Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: W0mH4bM3BPU/NbI/pH16bO0IyLPkq/TBo8WWPIGvb/8=
Subject key identifier: 39:53:14:A4:14:0E:A8:D3:A4:6F:07:D3:5D:83:47:9B:B5:1F:3F:0C
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 0199FC8F19543A172F313C129064C7021896
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 1673
Signing time: Sun 19 Oct 2025 13:01:00 +0000
Manifest this update: Sun 19 Oct 2025 13:01:00 +0000
Manifest next update: Mon 20 Oct 2025 13:01:00 +0000
Files and hashes: 1: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: diEEt3j1Qxz8VarhjHFjllzmR5R+tK97C37jTZUWhYY=)
2: LkSjEtNw7y8FvIXezhAzO7bql6w.roa (hash: XWnh2LDRuVnV3zQSeTuxulNsHgB6C0TJ9AfUsOOpruk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:19:54:3a:17:2f:31:3c:12:90:64:c7:02:18:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: Oct 19 13:01:00 2025 GMT
Not After : Oct 20 13:01:00 2025 GMT
Subject: CN=395314a4140ea8d3a46f07d35d83479bb51f3f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:85:87:ce:16:5f:25:fb:81:e5:1e:3e:94:
df:50:99:6b:e0:cb:67:dd:0e:60:b9:34:da:78:86:
fc:f2:cc:1d:41:a0:0c:84:b2:4c:ac:f9:4e:81:9f:
01:cb:e9:8f:6b:06:78:af:61:03:af:7d:e4:12:64:
eb:70:51:f7:6a:00:72:09:a4:af:07:b1:00:99:a4:
b5:46:12:9f:cf:0c:44:fd:a5:7b:db:07:9b:9d:9f:
50:14:54:a0:56:54:1d:a1:e0:7a:d4:8f:75:fb:71:
a6:ab:e9:78:1c:e6:91:c1:5f:a8:c7:4b:9e:f0:0e:
ec:19:93:aa:11:47:25:54:3e:47:01:78:0a:ac:fe:
65:99:4a:6a:68:a4:98:43:f9:00:23:b0:ae:c4:52:
1c:ae:0d:a0:02:f6:05:5b:b0:cf:a5:a3:4a:af:d5:
d1:91:4b:27:91:cf:74:da:49:1e:4f:61:6b:83:64:
ec:73:0e:6a:ef:97:f1:6b:33:77:29:95:a2:dc:cf:
86:be:7b:2b:65:0e:ca:19:66:26:db:38:01:0f:29:
ef:4a:57:7a:43:c7:a7:3a:bb:60:96:de:62:82:af:
19:e0:75:19:c7:b3:e8:0f:11:ae:44:fc:99:e1:c5:
1e:17:e6:39:a0:e5:3c:7d:1e:d6:3e:22:37:2a:f9:
79:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:53:14:A4:14:0E:A8:D3:A4:6F:07:D3:5D:83:47:9B:B5:1F:3F:0C
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:1a:51:a6:b6:e8:08:2a:ce:c2:8f:2f:20:de:a9:58:6a:99:
7b:0b:d5:38:fa:2c:98:b7:ae:1b:fa:54:d1:06:86:9d:40:dc:
5c:44:3a:e8:78:7e:48:f5:5f:26:78:fb:d2:a9:22:1a:fc:34:
3a:16:cb:6e:b7:60:4a:d3:0e:43:1f:13:09:d0:77:55:9f:9a:
8a:a0:b3:43:e4:98:63:d8:d9:e9:95:09:79:ce:9b:74:58:79:
b7:82:e0:34:53:96:cf:2d:81:c9:8e:a8:22:ee:60:a2:0f:c3:
10:ba:cd:af:7c:86:b7:f0:c3:e8:c7:f7:e2:59:61:a9:d4:9d:
e1:3e:0b:7f:01:09:77:38:72:b4:f0:0d:ec:b3:2c:51:61:87:
44:23:bc:7c:2c:ce:f0:44:cb:c0:66:de:c5:d5:69:78:d3:5d:
5b:4c:fa:c3:32:1d:b4:7d:73:1e:38:c7:09:c0:ac:f6:57:f9:
05:70:25:d1:26:b9:54:7f:25:ed:8f:bb:76:0b:1d:19:28:c5:
24:6e:3e:47:39:eb:aa:f2:a7:38:1c:94:f0:0b:df:ab:89:21:
8a:8f:26:7b:66:c1:2f:5d:0b:d6:92:f9:e1:16:ca:e6:1c:e7:
db:5d:45:9a:c2:8b:63:20:9a:de:7e:6f:56:3d:75:94:1b:77:
1f:4a:9c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:48 2025 by rpki-client