
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: TLmtvEuT0jus3BNXBCLyZ/bmFOjwyK7RrDqSUfA9Wgc=
Subject key identifier: 76:20:D9:5B:1A:64:D9:C6:E7:B4:59:5A:44:A0:94:16:24:30:62:DC
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 0199FB7CA0D5F1F0940EA39631D55850BF9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 0DD8
Signing time: Sun 19 Oct 2025 08:01:12 +0000
Manifest this update: Sun 19 Oct 2025 08:01:12 +0000
Manifest next update: Mon 20 Oct 2025 08:01:12 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: eSdLTe2ZofEdILRuUH/gdNIZK8K6dGz5r9pW9E9fVsM=)
2: VJR7Lo1LB0pD40S4fO2jLPEbihA.roa (hash: RbHjGHvWg7AGicrPJns6EGHLTa9+BO6JRpxrZNUyWo8=)
3: gX6AqUyGzqBuxo0ZWofHdJPozGo.roa (hash: tMyCIpNNOmtDo0tCmm/IacKiCjkSIun6I2dTk3wHLFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a0:d5:f1:f0:94:0e:a3:96:31:d5:58:50:bf:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Oct 19 08:01:12 2025 GMT
Not After : Oct 20 08:01:12 2025 GMT
Subject: CN=7620d95b1a64d9c6e7b4595a44a09416243062dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:97:6c:e8:ef:94:d2:7a:c3:18:18:45:5e:a5:
5c:4f:45:f4:bf:a7:6a:ee:06:e7:92:84:ee:48:8b:
ad:dd:5b:60:b1:e8:f3:09:95:9e:9c:a0:88:12:1b:
df:8a:32:0a:1f:48:c8:ea:30:89:05:73:f6:6f:64:
67:8e:2b:dc:eb:2b:20:16:d0:39:cd:db:31:85:08:
69:d2:aa:91:7a:6f:42:b1:6d:86:f8:f5:6f:a9:86:
24:88:27:dc:12:a3:ba:23:bb:8e:04:6b:47:64:7f:
e2:4f:90:58:26:fc:42:ea:7c:94:54:71:8c:ad:07:
23:7c:3a:b1:5c:fc:4c:b4:3c:7b:9a:4d:72:c3:b2:
c6:6f:c7:61:05:2f:58:e7:9d:89:01:0d:3f:6e:fb:
d8:fe:d1:5c:3c:91:2d:fe:98:e9:8f:d3:d1:60:e3:
54:1d:84:3e:49:f4:a4:7b:2d:3f:b3:4a:0d:ab:7c:
dc:e6:9a:bd:14:cb:a4:ac:f9:29:7d:38:f7:23:87:
4b:f8:14:31:20:dd:0f:7b:d4:04:68:01:3f:ba:84:
0b:37:73:39:a4:cd:3e:49:6b:c2:ab:ef:49:b7:0a:
1d:0d:eb:bb:45:ea:82:61:81:f8:1b:31:9e:61:0e:
ff:86:c3:6c:ac:da:f0:d6:b3:60:73:57:f9:20:d8:
6f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:20:D9:5B:1A:64:D9:C6:E7:B4:59:5A:44:A0:94:16:24:30:62:DC
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c9:12:8a:e5:59:c9:12:0a:87:dd:95:61:6f:70:cb:44:fd:
44:91:ee:2e:eb:41:e8:28:90:29:38:1e:91:d2:e6:c9:49:a8:
a1:85:2f:0d:a0:c3:1a:46:21:02:26:a4:99:fb:9c:27:cd:18:
71:2c:2e:cd:a0:59:eb:3e:75:ab:fd:2c:ca:79:ef:71:ed:92:
14:58:3c:ab:72:29:77:ee:cc:da:6f:de:b8:24:77:79:fb:79:
50:8d:04:93:69:f8:e4:12:75:b3:aa:14:17:cd:1a:0f:32:0a:
b3:89:c8:ef:7d:9c:64:5a:c7:8c:e1:00:1a:e0:00:29:c4:a3:
3a:62:6a:40:d2:af:18:16:1c:b2:2a:4d:4a:ac:df:d7:b8:8c:
3e:a7:a1:a9:dd:3b:4a:47:47:66:7e:9b:7b:6e:2f:85:22:57:
c4:16:42:a5:10:70:a4:43:9e:dd:93:1a:47:a8:98:27:57:99:
74:48:07:d0:90:09:22:e5:fe:a7:31:7a:22:60:a5:d3:14:51:
fb:fe:1e:0c:fa:ac:6f:a8:6f:9b:3c:f5:31:5c:11:9d:7b:fa:
df:70:38:e5:f9:d1:67:29:6e:be:ef:58:0d:54:dc:8c:37:4d:
d2:36:39:f4:a3:7d:14:2e:9c:5a:30:fd:bb:74:8c:fa:36:3b:
9a:42:2e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:05 2025 by rpki-client