Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
File: JtOCk_Zp20i20L0QNq3972vT03U.mft (raw, json)
Hash identifier: mGr20A4J5ugc76aeXvSM5/OlfiHFplbRkWSHiIORxh0=
Subject key identifier: B3:02:FD:E7:F0:AA:48:82:C9:E2:7C:51:F6:68:74:31:7A:BA:B1:BA
Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
Certificate issuer: /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Certificate serial: 0199FC8FC4F2BD6C9673AFF2317C46E02F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:44 +0000
Manifest this update: Sun 19 Oct 2025 13:01:44 +0000
Manifest next update: Mon 20 Oct 2025 13:01:44 +0000
Files and hashes: 1: B5YSYjeYr4Sz9pWORRaMRNqbLdo.roa (hash: fM1qwPfPzh4uHHiPxXWA1vmQEzz1cIIEo/UJMyl+wj4=)
2: JtOCk_Zp20i20L0QNq3972vT03U.crl (hash: 7dzo6VKrFNdgStvRkyZgx62eJjVuiIJRmX6aIBft1m4=)
3: MKzlSHA5umAqwVeARbcnAeXl1jc.roa (hash: 4blSnw7gE5YpxzhFPmztaW8X3UNRRgK5gE8sJ2PE3n4=)
4: cChfPDptNzofN1E4iRkTKdK8OBE.roa (hash: nK1tdIlf/7RX3LJe2ABcu++XCwANrpLFYC4ADhoObCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c4:f2:bd:6c:96:73:af:f2:31:7c:46:e0:2f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Validity
Not Before: Oct 19 13:01:44 2025 GMT
Not After : Oct 20 13:01:44 2025 GMT
Subject: CN=b302fde7f0aa4882c9e27c51f66874317abab1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:47:77:e3:8d:a5:23:cd:90:c8:29:87:71:6c:
d8:2a:d5:cf:51:fa:ac:1c:1d:79:bc:5b:2b:f9:e6:
e5:04:34:38:1b:cb:be:b2:e6:bf:46:5c:3d:60:72:
2a:50:85:20:91:16:2c:0b:c5:2e:d3:18:1f:70:f2:
5c:94:e0:84:8c:01:9c:e2:85:5b:ff:db:83:82:66:
43:6c:0c:b9:0d:18:1f:a1:ec:af:c6:0a:20:df:86:
94:3d:4c:60:ba:d1:61:aa:d1:57:be:e6:3c:6a:ea:
b6:b0:1a:5c:91:1f:7d:69:b5:f8:ab:82:70:20:b3:
bb:ef:1b:68:93:ee:93:eb:3c:7a:19:78:c5:a8:0d:
00:e0:98:0f:a5:20:e9:ac:96:fa:ed:28:51:40:76:
7b:d2:cb:9d:da:11:3b:ed:24:a6:c3:81:61:64:26:
29:02:f1:88:be:0c:f3:58:11:f1:d1:a9:33:e3:04:
d5:32:b7:65:31:ba:8e:13:94:ad:12:87:14:2f:f0:
24:03:4c:b6:9c:bd:86:dc:ff:16:c6:76:97:ca:41:
ce:f4:d6:0b:75:fc:c9:55:27:da:7a:91:46:9c:45:
eb:64:42:29:4e:d2:0a:f6:f3:9e:7e:71:38:86:17:
f2:71:de:5b:27:5c:92:b9:c2:97:2e:d5:03:ac:61:
58:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:02:FD:E7:F0:AA:48:82:C9:E2:7C:51:F6:68:74:31:7A:BA:B1:BA
X509v3 Authority Key Identifier:
keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1c:87:27:6c:ca:fa:5c:ba:74:dc:5f:8e:72:04:15:2e:59:
eb:f3:dd:6b:6d:df:01:ac:1d:54:79:e2:06:31:44:72:16:ff:
87:77:e3:57:14:08:77:ef:08:a9:fb:d2:33:7a:9a:72:e4:00:
93:0e:c3:49:92:89:f9:d4:94:15:c5:47:b1:d0:82:c4:c7:05:
ad:d2:c2:c4:1b:b2:09:93:c6:24:a1:ce:68:be:85:6f:87:8c:
25:e8:1b:0b:48:e5:6c:32:10:50:8e:86:7e:19:90:2d:a3:4f:
af:ee:ed:af:1b:1d:e9:2e:af:73:04:8f:c9:23:4a:1a:91:ed:
c2:09:fc:83:1a:a7:68:62:39:b9:0a:90:7f:a3:53:5f:96:5c:
ae:66:a3:90:f5:0b:db:7f:33:0f:14:43:d4:14:32:b7:10:38:
f7:c5:86:52:9c:33:81:50:3a:cf:e0:c2:27:4b:92:5e:42:87:
12:13:a5:58:d5:5b:c8:fa:5a:52:5e:73:c6:29:e8:ae:bf:d4:
02:f8:10:50:bb:72:16:97:63:0c:b0:64:7f:7f:42:14:d5:93:
7e:84:0e:7e:5a:d7:d8:9f:77:d3:c3:d7:97:9f:2c:ba:7d:e3:
b6:c4:f8:64:df:94:03:01:70:1b:f4:58:8e:8f:fa:57:4a:be:
a1:0a:38:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:17 2025 by rpki-client