Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
File: JPS59IVkIInzaxdNlkLcSDf_TSQ.mft (raw, json)
Hash identifier: 5+VP/IW08xGumYKVHwwQfSgR8zGvLCcapYIm92ve45s=
Subject key identifier: B3:86:96:77:61:1A:86:5B:E5:6E:25:AC:81:74:6C:E7:61:03:E1:01
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Certificate issuer: /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial: 0199FC589E7DB212E328C886D40DE513E5D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
Manifest number: 0469
Signing time: Sun 19 Oct 2025 12:01:29 +0000
Manifest this update: Sun 19 Oct 2025 12:01:29 +0000
Manifest next update: Mon 20 Oct 2025 12:01:29 +0000
Files and hashes: 1: 2-HRD6bwoabjO9Qn710S3v32VoI.roa (hash: kexWRD+OmA3dG4m2fY8icqYNslO76EO40+SSv1pEbyw=)
2: JPS59IVkIInzaxdNlkLcSDf_TSQ.crl (hash: vD5/j9mIE9FLNmYOdyEQgMmMWwwvA91xQ94n6B+sAyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9e:7d:b2:12:e3:28:c8:86:d4:0d:e5:13:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Validity
Not Before: Oct 19 12:01:29 2025 GMT
Not After : Oct 20 12:01:29 2025 GMT
Subject: CN=b3869677611a865be56e25ac81746ce76103e101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:68:ca:aa:3c:97:84:69:3c:6e:bf:3c:f5:74:
ee:c5:bc:1e:d3:8a:d6:ca:8b:55:89:37:bf:6d:bf:
da:2b:85:c3:03:28:f4:46:7d:94:6b:78:b7:bb:e4:
db:3d:8f:33:c1:97:c0:56:3a:5d:ff:47:a9:7d:63:
ac:88:ae:d5:b8:e3:82:7a:c9:0e:b6:18:33:54:4a:
4d:15:bd:5d:2a:72:d6:c9:b5:99:6b:1f:af:18:39:
7a:21:8a:4f:ca:c3:96:bb:38:e3:7c:00:95:88:16:
ac:e4:6a:8b:cb:b7:51:6a:f5:99:cd:4d:7c:e6:56:
23:92:63:be:b6:44:de:c5:e8:7f:90:1f:e3:74:57:
8e:90:4f:76:97:f0:64:25:63:42:af:6b:15:96:70:
9d:37:30:fd:ba:cd:a0:d9:76:eb:57:52:ab:33:7e:
9d:86:cf:a4:ac:d5:8c:59:83:6d:cc:6a:9c:8c:d5:
1f:2c:3d:d9:b4:35:8e:1d:62:f8:9b:ed:b1:b8:c8:
5d:22:c7:a8:0b:f7:fc:77:57:35:92:be:43:ae:b9:
6e:31:e3:23:cf:e7:d5:32:d9:4e:9b:61:00:d4:c7:
f6:d4:93:03:fc:21:e1:55:96:d9:45:84:1e:13:4d:
50:17:a1:39:77:7e:16:ac:46:b8:8e:42:3a:41:bc:
8b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:86:96:77:61:1A:86:5B:E5:6E:25:AC:81:74:6C:E7:61:03:E1:01
X509v3 Authority Key Identifier:
keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f9:5b:0c:c2:6f:32:ea:09:d6:9d:23:2f:97:aa:57:7f:5d:
11:1e:ed:3b:02:ea:56:2d:46:39:c7:0e:d6:c3:9d:df:5f:de:
06:99:2f:5d:a8:fd:50:e2:0f:ec:11:df:25:2a:8e:ec:b0:39:
27:85:1e:d9:e4:62:73:8d:65:64:24:7f:27:09:70:1a:ed:80:
3c:0b:28:55:21:d6:42:94:18:61:a8:91:53:b9:73:74:00:2e:
e9:be:00:69:62:51:d3:bc:ec:3a:7f:43:20:8e:94:37:0d:48:
43:51:d2:de:0e:27:a8:72:26:0b:cb:69:f9:72:fb:62:4f:9d:
f3:ed:2f:cb:10:8e:a3:80:7f:67:54:2b:bf:d8:35:37:a3:3d:
c1:cb:77:22:1f:8f:1d:60:55:e8:04:cb:b5:d2:3d:5d:bc:ad:
b3:ee:bc:60:fd:e6:1d:bf:8b:d7:24:9c:4b:7d:51:7c:bf:e0:
b7:3b:c1:a8:6a:c4:5e:b0:3a:b5:c0:9f:fb:e4:3d:bd:21:d9:
46:2f:3c:96:af:a2:02:de:92:a8:f2:a6:7c:7c:de:5f:00:18:
9b:f9:3a:02:86:c8:ea:12:8c:ee:39:6e:7d:c3:ea:36:f4:6c:
db:2c:eb:dc:57:79:f1:b1:85:dd:fd:37:11:6e:f9:6c:18:dc:
ea:88:b9:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WJ59shLjKMiG1A3lE+XQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZjRiOWY0ODU2NDIwODlmMzZiMTc0ZDk2NDJkYzQ4Mzdm
ZjRkMjQwHhcNMjUxMDE5MTIwMTI5WhcNMjUxMDIwMTIwMTI5WjAzMTEwLwYDVQQD
EyhiMzg2OTY3NzYxMWE4NjViZTU2ZTI1YWM4MTc0NmNlNzYxMDNlMTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2jKqjyXhGk8br889XTuxbwe04rW
yotViTe/bb/aK4XDAyj0Rn2Ua3i3u+TbPY8zwZfAVjpd/0epfWOsiK7VuOOCeskO
thgzVEpNFb1dKnLWybWZax+vGDl6IYpPysOWuzjjfACViBas5GqLy7dRavWZzU18
5lYjkmO+tkTexeh/kB/jdFeOkE92l/BkJWNCr2sVlnCdNzD9us2g2XbrV1KrM36d
hs+krNWMWYNtzGqcjNUfLD3ZtDWOHWL4m+2xuMhdIseoC/f8d1c1kr5DrrluMeMj
z+fVMtlOm2EA1Mf21JMD/CHhVZbZRYQeE01QF6E5d34WrEa4jkI6QbyLswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLOGlndhGoZb5W4lrIF0bOdhA+EBMB8GA1UdIwQY
MBaAFCT0ufSFZCCJ82sXTZZC3Eg3/00kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9jNDdlOTAtMGYwOC00NjNiLTg4MTAt
YzA3Yjk4ZjZlNzY1LzEvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9jNDdlOTAtMGYwOC00NjNiLTg4MTAtYzA3Yjk4ZjZlNzY1
LzEvSlBTNTlJVmtJSW56YXhkTmxrTGNTRGZfVFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/lbDMJv
MuoJ1p0jL5eqV39dER7tOwLqVi1GOccO1sOd31/eBpkvXaj9UOIP7BHfJSqO7LA5
J4Ue2eRic41lZCR/JwlwGu2APAsoVSHWQpQYYaiRU7lzdAAu6b4AaWJR07zsOn9D
II6UNw1IQ1HS3g4nqHImC8tp+XL7Yk+d8+0vyxCOo4B/Z1Qrv9g1N6M9wct3Ih+P
HWBV6ATLtdI9Xbyts+68YP3mHb+L1yScS31RfL/gtzvBqGrEXrA6tcCf++Q9vSHZ
Ri88lq+iAt6SqPKmfHzeXwAYm/k6AobI6hKM7jlufcPqNvRs2yzr3Fd58bGF3f03
EW75bBjc6oi5uQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:28 2025 by rpki-client