Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File: JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier: L4H1JU6pKrMXxCGEUC0YUJd/ONaqeyS4Q17jn+Bm/qQ=
Subject key identifier: AB:8F:D7:F8:C0:50:90:BF:B1:A6:91:16:64:21:E7:A9:2D:29:A3:78
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 0199FBEAC57A9362C86B634642BAFB1428E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number: 0D35
Signing time: Sun 19 Oct 2025 10:01:31 +0000
Manifest this update: Sun 19 Oct 2025 10:01:31 +0000
Manifest next update: Mon 20 Oct 2025 10:01:31 +0000
Files and hashes: 1: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: o0ghyaKS7YMcg2rct4AvmZcDGTtFG+wciIXyPimYjyw=)
2: T2qZTTFWVSNBNeXqRrv5AJne1B0.roa (hash: EWp0bMjXe6eEnMu430F2WwTP+lMlXpj/M+oOz9ex/1k=)
3: poXwpvkvRg633LYFGk-iWzlj3Rk.roa (hash: W5a6ZZcfOFTcK7kPUq/ojL8WGj2xf0i5VWR/Jf3A3hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c5:7a:93:62:c8:6b:63:46:42:ba:fb:14:28:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Oct 19 10:01:31 2025 GMT
Not After : Oct 20 10:01:31 2025 GMT
Subject: CN=ab8fd7f8c05090bfb1a691166421e7a92d29a378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:9b:8a:52:ed:6d:77:fc:3c:f0:24:2f:11:
7c:30:b7:1f:49:0c:ff:b3:30:67:18:56:26:6d:63:
a7:e4:4e:5c:03:c1:a2:eb:f8:f8:a8:60:32:2f:55:
87:50:5c:36:4d:21:98:b2:87:75:ef:f0:07:c6:2a:
0e:76:51:da:04:83:2b:db:34:4f:c1:a3:68:e4:f2:
1a:7c:88:62:05:e2:a3:36:48:44:76:bd:6a:34:3e:
15:38:03:30:be:1c:61:86:3a:60:2e:88:0f:a8:79:
a3:a6:89:a5:78:a1:c5:e6:36:34:86:d5:a3:07:60:
45:df:dd:74:81:11:ff:09:38:d2:d1:e2:cf:14:15:
6f:86:99:6c:9a:ba:5e:5c:12:88:69:02:c0:e5:2c:
fb:6e:31:72:1b:23:d8:b4:1a:f9:4e:6b:4a:d5:be:
5e:f9:46:65:2b:84:4a:d6:16:78:f2:83:48:2c:fb:
6d:e1:ea:07:e7:fb:7c:9f:ed:d7:6f:d6:85:b4:c5:
90:f0:bf:ed:b7:85:58:aa:05:6e:75:94:ff:03:72:
98:eb:3e:43:13:9f:97:73:4c:79:e2:c5:0f:c6:0b:
75:db:8f:00:bb:d9:6e:8a:71:d2:23:cb:e1:1c:2b:
2d:e2:0e:43:d2:a5:44:b0:a6:1f:df:ca:88:42:38:
78:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8F:D7:F8:C0:50:90:BF:B1:A6:91:16:64:21:E7:A9:2D:29:A3:78
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:54:8b:25:5f:39:4b:14:39:83:f8:7d:75:84:a0:08:3d:26:
21:5d:e3:bb:bc:f8:f0:93:56:6b:40:94:54:a5:2a:f5:08:07:
d3:35:91:43:c0:41:f3:58:88:de:f4:1b:2d:56:ec:ce:06:95:
b4:46:c5:c1:05:d9:9d:fd:6d:3c:bc:fa:94:b2:02:20:3e:71:
ba:f1:e2:29:aa:d2:3d:9f:0c:cb:7c:ab:1e:52:d2:21:9b:1b:
12:67:f4:37:28:ab:cb:57:7f:e6:4a:b8:36:f0:e5:3c:96:e3:
96:ee:dc:d9:ea:09:71:33:ff:0b:06:09:a4:25:7f:c5:4a:81:
78:e3:90:07:2f:03:69:74:46:2d:f0:a6:08:c8:4e:8c:f8:cc:
ab:29:40:1b:18:93:10:0c:0f:73:ae:cd:f7:ed:7f:89:6f:61:
2b:02:08:c8:a9:31:59:70:9e:b7:39:83:9f:b3:bf:c0:a5:be:
43:6a:40:62:fa:4f:ea:0d:19:42:2e:23:e4:45:a3:60:1b:7c:
4a:0d:45:1e:9f:8d:f7:ec:aa:9d:ba:4e:62:05:7f:02:e5:16:
1d:a7:17:68:75:17:e8:57:d8:2a:bc:eb:a0:f8:8b:f0:62:16:
c0:07:8d:1e:a5:f3:f8:95:5f:2c:76:0f:87:82:75:2b:a8:05:
60:37:74:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:58 2025 by rpki-client