Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
File: JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft (raw, json)
Hash identifier: ZXl/6vtkQlZ5rM11wdBnaA66xp3OGTp7u/Z26xbEbVU=
Subject key identifier: 3F:EA:92:64:40:A7:18:0D:71:F8:3D:EC:E1:02:C4:C1:B5:CC:87:0F
Authority key identifier: 25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
Certificate issuer: /CN=25572e8f93b18a401cfecdf62586783858cc5f14
Certificate serial: 0199FB0EFC1E23B1C1426D2D44EC60D634C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 06:01:27 +0000
Manifest this update: Sun 19 Oct 2025 06:01:27 +0000
Manifest next update: Mon 20 Oct 2025 06:01:27 +0000
Files and hashes: 1: DTLOnLZIHhlPP7pvWpWEUTLWHQg.roa (hash: QLz4ZYz1buP6/UJvo5YrZ+4VolEyE3vVmr+8wwogqDA=)
2: JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl (hash: r1KVZtjHw/0QyjG6ASjeuwFz3n8G3B5ZicZXfJ4VfpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:fc:1e:23:b1:c1:42:6d:2d:44:ec:60:d6:34:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25572e8f93b18a401cfecdf62586783858cc5f14
Validity
Not Before: Oct 19 06:01:27 2025 GMT
Not After : Oct 20 06:01:27 2025 GMT
Subject: CN=3fea926440a7180d71f83dece102c4c1b5cc870f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f4:fe:83:1b:8c:4d:0a:34:e9:2d:b2:0f:8d:
2b:11:52:e6:45:56:1c:af:89:25:b6:7d:a1:ea:b8:
ff:b2:f1:1b:e1:7d:e3:93:d7:d8:7b:2c:d2:50:79:
2a:ad:4d:dd:93:94:8d:99:08:b8:71:89:69:d9:23:
e7:e5:6f:71:1d:4a:6f:05:6f:50:f1:21:a8:e0:25:
ce:4a:b7:85:17:88:4c:a5:98:57:43:bf:bd:95:51:
c0:85:38:00:d7:0b:4f:69:0f:9a:9f:1b:ab:ec:7e:
e7:0e:d6:5d:3b:21:fa:60:0c:dc:75:ee:a7:ce:af:
ef:bd:45:67:6d:2c:b0:00:72:d2:e2:b5:2a:41:6b:
08:c7:54:c0:2e:c5:72:75:48:79:fb:bd:c6:14:ed:
78:16:63:e6:bc:4a:57:55:39:98:85:20:be:cf:31:
46:d0:93:ea:8b:70:8c:34:69:19:e4:c3:bc:1c:98:
f1:57:89:1c:ae:00:6e:c2:4d:3b:a4:3a:91:d1:af:
4a:11:c0:fe:56:2b:26:5a:0a:82:48:f7:bb:e7:26:
06:6a:82:f5:d7:ac:fa:3a:f6:b0:7b:fb:73:5c:7c:
6c:60:73:5c:bc:d8:13:73:71:e3:6b:bc:71:ba:39:
86:ee:6b:8e:47:b8:be:ca:64:e5:e1:8d:2d:ad:b1:
05:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EA:92:64:40:A7:18:0D:71:F8:3D:EC:E1:02:C4:C1:B5:CC:87:0F
X509v3 Authority Key Identifier:
keyid:25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:0b:d0:44:7f:ed:75:f5:80:ce:67:ed:49:28:de:93:d9:35:
6f:8a:ea:9d:bd:ec:60:11:dd:e5:a2:8b:16:18:51:4e:47:37:
b0:34:16:53:f7:f2:00:97:f7:5e:1d:25:d1:84:ed:5a:ca:4a:
22:7b:b8:b6:1a:34:b9:67:59:b2:15:27:c9:ec:b4:b3:b4:bd:
12:0f:94:16:b7:9f:27:8a:07:0f:a1:93:c3:8d:07:f7:c2:43:
58:c3:6e:cc:e0:f1:a6:4e:fd:09:a0:40:83:a6:58:7c:1b:c3:
65:64:a9:e5:d1:9b:ae:d6:9b:af:1c:f1:51:a8:c2:03:71:33:
7b:bb:9a:e2:6e:5d:1b:28:29:9d:f2:58:3a:d7:6c:66:29:f5:
63:5b:47:70:3c:60:d2:59:1c:d2:f2:15:6e:3e:18:33:02:6a:
0d:54:a2:7d:6d:20:91:ba:46:44:10:92:b1:d8:e0:18:a3:2e:
89:c4:74:03:2e:46:15:21:f6:78:ae:cd:3d:66:84:e8:de:31:
67:92:b6:1f:55:29:c3:41:e1:7f:64:e1:9e:91:35:88:97:a3:
96:ba:ba:1d:06:2d:c9:aa:3d:85:b5:bc:5d:41:84:69:a0:39:
9a:66:15:3b:c1:9a:45:61:ce:03:f6:8e:28:c1:9d:8d:00:4a:
4d:65:7b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:36 2025 by rpki-client