Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
File: jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft (raw, json)
Hash identifier: 2pdSdflgvLOzypAM6W8aD4J9bCm1S+zI0puCdpYYkMU=
Subject key identifier: 5B:5B:25:2F:81:F1:00:58:AD:67:A6:9B:B8:2B:65:69:A0:83:36:F1
Authority key identifier: 8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
Certificate issuer: /CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Certificate serial: 0199FD341C3131432D95E73605E3FEA2CBDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 16:01:14 +0000
Manifest this update: Sun 19 Oct 2025 16:01:14 +0000
Manifest next update: Mon 20 Oct 2025 16:01:14 +0000
Files and hashes: 1: jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl (hash: FJjXUOntrXBUMIjzOpivSL53cWIZ0DQnF4tgQjzcu1k=)
2: zomoxdAdOPcJkTkRQBtLj8THS7E.roa (hash: HywlERnXGDkjWEHTc4UIBFSfO9/yrJ9UtEQjc3ctIXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:1c:31:31:43:2d:95:e7:36:05:e3:fe:a2:cb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Validity
Not Before: Oct 19 16:01:14 2025 GMT
Not After : Oct 20 16:01:14 2025 GMT
Subject: CN=5b5b252f81f10058ad67a69bb82b6569a08336f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a6:9b:62:12:50:f0:51:84:b6:78:cf:21:ae:
09:ee:0e:92:3a:f1:a2:5f:69:2e:3f:ac:14:8c:d4:
fb:48:16:59:d5:91:cd:8d:f4:e5:ad:72:7e:73:d7:
67:34:c4:f8:9f:8a:45:2e:1e:f7:a9:40:23:6f:4a:
5c:91:68:32:61:06:77:b9:21:2e:c6:e1:e3:5a:12:
bc:4a:d0:42:48:5a:f7:7e:a3:76:ef:c4:4d:ad:5a:
a7:86:74:f3:bf:56:2c:2b:3c:9f:2a:82:7b:b7:8e:
48:59:6f:21:b3:be:49:d8:17:d3:ce:e8:26:d3:c0:
22:81:9f:be:7c:49:e3:65:65:2e:65:33:4f:35:24:
6a:b1:78:e5:55:c4:cf:ec:8d:f7:d7:fd:2a:2a:e0:
26:37:5e:25:79:c0:0c:3b:10:4a:f4:98:54:78:28:
d8:1c:3b:da:4e:61:b7:9d:b3:7f:42:25:20:b9:1a:
af:8f:4a:51:7b:4b:b3:f5:9a:bb:df:a5:12:b8:66:
fe:b2:7b:4a:6c:1e:69:99:45:cd:18:91:5f:63:92:
32:02:0d:a6:af:9e:9d:d4:de:f1:db:7b:2e:84:18:
35:ae:b5:52:08:87:cb:51:1e:f2:29:14:2a:e5:53:
3a:bf:d9:25:18:fb:62:f1:7d:7f:b0:f0:b8:c6:98:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5B:25:2F:81:F1:00:58:AD:67:A6:9B:B8:2B:65:69:A0:83:36:F1
X509v3 Authority Key Identifier:
keyid:8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:b5:2e:71:48:18:2b:27:9e:0e:83:a2:b6:71:7c:11:a2:7f:
49:15:7f:3c:4c:00:32:c0:3b:e6:d4:2e:1d:64:85:d1:45:a5:
9a:ba:d9:64:6b:94:63:6f:9f:36:9a:7f:cf:64:6b:c9:94:59:
b6:9b:ba:b2:c4:92:78:a3:10:75:84:cc:31:02:98:be:be:48:
12:8f:d4:bc:78:34:df:ab:12:cd:c4:f8:52:e7:48:9d:b4:37:
c7:a4:76:cc:7a:5b:f9:12:b8:36:c0:9d:39:cd:50:89:5a:5e:
18:8a:af:5c:c4:d8:35:ab:cf:8c:2a:ec:96:85:49:69:15:82:
48:a7:1d:41:17:e2:25:ee:f2:1a:ae:73:b0:7f:52:b1:f8:36:
3d:05:85:18:11:1c:b4:25:ef:db:31:11:5e:70:cd:dd:1c:aa:
8d:cb:1e:d9:f2:30:d6:f1:36:74:72:14:f6:c7:dc:3c:23:12:
41:be:4c:c7:f8:4e:7e:68:25:d8:93:36:c3:c6:af:12:32:60:
e8:ae:36:bc:91:3e:a0:0e:83:c7:51:0e:3c:26:3e:fd:e6:c9:
27:99:35:ff:5b:43:19:62:5b:6e:ff:49:66:86:9a:26:5c:e3:
a3:b4:02:2f:93:f9:48:69:02:c7:db:d3:f7:2a:8d:b5:35:35:
80:94:da:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:29 2025 by rpki-client