30:d4:a4:fa:6e:
9d:9f:40:52:a2:b5:48:98:b5:6d:59:bc:04:16:e7:
ad:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F9:5E:AA:F6:78:97:2A:0C:9D:1B:72:93:E6:59:56:38:DD:09:EC
X509v3 Authority Key Identifier:
keyid:24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2e:7d:d3:3b:ea:10:7a:08:95:3a:de:83:95:b9:b5:72:03:
f9:1f:34:d4:cf:28:1f:01:ca:09:9d:f1:a5:92:f4:e0:7b:83:
aa:3e:2f:8c:02:55:df:f1:ce:28:0e:2e:09:c6:98:35:97:d7:
2a:41:74:03:99:57:e5:63:d9:b1:eb:7e:ae:4b:d7:9e:e4:91:
55:d2:64:c4:65:d0:c9:70:f9:54:f4:ce:78:92:68:5d:fd:da:
6f:f7:ae:a3:a4:0a:3a:3d:81:bf:c3:f9:24:a7:a0:c6:1e:72:
66:6d:b3:8b:78:e1:6e:fc:69:90:56:47:3f:5a:00:f8:9a:7a:
c5:65:dd:0e:77:84:86:82:49:c1:39:3a:5e:68:22:2e:b9:7f:
86:57:ff:3b:db:7e:8b:bb:6c:c4:cc:70:dc:b6:f3:66:ca:f2:
ac:41:0d:9f:ab:14:2e:d1:49:3c:d5:d1:b9:51:0a:39:37:19:
59:83:fd:64:8a:06:66:a3:00:ff:e6:c0:8e:78:85:8f:8c:7d:
57:ee:47:3f:87:2f:ea:a4:f8:7f:ea:15:93:cd:87:1d:f6:79:
71:2b:1a:44:be:27:88:2c:73:30:50:be:46:fc:d5:e1:0d:a1:
a0:50:17:b6:8a:6f:b2:31:cc:85:0e:25:44:6f:10:13:85:32:
7e:01:12:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:00:30 2025 by rpki-client