Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
File: JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft (raw, json)
Hash identifier: dwvNHV5sAy31JobadW564MBCi920L7dv68RWHNV9w3g=
Subject key identifier: AA:84:B3:C2:09:71:4C:36:75:65:FC:0D:F6:01:AE:9C:3A:FE:34:77
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Certificate issuer: /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial: 0199FFC8362E0E4AE44D9151631AFA738EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
Manifest number: 11BE
Signing time: Mon 20 Oct 2025 04:02:14 +0000
Manifest this update: Mon 20 Oct 2025 04:02:14 +0000
Manifest next update: Tue 21 Oct 2025 04:02:14 +0000
Files and hashes: 1: 1-V7nSIEtwZacmx3O8jjsbs2FG9w.roa (hash: t9K5j+LYk94wZJxNHETLVLM4vmuOedOVZgo6948wOQE=)
2: 6ejovNND0TNxbK3PtvEHJ_oMrqQ.roa (hash: 0+kxBlBGWXGCy6bDB1j1fXR0+RthnFxgyw3Nt6xjMyc=)
3: JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl (hash: prY6FvG1THKbMvOam75JnZK7z5MLPmvUK+7SloKUnPM=)
4: RVYbt4pshmH8DSV6d_7jrqY3hkM.roa (hash: DtwQM6qpi2v7cPG8SNPN6jhojOkJB16k6kT3gTy5/Gk=)
5: ZO3wZfLo3YsxIFjpYF3lEe1GVy4.roa (hash: jTLR78RCT3rEVEu8hiMRg4UU1kUzybwIrt+GTClc9gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:36:2e:0e:4a:e4:4d:91:51:63:1a:fa:73:8e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
Validity
Not Before: Oct 20 04:02:14 2025 GMT
Not After : Oct 21 04:02:14 2025 GMT
Subject: CN=aa84b3c209714c367565fc0df601ae9c3afe3477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:30:2c:1a:e6:68:1f:7f:80:43:d5:c1:e7:ee:
f6:77:0a:c3:35:ad:83:3b:69:74:c5:88:ed:8b:d1:
2c:21:e7:9a:4c:48:04:62:49:eb:92:27:eb:27:12:
4e:66:d4:a0:40:5b:0e:ea:72:97:08:f1:f3:85:a1:
ce:b8:99:ef:69:38:4f:b2:0e:b4:ec:3b:4a:11:40:
62:b6:08:b0:ef:e1:53:53:91:76:bd:9d:d3:37:bd:
90:18:60:1c:e1:f7:95:5e:99:c3:1d:aa:98:69:3e:
f7:83:d5:93:e7:af:03:bb:8e:11:b1:8f:39:61:71:
32:87:34:f3:7e:45:15:fe:6d:7f:0b:0b:18:58:22:
65:a8:80:e6:65:e8:60:b1:32:6e:15:e6:0d:93:f4:
e4:bc:9c:e7:65:17:87:68:d7:bd:48:10:da:9f:17:
70:86:34:cb:42:07:13:d7:a7:a1:20:a1:48:28:ea:
d7:d2:1e:60:55:a4:2d:ce:54:ad:fe:de:ec:a4:eb:
d4:cb:e0:59:9c:25:50:b6:0b:da:ba:94:4c:b7:4e:
64:36:c2:91:23:d0:7a:9c:42:77:c2:9e:04:1e:98:
91:25:df:26:18:16:85:12:8a:0d:93:76:f0:c2:88:
82:6a:45:87:2a:f5:09:2c:31:86:2b:51:02:d5:c1:
0a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:84:B3:C2:09:71:4C:36:75:65:FC:0D:F6:01:AE:9C:3A:FE:34:77
X509v3 Authority Key Identifier:
keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:3a:53:ca:6e:72:cf:59:f2:c3:5d:6b:36:54:7b:6d:f3:12:
2c:fa:5f:86:de:d9:c9:8e:b2:79:43:03:ff:65:68:e0:72:2c:
06:61:9b:f2:1f:4f:90:ce:f2:4a:72:8f:00:70:a1:a0:46:c1:
bc:cb:19:ed:ce:6b:87:d0:ed:ed:fe:6c:7e:fd:0c:10:18:86:
f5:76:72:3b:17:c8:77:67:0a:52:85:8a:25:52:f1:ce:21:c7:
04:d3:b1:2d:f4:93:fa:df:78:87:88:f2:a1:bf:e1:db:0f:16:
7a:33:49:4f:41:5f:58:f1:e2:d9:2f:76:e7:3d:a0:05:63:9e:
92:3a:96:cc:8d:b4:32:10:06:b7:76:e7:47:01:5c:9d:03:30:
12:be:c9:ea:be:65:a8:62:4d:15:a5:53:6d:aa:a2:80:04:fe:
a2:af:7c:a1:69:c5:ac:8c:5a:00:bc:74:21:79:17:39:52:4d:
2a:f2:1a:17:fb:31:2f:9c:ff:0f:e3:17:db:29:1e:3a:88:5e:
58:b0:c7:8d:07:c3:56:23:96:db:db:e8:34:60:64:04:d2:92:
bc:cf:b7:1e:c8:0f:bd:ab:f8:0c:c5:02:68:21:88:c4:b5:af:
c8:d8:00:58:6b:5e:76:dc:1e:bb:d9:e0:82:ba:a4:25:da:38:
0f:e4:fa:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:38 2025 by rpki-client