Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier: 4cIFkdZLjbAvcN26rHAvOHyd5LaJjqcrUTFxN9oLKs0=
Subject key identifier: 2C:89:66:A9:20:1D:C3:92:92:5F:05:63:78:70:01:63:9A:FA:E3:4A
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 0199FB7CA7252C8A0A836382AF4123C21C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:14 +0000
Manifest this update: Sun 19 Oct 2025 08:01:14 +0000
Manifest next update: Mon 20 Oct 2025 08:01:14 +0000
Files and hashes: 1: IkDVoWMCW8T1OT9ORyQk9bDyazo.roa (hash: ezW06KpxDOFFcxPPKXXfQ4CRQ3FYkfmYYJN8bIHB94g=)
2: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: e29q7AxNE10j7qzeOkeU96aoEb3MdnAJNDPEtSYJQ3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a7:25:2c:8a:0a:83:63:82:af:41:23:c2:1c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Oct 19 08:01:14 2025 GMT
Not After : Oct 20 08:01:14 2025 GMT
Subject: CN=2c8966a9201dc392925f0563787001639afae34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:90:12:62:4e:06:01:2f:4c:98:4a:49:c6:
32:b6:1e:81:78:ab:0d:ac:4b:cd:e0:14:37:6a:4e:
60:94:69:b7:16:a5:c0:dc:9b:8c:ce:53:21:2e:41:
c7:b7:1c:bc:37:f5:47:8c:b7:ee:91:ea:4d:06:12:
ee:5b:de:e1:ec:b4:a0:ff:b7:4e:11:f9:76:99:24:
a2:1a:41:4c:d0:d9:91:61:7c:12:34:e5:25:09:4e:
cf:8a:16:03:1e:7c:3d:2f:80:3f:ba:43:dd:b0:11:
43:cd:63:41:7e:bf:cb:6b:96:62:17:dd:31:90:ef:
b0:86:d3:e8:bd:fd:13:4c:64:c3:64:b1:ea:13:0d:
20:c2:02:fc:c0:a3:8a:d3:c3:3b:19:62:3f:c3:d8:
6e:93:b4:38:59:d3:cf:4f:5f:c9:0a:d1:cf:a3:3f:
89:24:74:b6:b2:7a:8f:75:97:63:da:40:b8:f0:8d:
59:ff:21:1e:5e:e0:91:77:66:98:9a:cc:f9:bd:f1:
c8:05:d4:33:da:e8:13:f4:2b:cf:e2:d3:75:90:8d:
e9:8c:b1:f6:f4:39:6c:c3:b9:81:7b:4c:04:29:3b:
83:7b:ad:9f:b8:39:7a:5d:c8:cf:0e:af:5d:9d:81:
76:c1:e0:9e:87:23:32:5d:28:de:84:62:1b:a3:bb:
eb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:89:66:A9:20:1D:C3:92:92:5F:05:63:78:70:01:63:9A:FA:E3:4A
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ce:1f:b7:18:60:69:09:f2:b6:a4:e9:4e:18:67:5e:ce:78:
f5:38:3b:83:63:ea:ee:51:6d:e8:ad:a2:c9:c5:f9:6b:52:5c:
f4:9c:ac:48:15:27:ba:3f:57:04:99:70:b7:22:2e:47:02:16:
97:44:9f:12:93:dd:6f:df:f5:76:75:07:a9:4c:2d:6a:bf:56:
0a:4b:ce:03:f6:d5:90:57:6c:82:14:0c:6f:31:a0:c6:81:0d:
cf:e5:ef:ed:7d:7c:c4:39:71:8c:fd:96:0d:c0:0a:97:d3:86:
9e:32:40:a4:22:75:d3:1d:7b:b3:b5:b0:96:65:93:be:f9:ed:
1a:12:22:62:65:10:50:1c:5d:fb:99:29:8c:23:d7:34:89:41:
07:86:b9:d3:90:4c:8d:ee:52:31:a9:d5:a1:fa:08:f7:47:db:
ec:0f:88:b1:da:e8:7b:35:b9:3f:a8:8a:e3:69:7c:f1:b3:51:
e8:67:0c:3c:d9:c2:72:5d:33:b1:4e:61:b0:af:c6:2d:47:93:
ab:c5:7c:8a:10:e3:b0:01:fe:4b:a0:c6:60:db:7b:52:c5:e0:
0a:27:30:1e:e3:7e:69:a3:16:c0:d7:63:84:fb:fc:68:1e:c8:
ce:db:9e:cd:35:8f:4e:08:2c:4a:43:27:f1:c3:07:fc:0b:a2:
f0:c5:8a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:47 2025 by rpki-client