Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: h6TQsZza0H5sX03gunlNe7FUK/Rf2aETwapGu0x9zis=
Subject key identifier: 8F:A6:2C:A4:8A:E9:16:2C:41:2A:58:CD:E3:7F:2D:8B:03:F8:15:96
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 0199FB45FFE4A293EBAB8998313D31151C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 1299
Signing time: Sun 19 Oct 2025 07:01:32 +0000
Manifest this update: Sun 19 Oct 2025 07:01:32 +0000
Manifest next update: Mon 20 Oct 2025 07:01:32 +0000
Files and hashes: 1: 2f42Ui-pru7wNiS6tvX-43aKjFs.roa (hash: mtpDrlYTTPVwbZc60pOa8NtALeV5Jm4wS3DacId4T/Q=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: zxr4wQ5cu/g6rP4nFNDHUY1dUk8NPoZMaoQUBHr4CdU=)
3: Xhs8fAc0SGAyN4KDD0cOKWAqtow.roa (hash: 0rR/+YP0FGlnVR+donPj6Q3O2XueDV+VyXKsGyjN1KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:ff:e4:a2:93:eb:ab:89:98:31:3d:31:15:1c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Oct 19 07:01:32 2025 GMT
Not After : Oct 20 07:01:32 2025 GMT
Subject: CN=8fa62ca48ae9162c412a58cde37f2d8b03f81596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:e1:42:0c:d2:d1:02:8b:8d:d3:c8:d5:a5:
a7:0b:e8:39:18:66:3b:27:7f:ef:67:52:be:5b:e9:
33:ac:81:f8:09:4d:35:bc:d0:f7:6b:1b:c3:3c:0d:
c1:14:29:c5:5e:7a:7d:85:ae:a0:a1:e8:17:da:ad:
90:45:87:0e:42:26:3f:d6:cf:d1:b1:f9:ea:4c:ee:
9f:b0:e7:a0:91:e3:d6:71:3b:4c:53:3e:18:d5:67:
81:3a:55:78:52:b6:f3:d8:5b:05:8e:19:2d:6f:f8:
1e:13:3a:da:fb:d3:cf:e0:b7:99:46:ea:f9:3c:0d:
24:ba:cb:b4:43:46:a6:67:a4:04:73:1d:7c:40:80:
62:21:12:0c:c6:e2:3a:01:23:01:76:e1:7f:1d:cc:
93:88:ad:66:63:cc:ec:f5:83:cf:07:ee:59:c9:c8:
e8:27:bb:3c:49:16:78:dd:48:20:d2:12:1e:06:c5:
32:40:75:a6:0a:a2:af:bc:6e:2c:03:b8:e8:06:8a:
99:10:b7:ac:54:a2:9b:23:bb:5c:24:30:8c:df:35:
c7:2f:cb:2f:77:d2:23:5f:18:db:84:47:25:cb:07:
a7:2b:08:31:f4:5f:80:5f:1f:49:56:c2:b4:66:e8:
d2:9d:f0:35:c1:07:f7:aa:3c:e7:e8:3b:94:b8:37:
20:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:A6:2C:A4:8A:E9:16:2C:41:2A:58:CD:E3:7F:2D:8B:03:F8:15:96
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e8:f1:9e:70:d1:0f:ea:8c:86:dc:6c:71:30:e4:f1:25:2b:
6a:a7:e1:15:96:aa:d8:60:b1:28:5c:c4:19:22:35:5d:18:f5:
83:0b:38:a4:cb:8f:db:0d:a0:1d:7f:db:f1:00:54:8f:a9:e0:
f1:73:ab:b0:a4:7b:7a:60:f2:98:ef:60:14:9b:9d:4a:45:3f:
94:6a:1a:9c:22:bb:93:ba:b3:a7:71:7a:64:c2:9b:ba:ae:3c:
3d:1e:1a:7a:48:ce:26:1d:1e:07:6b:9e:05:d1:59:8e:8f:18:
d1:22:7c:8d:22:6a:61:8b:12:71:27:e1:d2:df:88:3e:1b:46:
f2:9a:55:69:f5:ee:9c:c3:c0:14:18:74:be:57:b9:64:d4:7f:
53:fc:f4:f9:cd:7f:a1:a1:ed:14:16:2a:cb:85:9e:b4:91:38:
98:1b:03:b1:07:04:99:3d:bb:c4:33:6f:36:ea:a6:57:f6:fe:
73:41:7a:1c:92:35:37:28:42:91:69:9f:3e:ca:72:9b:42:cf:
5b:3a:93:99:98:3b:bc:12:79:4f:a3:7e:0f:f6:21:ee:18:e8:
cd:5f:0a:c6:ca:75:d6:4b:e0:4a:65:97:be:69:7c:53:23:cc:
7f:72:18:fc:6c:92:e7:17:cd:d7:3e:a0:eb:54:0d:73:0a:a0:
ef:dc:91:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:56 2025 by rpki-client