Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier: edCbjJhB+zXoRiBV2/lw0DbuLDv9P3NlyHLMqwQubxw=
Subject key identifier: 07:8F:06:17:E7:64:F9:16:C9:49:C8:97:A9:68:47:17:B5:27:3E:48
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 0199FC58BD8119065B3A7E1C078D8FE7BF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number: 14BE
Signing time: Sun 19 Oct 2025 12:01:38 +0000
Manifest this update: Sun 19 Oct 2025 12:01:38 +0000
Manifest next update: Mon 20 Oct 2025 12:01:38 +0000
Files and hashes: 1: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: 9w6rfarHIETpFGShmVpDtJb7LyBdpABSknSg70tP2zo=)
2: WGqsuG2r1cPbNk_SlZ77XH2CRuc.roa (hash: LWTe3RG5x6p18VhZoks9MnTE5mxlsn7m+dciM17vR7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:bd:81:19:06:5b:3a:7e:1c:07:8d:8f:e7:bf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: Oct 19 12:01:38 2025 GMT
Not After : Oct 20 12:01:38 2025 GMT
Subject: CN=078f0617e764f916c949c897a9684717b5273e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e6:c7:59:ff:1b:90:e3:12:6e:43:19:97:c3:
0b:86:09:3c:a7:40:79:7b:0d:4a:05:72:a9:51:65:
4c:2e:7f:3a:e1:f8:03:77:97:3f:2b:c1:41:fc:99:
b7:d8:f8:56:7c:48:47:1d:db:e5:54:a4:f7:45:fa:
e7:c8:bd:9c:9d:10:f9:3e:b0:91:4a:3d:35:1d:f4:
c1:1b:fd:18:e1:db:d5:9d:d6:04:d8:ac:cb:ab:44:
ad:62:1f:7d:96:84:af:3f:19:71:e4:a0:a6:eb:2e:
e7:13:14:7e:2e:a5:04:88:1f:21:43:27:3f:c5:ef:
60:75:f7:d9:e4:fc:47:dc:b4:b8:b0:c0:d5:90:3c:
c5:a2:30:dd:39:f8:c2:92:24:da:6b:f1:b0:41:38:
47:80:1f:c2:1c:4a:c9:01:f1:d8:9b:ca:e7:81:f9:
60:81:0b:48:4f:61:b2:85:8e:a5:ef:e5:bc:62:a6:
9c:24:aa:c7:3d:e6:eb:60:6d:78:1d:0f:ac:fe:1c:
c7:cd:dc:64:02:e1:b2:5f:00:f6:63:ce:7c:c4:07:
a2:14:73:41:ec:35:1c:5e:ca:b8:76:1f:57:a3:c5:
e4:36:de:87:65:6b:ab:8d:a3:35:26:ff:d8:ab:a4:
27:07:e0:dd:0b:b2:62:1c:7f:b5:0d:93:76:fd:50:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8F:06:17:E7:64:F9:16:C9:49:C8:97:A9:68:47:17:B5:27:3E:48
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e7:0e:47:8e:a2:b2:b3:3a:0f:8c:6f:1d:d0:58:cd:96:0a:
be:6b:52:c5:ea:c7:a8:d7:68:60:03:4f:c8:7b:97:fb:28:06:
12:b6:f6:c3:06:54:e6:1d:4a:3c:de:1a:9d:e0:ff:1f:f9:17:
42:95:ca:6b:89:03:b2:d6:68:6e:fe:5e:c8:d2:be:f3:e7:91:
d3:84:8f:36:96:7b:09:b1:dc:0c:66:61:a1:19:2a:3b:71:97:
b6:87:32:7b:51:ed:60:79:db:0d:98:4a:be:9a:63:72:22:22:
8d:2d:17:4a:db:b1:ad:7c:33:01:e4:ad:86:9b:22:66:5d:7c:
6b:a4:05:41:c6:c2:f9:2a:8c:4d:3c:50:82:6a:cb:c1:b7:d0:
6d:06:bc:76:82:7c:86:06:72:bb:a4:80:7d:fa:99:c2:d7:5f:
a2:da:e9:14:14:b9:68:47:fb:6b:46:27:ed:bd:70:87:99:de:
b6:ab:51:61:66:16:43:8d:ac:89:16:a9:9a:3b:2c:96:4e:06:
d4:33:96:63:ca:6b:3f:4c:2c:8c:3d:dc:db:a7:c0:b8:c4:06:
b7:8d:25:91:e6:c0:3f:40:fc:ce:43:0d:38:fd:19:3a:6b:d4:
20:f5:94:4c:21:2a:97:77:69:04:44:fd:22:cf:5d:ef:e7:57:
24:e2:b6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:32 2025 by rpki-client