Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: gcTI6g+6ZU0c9B2mXI1gVedgA2XMRXiVWcwNg4Px7p4=
Subject key identifier: 25:B5:3C:95:D3:CC:D8:1F:35:F3:19:2B:79:63:D4:44:A5:41:07:9E
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 0199FC21495BFAFFDA19747B5ECFBC4BC616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 03C0
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: UGKIK203JPU32wac9jH4Fi0GnirRgrpgZoqoQVDcfb4=)
2: Np4SGefOBCZiVQwVOhlw43OZIsc.roa (hash: 4LHgzyDtN1tlOUmbwRr7JMfVVPaWldi7uvsqlFbuzcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:49:5b:fa:ff:da:19:74:7b:5e:cf:bc:4b:c6:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=25b53c95d3ccd81f35f3192b7963d444a541079e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:92:7e:a7:87:43:81:6d:a4:b9:be:f5:0c:78:
6d:54:cf:1f:1d:bf:fb:46:8c:f3:ea:eb:2f:6b:51:
15:a0:7b:e7:ca:61:cb:10:b0:dc:39:c6:c9:e7:38:
d4:3f:8e:e0:66:af:9e:44:5c:3e:eb:b8:db:bf:ff:
c7:1a:0a:db:7b:ba:fc:49:68:6f:a7:50:21:f4:03:
45:9c:58:f0:c4:ce:07:42:40:c4:9c:7f:4a:a2:26:
1b:25:50:93:e2:ae:54:af:b2:7c:ea:c2:a5:32:25:
46:f4:6e:4a:0e:97:0f:e2:63:97:34:8c:84:b3:48:
e8:e0:ee:df:24:57:98:10:d7:a0:14:00:45:cd:61:
3d:b6:2a:6a:3d:87:f0:d7:5e:12:89:c6:b6:e3:6f:
2a:9d:e7:83:05:6d:a0:77:5a:4a:6f:89:d4:c0:ae:
1a:4d:65:2c:91:82:8d:21:b4:b8:2c:b6:80:7b:51:
3f:bb:85:77:9c:fe:03:04:c2:5b:91:8e:61:b7:65:
73:b1:ac:1a:e4:10:6a:29:a9:8d:38:af:f1:a1:3d:
ba:45:2d:da:c3:d3:1f:c0:98:fa:1d:7d:54:39:43:
4b:9c:d0:1b:5d:87:89:7b:fa:a5:fb:70:0e:dc:dd:
74:c8:de:49:1f:0b:22:34:bc:c9:77:b2:e8:48:db:
5e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B5:3C:95:D3:CC:D8:1F:35:F3:19:2B:79:63:D4:44:A5:41:07:9E
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d1:17:8a:b1:19:36:5f:d2:b7:a6:f8:bd:6d:fc:09:e8:ef:
b4:30:82:75:2e:db:ac:be:49:d5:07:3b:cf:2f:f7:24:4f:77:
30:4a:02:38:ff:62:07:2a:ac:51:06:2c:d5:82:16:d0:33:16:
f4:c2:8b:94:ed:81:ac:37:4e:cb:ce:4a:c3:50:a3:1b:3e:8c:
68:63:a4:ef:4a:0a:83:ba:a0:69:27:6c:8e:9c:23:59:71:df:
8d:92:1a:5e:84:d1:7b:f2:96:43:19:3d:04:e8:2d:1c:12:3a:
35:5a:da:d8:5d:2a:93:4d:6f:c9:46:59:d7:53:05:a0:14:15:
63:b5:e0:23:28:53:99:40:b2:6f:f3:06:ee:d7:5f:12:79:59:
d8:07:de:1a:c5:67:4e:8e:0c:4f:40:9e:ca:da:4c:79:c4:63:
d6:cf:31:29:80:fb:ed:56:e9:24:11:5e:53:14:cd:14:87:64:
9c:9a:07:3e:8d:7b:fc:9d:e6:d6:59:7c:63:90:33:aa:44:21:
ec:b1:c0:3a:16:38:48:3e:0b:46:90:f5:54:48:fe:4d:d6:c4:
b3:71:ff:f7:8a:aa:97:8f:7d:ff:e5:bc:f2:ce:9b:1b:b0:89:
89:99:86:63:9b:8e:0d:28:d0:66:08:d5:bf:71:32:59:3b:8c:
95:9d:59:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IUlb+v/aGXR7Xs+8S8YWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YWZlYWU4M2QyZDVlMmVhNzdhYzYxNDdmNzU4MzdiMjdm
NzQzNDkwHhcNMjUxMDE5MTEwMTAzWhcNMjUxMDIwMTEwMTAzWjAzMTEwLwYDVQQD
EygyNWI1M2M5NWQzY2NkODFmMzVmMzE5MmI3OTYzZDQ0NGE1NDEwNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZJ+p4dDgW2kub71DHhtVM8fHb/7
Rozz6usva1EVoHvnymHLELDcOcbJ5zjUP47gZq+eRFw+67jbv//HGgrbe7r8SWhv
p1Ah9ANFnFjwxM4HQkDEnH9KoiYbJVCT4q5Ur7J86sKlMiVG9G5KDpcP4mOXNIyE
s0jo4O7fJFeYENegFABFzWE9tipqPYfw114Sica2428qneeDBW2gd1pKb4nUwK4a
TWUskYKNIbS4LLaAe1E/u4V3nP4DBMJbkY5ht2Vzsawa5BBqKamNOK/xoT26RS3a
w9MfwJj6HX1UOUNLnNAbXYeJe/ql+3AO3N10yN5JHwsiNLzJd7LoSNtenwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCW1PJXTzNgfNfMZK3lj1ESlQQeeMB8GA1UdIwQY
MBaAFCSv6ug9LV4up3rGFH91g3sn90NJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgt
NTNjNTcyMGNmYmViLzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83YTk0MGItMzQwYS00ZDA4LWFmZDgtNTNjNTcyMGNmYmVi
LzEvSktfcTZEMHRYaTZuZXNZVWYzV0RleWYzUTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9EXirEZ
Nl/St6b4vW38CejvtDCCdS7brL5J1Qc7zy/3JE93MEoCOP9iByqsUQYs1YIW0DMW
9MKLlO2BrDdOy85Kw1CjGz6MaGOk70oKg7qgaSdsjpwjWXHfjZIaXoTRe/KWQxk9
BOgtHBI6NVra2F0qk01vyUZZ11MFoBQVY7XgIyhTmUCyb/MG7tdfEnlZ2AfeGsVn
To4MT0CeytpMecRj1s8xKYD77VbpJBFeUxTNFIdknJoHPo17/J3m1ll8Y5AzqkQh
7LHAOhY4SD4LRpD1VEj+TdbEs3H/94qql499/+W88s6bG7CJiZmGY5uODSjQZgjV
v3EyWTuMlZ1ZeA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:52:58 2025 by rpki-client