Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
File: JEXvDPLil0idGXNw-IXVn4npWqs.mft (raw, json)
Hash identifier: iTsHBnZ7U6VvPzEWIuDd043P/q0/ViqXgGAdusPq59Q=
Subject key identifier: 6B:C7:99:A8:64:33:F6:34:85:33:EF:E2:2B:D0:5C:D1:88:54:ED:8C
Authority key identifier: 24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
Certificate issuer: /CN=2445ef0cf2e297489d197370f885d59f89e95aab
Certificate serial: 0199FCFD661DBDDE0349F2F39E833BE1F4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
Manifest number: 13B9
Signing time: Sun 19 Oct 2025 15:01:29 +0000
Manifest this update: Sun 19 Oct 2025 15:01:29 +0000
Manifest next update: Mon 20 Oct 2025 15:01:29 +0000
Files and hashes: 1: 7BGirnEkwzmDaMHYb7_OyeObZ-o.roa (hash: Mqe4eHaFftNeUPq4ztkhypVdBvRsFekv3LwUY3g3YP4=)
2: JEXvDPLil0idGXNw-IXVn4npWqs.crl (hash: A2OEoYSi8WJKvaTJI06hWVw6SW1GHxYqEXZXn+PYCnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:66:1d:bd:de:03:49:f2:f3:9e:83:3b:e1:f4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2445ef0cf2e297489d197370f885d59f89e95aab
Validity
Not Before: Oct 19 15:01:29 2025 GMT
Not After : Oct 20 15:01:29 2025 GMT
Subject: CN=6bc799a86433f6348533efe22bd05cd18854ed8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:1f:07:3e:8b:32:f4:ff:c8:7f:de:81:13:
35:b1:3d:1e:18:f9:97:f6:f2:61:5f:08:9e:de:98:
d1:85:61:b5:4b:74:10:ff:4a:0e:90:39:8c:4f:8f:
cf:fe:13:01:95:96:88:eb:12:fa:b5:7f:cc:b8:33:
b1:9d:70:a3:0f:bc:75:af:aa:c9:af:f3:64:d6:63:
22:e5:08:f7:34:e9:05:f6:11:b5:ee:0f:49:9b:4d:
80:42:63:60:87:14:3f:42:39:f6:c1:46:cb:98:9e:
c3:f6:c1:34:99:82:68:b5:9f:f7:72:e9:27:57:d3:
35:7d:c5:04:a9:c1:32:92:1c:70:a0:41:ed:d2:87:
0f:13:7f:56:dd:8d:d6:d2:70:0f:52:6d:68:86:9c:
28:be:01:08:e4:28:06:99:97:22:8f:aa:c4:ea:85:
96:0e:1b:4b:54:f5:42:56:2c:63:9f:ef:d0:26:da:
e9:c7:4e:f1:31:a2:53:66:00:ff:02:24:3f:6d:7d:
a8:37:3a:6d:09:28:de:9c:37:b4:34:9c:b3:11:fb:
d6:ee:fc:05:bf:eb:9f:e2:4d:39:2c:48:d9:f0:4b:
06:52:7f:23:97:7e:7b:d8:38:f5:4f:5c:87:e0:fb:
9f:d2:64:3f:3f:b4:0c:d8:1e:0d:cb:6d:05:b8:c9:
6b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C7:99:A8:64:33:F6:34:85:33:EF:E2:2B:D0:5C:D1:88:54:ED:8C
X509v3 Authority Key Identifier:
keyid:24:45:EF:0C:F2:E2:97:48:9D:19:73:70:F8:85:D5:9F:89:E9:5A:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JEXvDPLil0idGXNw-IXVn4npWqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c27300-fb95-49d4-8657-099bf7343e2c/1/JEXvDPLil0idGXNw-IXVn4npWqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:03:aa:50:a9:66:7b:dd:82:6d:df:8d:06:6d:f1:1b:af:3d:
3e:14:37:8e:10:92:9a:41:2e:07:66:1c:0b:4e:0a:fa:95:33:
89:e2:fb:00:71:dc:db:72:3b:cb:eb:d0:81:d0:89:da:c8:5c:
22:50:7a:f5:87:ae:1e:41:46:55:4b:69:f3:01:81:15:6e:69:
2c:57:6f:0c:3f:24:91:54:08:c1:67:ba:bd:b1:71:fb:5e:61:
a8:e9:09:31:a7:5e:84:4c:30:6f:26:86:d4:30:ef:16:30:0c:
55:57:e1:f0:9e:1d:17:16:c9:96:27:95:e0:f9:f9:38:08:5a:
04:c3:b8:dc:2e:27:a8:92:b7:8b:44:6e:49:0a:8b:bb:23:fe:
04:23:7a:e9:d6:06:a2:b5:cc:62:97:26:2b:e1:54:ec:8d:df:
e8:5c:30:6b:e3:4f:d2:a8:ca:9c:34:0f:3a:26:f6:23:cf:b0:
43:61:9c:d9:00:cc:f8:32:ae:b0:32:35:2a:85:85:2a:c9:87:
13:39:33:8a:60:dc:6d:50:eb:88:6e:61:92:e9:35:a0:17:fa:
15:ef:4b:d3:a5:4b:4a:3c:48:2a:1e:8f:42:c4:d0:86:8b:27:
a1:19:9a:e9:ff:7e:a9:2d:fd:ec:48:4b:d9:58:67:4f:56:fb:
3a:9b:af:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:37 2025 by rpki-client