
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: KFem3Mnpkm50cNrVlBA+nGWfukhnfJuE5JWlTOosle8=
Subject key identifier: 48:C3:34:2E:22:72:09:51:34:6D:64:05:DF:01:71:CA:0B:A2:9F:35
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 0199FB46149007151F3608584B05D1A4956C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:37 +0000
Manifest this update: Sun 19 Oct 2025 07:01:37 +0000
Manifest next update: Mon 20 Oct 2025 07:01:37 +0000
Files and hashes: 1: 5n1EQkcmRaucyrGX88Dgx7YQ19k.roa (hash: t4Vnu9tnDcftty/GlXBTfwRRN3QnsJxvx0/8WS/aC10=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: ewqdDxgnOA4AqwDpEJMUTaUHmDMCF1hFM4U6XZJiJf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:14:90:07:15:1f:36:08:58:4b:05:d1:a4:95:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Oct 19 07:01:37 2025 GMT
Not After : Oct 20 07:01:37 2025 GMT
Subject: CN=48c3342e22720951346d6405df0171ca0ba29f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e6:2e:03:0f:72:62:40:bc:53:8b:a9:4b:32:
75:14:37:41:e2:67:d0:58:89:8f:ad:18:9a:60:e0:
48:ec:db:72:cd:3a:40:77:7b:48:df:04:1d:a1:d8:
2d:87:88:a3:a5:35:b4:d1:56:7e:8e:9e:f0:14:cf:
1e:7a:42:f6:cc:0b:2b:91:3e:7f:0c:a1:0d:da:97:
fd:7c:e9:92:70:29:b0:4e:4c:69:73:52:3b:1a:0c:
ca:bc:8f:50:41:4d:a3:f1:8f:0c:3d:5c:d8:ec:c6:
2c:65:bf:97:d8:0d:e0:91:83:38:8c:bc:4b:79:55:
b2:77:35:e6:ac:8a:27:7a:0a:22:20:84:5a:a6:e6:
6f:00:7c:87:d1:2e:99:04:f9:b0:41:5a:e4:91:a9:
3d:7e:36:c3:9b:f6:1b:c6:c9:60:c5:68:e0:10:af:
bc:03:6f:25:5a:ee:bd:ab:b5:fb:8b:a5:d7:4d:fd:
e2:0d:39:99:d7:e0:e1:3f:04:32:ab:15:3d:66:a6:
9b:9d:06:da:7a:8d:16:6a:c2:90:b9:1d:39:13:c0:
0a:b5:3c:86:1d:d6:40:56:d1:f8:64:f9:d2:e2:6d:
13:95:3d:ee:ac:ac:a3:3e:b8:0b:9a:1f:1e:2b:f4:
7e:8f:0f:9f:6d:78:66:b9:a4:5b:56:8c:fb:09:f3:
90:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C3:34:2E:22:72:09:51:34:6D:64:05:DF:01:71:CA:0B:A2:9F:35
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4f:f2:b1:f1:98:62:d7:86:9e:68:11:60:85:ef:da:81:b2:
a8:8c:8a:c7:fd:83:d6:ae:de:29:46:3e:d3:2f:3b:ee:18:73:
f8:fb:fa:d6:db:e9:df:16:66:c2:32:96:b2:ec:a5:f7:35:5a:
5a:03:fa:7b:34:80:8a:ba:57:c6:f9:a9:25:92:03:28:a4:ea:
2f:c2:ad:76:20:fb:9e:a5:c0:e1:8d:ee:ef:d1:07:af:58:de:
5f:3a:35:5a:bc:b3:5a:24:11:a5:fe:ff:9a:13:bf:25:a9:6e:
12:60:58:53:24:cd:e2:aa:a3:a8:b3:08:a0:c7:a0:37:c4:cc:
cd:ec:b4:0a:14:64:88:53:9d:a2:12:c3:30:af:00:a5:4a:84:
f8:7c:bf:01:21:28:ac:18:ca:50:8c:d1:b1:0b:d7:be:be:8a:
af:c8:ac:d4:39:a0:d1:45:cd:5d:93:b8:08:04:57:82:74:11:
a9:76:e4:ff:3a:e9:5e:36:49:f6:99:32:90:bb:7a:a0:2c:63:
8d:5f:7c:6d:23:16:ee:f4:48:0e:cf:93:07:19:40:b4:21:7d:
f7:4e:94:b4:e7:73:cf:d9:3d:3b:40:e9:b5:ef:e3:e5:a3:2d:
ec:d1:e3:00:17:68:1f:02:5a:b2:50:1c:85:86:1b:72:cd:5d:
24:d8:5e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:05 2025 by rpki-client