Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: QAZYYAf+VLUFl7PgA/ngnf4xlny+EvKifo6lknI9NmY=
Subject key identifier: 49:BC:20:2B:D7:78:E7:EC:6F:37:B2:35:6F:68:C8:2F:BA:A9:5F:69
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 019A00DA38CE81212BBD8E406B7FFE1E19B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 0E85
Signing time: Mon 20 Oct 2025 09:01:32 +0000
Manifest this update: Mon 20 Oct 2025 09:01:32 +0000
Manifest next update: Tue 21 Oct 2025 09:01:32 +0000
Files and hashes: 1: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (hash: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=)
2: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: ftoo2F+O532EsATz2SGzi///tQcF9XZBp5IOaAdKAZc=)
3: _8hSLgr4JdqEI1Dpn8hoZhNP1qQ.roa (hash: GqMn4/1oRrYEDz1sgi+iXh7bgMGiwNGyyfe2qMxH+7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:38:ce:81:21:2b:bd:8e:40:6b:7f:fe:1e:19:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Oct 20 09:01:32 2025 GMT
Not After : Oct 21 09:01:32 2025 GMT
Subject: CN=49bc202bd778e7ec6f37b2356f68c82fbaa95f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:f5:6f:96:0a:6f:5b:ac:01:5e:84:a2:2d:
67:e7:d4:40:36:dd:6f:2e:4d:a9:7a:d4:d4:d0:84:
33:86:a0:6f:73:6f:01:e0:a7:6d:84:f0:e7:52:84:
bd:6f:c6:ce:c4:cc:f0:de:8d:07:50:f7:ab:75:cc:
0c:88:87:11:3d:cc:b9:f1:17:3d:f1:a8:ab:57:dd:
74:6a:4e:91:ff:71:10:9f:38:eb:32:e9:b9:43:16:
4f:be:67:22:5d:ee:5c:ee:0f:a1:c1:94:db:e2:04:
c5:6b:c3:1d:74:ca:42:ca:f5:69:21:c4:fb:48:d9:
ab:40:c8:69:68:2f:16:89:c6:df:24:04:59:77:d6:
b2:58:5a:24:ed:c2:e5:78:ae:2b:24:1d:5d:ef:20:
07:0d:aa:55:b0:be:8e:1c:ad:64:3b:1b:4c:7b:2e:
f5:60:d7:c6:e8:b9:e1:5e:9a:d8:23:c9:39:54:a0:
f4:af:e8:f8:ad:12:0b:87:09:9b:9c:9e:84:e2:69:
e4:52:75:f5:e2:47:f3:ba:13:68:c8:05:fb:52:bb:
a9:ab:1e:04:08:eb:26:57:ef:d1:1f:44:c1:a7:ca:
9a:78:86:81:e0:85:b9:1e:6b:7d:ad:bd:a7:24:77:
cc:b2:3d:07:ca:6c:a8:5d:1e:2d:40:ba:f5:12:8f:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BC:20:2B:D7:78:E7:EC:6F:37:B2:35:6F:68:C8:2F:BA:A9:5F:69
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:70:34:5a:9c:11:52:67:10:34:b3:39:85:d1:e1:a5:97:91:
65:74:da:d6:bb:21:49:29:06:7a:5e:10:7d:19:37:46:ad:17:
12:d1:ca:0c:90:bd:ef:fe:eb:d1:4e:4e:88:f7:3f:56:d3:86:
6e:23:b6:aa:d3:52:17:5b:0f:d8:76:62:eb:51:c0:e3:2c:78:
fd:8f:17:5d:cf:cd:f6:4a:69:65:9b:03:d4:b5:f3:c7:26:28:
1f:1c:56:0a:1a:47:10:be:c8:4b:ab:90:ce:39:fb:b1:50:4b:
1c:73:81:bf:70:da:67:a1:8b:c9:ae:f4:89:49:ba:69:87:e9:
0b:6a:c0:73:a4:55:50:07:16:96:f6:52:43:44:5a:7c:0e:7b:
97:67:17:02:b2:2f:5e:c8:df:e8:99:d6:fd:7f:aa:d7:32:6d:
c4:34:69:76:52:3e:8a:3b:49:c1:fd:b4:1c:c1:44:b0:12:58:
90:c0:9e:1a:73:bd:c8:39:cc:1f:e5:bc:7b:3e:ac:ec:1d:53:
0b:54:37:d7:7a:84:bb:d7:ca:c4:48:b3:c3:c4:aa:2b:e4:ae:
46:0f:60:8b:b6:35:5f:58:9c:86:89:4d:02:29:19:52:68:80:
ee:bb:8e:ef:4d:4d:a5:c3:ac:1f:29:5a:50:f6:a5:ce:fb:c4:
44:30:c8:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoA2jjOgSErvY5Aa3/+HhmyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjY2MGE2MTE5ODBjNjgyNzMxMzllMzJhZmZiNzRiNDU0
YTlkMzIwHhcNMjUxMDIwMDkwMTMyWhcNMjUxMDIxMDkwMTMyWjAzMTEwLwYDVQQD
Eyg0OWJjMjAyYmQ3NzhlN2VjNmYzN2IyMzU2ZjY4YzgyZmJhYTk1ZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEv1b5YKb1usAV6Eoi1n59RANt1v
Lk2petTU0IQzhqBvc28B4KdthPDnUoS9b8bOxMzw3o0HUPerdcwMiIcRPcy58Rc9
8airV910ak6R/3EQnzjrMum5QxZPvmciXe5c7g+hwZTb4gTFa8MddMpCyvVpIcT7
SNmrQMhpaC8WicbfJARZd9ayWFok7cLleK4rJB1d7yAHDapVsL6OHK1kOxtMey71
YNfG6LnhXprYI8k5VKD0r+j4rRILhwmbnJ6E4mnkUnX14kfzuhNoyAX7Urupqx4E
COsmV+/RH0TBp8qaeIaB4IW5Hmt9rb2nJHfMsj0HymyoXR4tQLr1Eo+PFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEm8ICvXeOfsbzeyNW9oyC+6qV9pMB8GA1UdIwQY
MBaAFCS2YKYRmAxoJzE54yr/t0tFSp0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYt
NzA1MTk3NTA3YTU5LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYtNzA1MTk3NTA3YTU5
LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3A0WpwR
UmcQNLM5hdHhpZeRZXTa1rshSSkGel4QfRk3Rq0XEtHKDJC97/7r0U5OiPc/VtOG
biO2qtNSF1sP2HZi61HA4yx4/Y8XXc/N9kppZZsD1LXzxyYoHxxWChpHEL7IS6uQ
zjn7sVBLHHOBv3DaZ6GLya70iUm6aYfpC2rAc6RVUAcWlvZSQ0RafA57l2cXArIv
Xsjf6JnW/X+q1zJtxDRpdlI+ijtJwf20HMFEsBJYkMCeGnO9yDnMH+W8ez6s7B1T
C1Q313qEu9fKxEizw8SqK+SuRg9gi7Y1X1icholNAikZUmiA7ruO701NpcOsHyla
UPalzvvERDDISw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:07 2025 by rpki-client