Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: a79mIz4GpO4jr6ZsLP6Z9GLci2mlmFdHG1BP30ypXgw=
Subject key identifier: F2:5B:A9:B8:4F:7B:82:28:6A:A9:55:17:BD:82:02:6E:22:30:57:23
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 0199FD3435E0D8C77A6BF15A70040347A19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 089D
Signing time: Sun 19 Oct 2025 16:01:21 +0000
Manifest this update: Sun 19 Oct 2025 16:01:21 +0000
Manifest next update: Mon 20 Oct 2025 16:01:21 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: 62h8SVHKxh5hODpSaipoga6aBHfKsbKADmRh7QtCVaE=)
2: tH5X1sIrBGaWrxtJcDhQJ2X9uHg.roa (hash: DV2Ywdf2IF4IJkXNNJ6gs2p5s2GMK9q52zFH8lpr0iI=)
3: wpydopt6VUah6RQMZrzjsU6WoPc.roa (hash: cp20Yibn6t1V4VomO6+maPrzeM92DrtR/BD0ISnTpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:35:e0:d8:c7:7a:6b:f1:5a:70:04:03:47:a1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Oct 19 16:01:21 2025 GMT
Not After : Oct 20 16:01:21 2025 GMT
Subject: CN=f25ba9b84f7b82286aa95517bd82026e22305723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:e9:7b:91:4d:04:0a:52:62:b1:1e:75:d7:
43:c5:74:d7:dd:8a:63:5a:f2:2b:53:ea:5b:bc:49:
b9:9c:78:96:b1:0d:30:70:66:32:d2:49:9b:ce:38:
b9:b5:f8:d9:af:c5:82:57:d1:1b:c5:3e:a9:98:84:
d6:57:fd:e6:15:f5:3e:dc:3e:94:df:05:4f:16:a2:
79:1c:dd:45:5e:71:73:39:74:e4:af:ee:77:52:2b:
37:1b:30:96:c2:7f:ad:b4:f2:09:4d:f4:72:7b:45:
4e:c9:70:d2:29:76:1f:20:bc:ef:47:16:f0:3e:e2:
64:f7:64:de:ab:bd:4d:f3:04:d5:92:12:59:bb:33:
ec:ad:ad:3f:aa:24:7c:75:20:f6:32:5e:c9:02:4d:
77:37:6a:b5:11:d8:82:ca:e4:35:b9:be:91:ed:b0:
7a:3e:ce:22:7c:05:a8:fe:cc:48:05:32:86:fe:ca:
31:e3:f9:79:d4:20:bb:42:25:34:43:d1:cd:40:ff:
5f:63:5b:ff:21:2e:b7:f4:d6:e3:d7:13:22:2b:a9:
73:a8:5c:d6:82:ea:9b:e3:0b:98:06:7d:d4:db:f8:
b5:54:f7:51:bf:41:57:7d:84:7b:37:d9:e1:e4:ff:
64:be:16:dd:3a:33:73:a8:18:f2:21:31:6c:8e:78:
2c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:5B:A9:B8:4F:7B:82:28:6A:A9:55:17:BD:82:02:6E:22:30:57:23
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:de:c7:07:6c:eb:86:d0:bd:99:8f:ad:41:e6:1b:0b:a6:c6:
94:fe:d5:c1:af:9f:7d:5a:ae:d8:ec:8a:17:9b:2b:54:5d:76:
f7:3e:59:35:08:f5:a1:30:78:c9:3f:59:17:e3:89:65:52:ba:
a3:6a:15:8d:2b:a6:ec:d5:ce:41:cc:40:47:b5:03:f2:ba:c5:
9d:d8:0a:0c:d5:db:34:f1:f5:dc:c8:ed:e9:f2:f7:1a:fc:d2:
6c:97:9f:87:c4:59:fd:f7:72:98:15:31:e4:fd:8d:40:1e:77:
61:c8:18:fa:88:a5:0b:ab:0a:33:32:be:80:a2:99:25:39:e8:
ac:37:83:11:eb:d8:a6:84:36:60:dc:59:f0:6f:59:c4:61:c6:
37:33:65:cd:23:bb:13:ca:33:f7:2d:9c:7b:91:f0:3c:7d:bc:
00:51:bf:3d:01:0c:e2:8d:ca:4d:bf:b8:d1:ad:8b:ac:a8:7d:
af:1c:cd:7f:a9:5a:72:58:3d:02:3f:af:fe:ce:2b:f3:88:79:
9f:a9:58:1c:25:42:55:f2:8a:6b:ff:b7:5f:d3:33:7a:66:db:
42:1b:69:1a:c7:93:51:2c:be:8d:9c:fa:01:30:3f:cd:b3:ea:
c8:ee:7c:85:08:22:b3:c1:d0:36:a3:73:f6:9b:54:74:70:b7:
4b:3c:16:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:11 2025 by rpki-client