Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: QkojpOYn7Mpm0NIwuV+igUxoctHCwLX7uUwNhkROf34=
Subject key identifier: F1:99:66:CA:35:3C:44:27:E7:16:04:35:5F:29:0E:DF:95:D0:9E:05
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 0199FCC66FEBC5E9B753CB1B7248BCC627C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 14:01:26 +0000
Manifest this update: Sun 19 Oct 2025 14:01:26 +0000
Manifest next update: Mon 20 Oct 2025 14:01:26 +0000
Files and hashes: 1: Cg0yCK2kQVd5LZZHHCdBRelfy-8.roa (hash: EJ5qFjEdSIaKu0rEkfVQQqMjYA83tlJGweW9Y6wELDM=)
2: DOAjS6N6DDMCT5Gs48jEEQ8kKdo.roa (hash: RxOSt+nS2Pi/oAjRbiU1f0I2BGNusR2WMtoxS2juhtk=)
3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: aHUjnKNJyrOC9Z2yBm3pOyzb3AhIL3oPU78DrB2o8oQ=)
4: NAFWH-6HZko-2jXV8t7oA0HzSIU.roa (hash: evlx0SvXozysnwaGLeRFiaf3O6MnrQAS3vJN/CS0+Og=)
5: ZDqkiej3KvbVcchBqYbs_m_58AA.roa (hash: WNRpgM2RfMTJF9WJxnTJzmUWmkHVlsXryqz1NtCqsaw=)
6: dtjkwOe--LCCK4SbfbTdSzg4V0w.roa (hash: DEavIckb2pS6VVqJFeMdsfbc6yjw9j8R9FNcBP297Fg=)
7: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (hash: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=)
8: pjBzn2Sy238yqyUOKntcgX57jHI.roa (hash: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:6f:eb:c5:e9:b7:53:cb:1b:72:48:bc:c6:27:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Oct 19 14:01:26 2025 GMT
Not After : Oct 20 14:01:26 2025 GMT
Subject: CN=f19966ca353c4427e71604355f290edf95d09e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:36:c5:de:74:6c:e3:34:a6:59:a7:f0:3a:4e:
58:5b:2a:44:fa:9c:1e:fc:98:ae:b6:f8:a1:84:52:
ac:01:bd:14:7b:78:58:12:01:96:1a:a1:8e:37:84:
d5:36:58:c8:c4:d1:d0:43:bc:a9:4e:d2:df:87:1a:
ee:d1:97:be:c9:9e:b8:e9:90:a0:9a:ed:98:91:70:
75:e8:30:2e:8f:b6:fc:cd:c4:03:72:47:09:23:8d:
5f:19:9f:72:93:5e:43:8e:b5:93:be:fa:ca:cf:79:
3d:cc:33:06:58:d1:6e:67:33:8a:c3:77:dc:6d:11:
b8:d3:77:68:0b:22:02:ee:57:9d:61:ea:85:ad:aa:
49:04:03:b9:a8:0c:a0:59:2c:c9:9e:74:4d:cc:6a:
a2:35:f1:7f:5a:6a:66:7a:6b:13:e9:3e:d2:4a:22:
9e:e2:33:75:fa:b6:0e:ff:5a:fa:90:55:80:49:da:
14:1f:51:52:b8:4e:ed:e2:40:2b:23:50:14:73:33:
e3:c6:4b:75:2c:da:97:c3:2c:65:56:50:8c:9c:fd:
31:6a:68:4a:f9:60:0b:99:8c:23:b0:c6:da:b6:80:
17:46:ab:90:e9:4d:68:39:ea:b0:7b:ed:31:f6:2a:
86:52:8a:f2:f1:cc:31:38:c0:83:75:54:12:4c:85:
e7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:99:66:CA:35:3C:44:27:E7:16:04:35:5F:29:0E:DF:95:D0:9E:05
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:92:2c:c2:de:a5:d8:59:bf:7f:87:65:64:ee:ea:93:8c:d2:
c0:1b:06:58:48:a4:63:6d:4c:5a:9e:50:0a:12:5f:14:40:1c:
64:96:9f:8b:ee:65:c9:3d:c5:2e:84:00:e1:e9:41:60:3f:c7:
ed:7f:a0:c1:da:87:cb:66:fa:c8:de:bb:3d:41:0c:e2:b7:31:
a9:85:44:96:4b:3e:88:45:c4:80:47:8e:41:c0:43:04:7a:59:
70:90:ea:27:12:ba:6c:f8:3a:d6:74:41:5b:50:f4:9a:4b:46:
d9:0d:30:2a:09:b7:ac:88:8f:99:fa:db:4b:77:d1:6e:62:13:
cf:16:a3:1a:78:4e:61:eb:b0:d0:42:97:fd:68:32:49:0d:96:
3b:68:21:55:fb:47:c5:c0:ff:06:83:95:d1:79:d2:f4:b2:e8:
fc:df:8d:42:9b:12:f0:0a:c2:62:04:8b:40:9b:7b:50:92:6b:
06:52:1d:f5:0a:c3:9e:db:1c:fe:23:7b:bb:b7:b0:88:b0:d2:
43:fb:b6:72:13:6a:c1:bf:bd:13:66:8f:3a:dd:7e:85:31:2c:
b3:c0:cd:8f:36:67:39:5e:ce:e2:e0:87:aa:b0:fc:1b:57:8f:
ba:f4:8f:de:56:07:67:73:0d:ff:6e:e6:4c:e0:5a:0f:fc:63:
0f:42:17:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:30 2025 by rpki-client