Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
File: JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json)
Hash identifier: iaNk30hf5xVpqjgWPjExn83lCgxuSIIQ+wbtpK0gh6c=
Subject key identifier: BD:92:92:B7:60:08:5C:00:B3:C4:BD:D3:3C:7F:2E:B7:D9:9A:16:25
Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
Certificate issuer: /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Certificate serial: 0199FEB4EC6A5FAE7E3BF7333F57853F6E6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
Manifest number: 1429
Signing time: Sun 19 Oct 2025 23:01:33 +0000
Manifest this update: Sun 19 Oct 2025 23:01:33 +0000
Manifest next update: Mon 20 Oct 2025 23:01:33 +0000
Files and hashes: 1: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: WSxh994kpaqSnqgyxieYaDFsdTu7fvazrwrYqv5a6Lk=)
2: t0m5CFRk2ANTwdf9JIt0BYvGNEI.roa (hash: 69oTBNrBltjFmdUcFgtVLvMtoZ+YCjNcAmHmn7C7UBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:ec:6a:5f:ae:7e:3b:f7:33:3f:57:85:3f:6e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Validity
Not Before: Oct 19 23:01:33 2025 GMT
Not After : Oct 20 23:01:33 2025 GMT
Subject: CN=bd9292b760085c00b3c4bdd33c7f2eb7d99a1625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:55:b5:79:d1:df:35:06:81:d0:cf:b3:f0:
ec:5a:7e:4e:5f:ce:df:4c:c5:ab:66:78:e4:8c:5b:
f5:10:18:7b:16:a9:26:38:f5:b3:40:61:a7:c2:31:
3c:4a:a0:8a:f6:6a:66:76:0e:6d:e0:5b:bc:b4:31:
bc:11:c3:06:ad:7c:12:80:ec:9f:25:b6:79:3a:49:
a1:71:ff:5a:a8:20:1d:67:82:0b:2d:3f:6b:7b:a4:
de:99:d8:e9:c7:b5:8d:51:11:fe:ad:c3:09:30:47:
49:55:39:e2:85:ed:f3:33:3f:4b:61:b0:0f:ae:6c:
b2:46:eb:31:de:d5:68:cf:1f:8a:a2:62:92:89:3f:
d3:68:96:c6:aa:dc:5c:a5:ec:a8:b9:ca:1d:8d:df:
fb:6c:13:f8:71:00:52:d1:19:56:d8:a9:60:0c:1a:
fa:cc:c7:8a:d1:0a:89:d3:48:19:01:87:cb:1c:2c:
6d:81:a3:32:14:f0:3c:3f:49:c2:ac:99:9e:80:17:
c1:cc:1a:44:09:11:2e:ab:77:da:40:50:2f:87:73:
2c:d9:50:b0:4c:07:d1:7e:e4:fb:24:86:51:71:7d:
a6:b2:39:cb:86:5c:00:35:fc:87:a5:37:d8:6b:eb:
15:c7:49:89:6a:f4:69:e8:2f:d5:de:07:dd:61:ac:
07:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:92:92:B7:60:08:5C:00:B3:C4:BD:D3:3C:7F:2E:B7:D9:9A:16:25
X509v3 Authority Key Identifier:
keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:2a:eb:34:be:eb:28:6b:4a:36:4e:8b:fb:45:e1:9a:5a:68:
8e:bc:9d:25:4c:c8:e3:64:29:d2:76:fc:6f:9c:34:82:6c:dc:
b5:3c:53:b7:5b:77:a9:40:25:f9:7d:a3:a8:89:a1:58:23:b4:
79:e5:a3:06:b3:a6:8b:d1:e5:d2:0c:10:92:d9:59:5a:da:4e:
74:ff:56:49:2a:0a:d0:da:e4:19:72:12:d3:9c:15:b8:d1:c9:
9c:c1:c2:2f:46:e5:58:a8:b1:27:0e:b6:a4:f8:e1:30:d9:93:
49:5c:c8:ff:b7:53:93:c8:fd:a6:ab:dd:b9:d0:67:88:66:a3:
95:57:87:38:3a:d3:27:47:da:f2:85:00:34:70:74:8d:ca:57:
de:06:ed:5c:80:25:84:e5:05:a8:6b:da:0e:8c:73:f3:18:81:
f4:c0:01:4d:0f:54:54:8c:3b:64:a6:94:56:14:25:c7:e3:c1:
e0:03:d3:ad:9a:28:45:b4:47:23:de:77:3f:ff:2a:dc:25:0d:
66:b1:38:67:3e:db:3e:96:98:b8:f0:b0:6b:1a:4e:f7:35:b7:
ac:32:b4:08:27:8d:fe:f2:26:30:71:46:c0:2e:a6:52:e4:ae:
ac:c3:0d:48:57:9b:67:8a:97:1d:98:00:33:86:d4:c5:c9:23:
82:d5:09:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:51:03 2025 by rpki-client