Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: ov04fY75jbQ3EgJCJvdERDS0DJ1UVlsTXx3uyGzkMxk=
Subject key identifier: 95:E9:85:1E:98:A4:EB:05:A5:3A:D1:25:AF:B3:97:26:73:9A:BA:08
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 0199FD33FF20B51B9A6392CDBD440731A19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 143E
Signing time: Sun 19 Oct 2025 16:01:07 +0000
Manifest this update: Sun 19 Oct 2025 16:01:07 +0000
Manifest next update: Mon 20 Oct 2025 16:01:07 +0000
Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: IuvUMGQk/ECWUXREN4lmDLZcBm3zP6aXAilnOeLnyvI=)
2: RB71fE5v8RGGcKN579UUTlog13U.roa (hash: UN1kwnBlPArV0/xDWD7jjI+PopLvxSAGBUZUVl+Xi54=)
3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ff:20:b5:1b:9a:63:92:cd:bd:44:07:31:a1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Oct 19 16:01:07 2025 GMT
Not After : Oct 20 16:01:07 2025 GMT
Subject: CN=95e9851e98a4eb05a53ad125afb39726739aba08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:13:85:b9:bf:15:56:60:20:eb:dd:4b:39:
89:9e:76:94:0d:7e:b3:9a:22:23:56:11:44:73:f7:
ff:91:f1:a3:42:ff:ee:4b:b5:af:cd:ef:06:d1:16:
22:b2:38:57:69:d7:e4:43:bc:c1:18:29:d2:43:ae:
db:3f:bf:58:40:4e:65:10:72:27:ae:19:3d:db:d9:
47:2f:be:84:94:9f:35:5a:28:f0:74:13:d3:1f:4d:
d5:3d:a3:b3:f6:9f:6d:78:ea:c5:d7:8a:bd:64:8b:
c1:f1:79:a0:6b:85:10:9d:69:8f:6d:ce:03:a2:b5:
32:9b:9f:ff:f5:55:51:b3:ec:d4:52:a9:12:84:52:
00:fe:f6:52:99:d6:67:e9:92:13:64:d0:9b:5a:69:
47:c3:62:ab:a1:72:74:92:e6:a1:b1:65:38:b9:c2:
9c:15:bd:bc:f5:1d:ac:86:8f:9b:ec:ce:d2:37:6f:
e4:18:96:16:b3:6a:84:6f:94:49:78:61:09:31:92:
ed:93:2a:7b:1f:2c:3f:e6:fa:61:e7:67:b5:da:a7:
c3:52:03:c1:81:e5:f6:cf:23:c9:97:b5:9e:46:15:
c5:13:05:34:81:0e:5a:f4:f6:d0:5f:5c:f0:47:75:
a1:cb:a5:b9:5b:33:ae:d1:ab:3c:ba:ae:f0:1b:b8:
3d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E9:85:1E:98:A4:EB:05:A5:3A:D1:25:AF:B3:97:26:73:9A:BA:08
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:43:22:04:af:5c:df:6f:05:0d:17:3e:ff:28:e4:58:13:a7:
65:ea:22:de:45:3b:14:2e:e4:9c:0b:e6:20:fb:c9:07:09:20:
42:43:4a:b2:a4:b1:03:61:bc:16:0a:26:a9:70:46:3b:d5:d3:
f3:13:bd:5a:9f:19:8c:1c:ca:93:96:c7:2d:47:19:9a:db:e7:
e8:31:b0:b4:af:98:31:69:03:b4:d4:e8:55:43:7f:82:a2:1f:
e7:2a:11:5f:fc:d9:c2:bd:3b:8b:bf:6e:9d:9a:0d:0a:86:87:
08:05:50:29:a2:95:bd:b9:dd:1b:74:9f:96:49:50:2a:f6:34:
03:76:fe:4a:09:48:df:0e:a4:47:31:bf:9d:b1:a7:90:42:a6:
4c:15:56:8a:ea:f9:a1:b2:01:57:3a:bf:86:1f:ea:39:1d:1b:
81:50:10:d8:ad:d7:e6:66:38:30:fe:b9:de:42:4a:c8:0c:51:
fa:df:2f:bf:1c:0f:ba:84:21:c6:c3:ec:1e:7e:f7:8e:85:e3:
fe:71:52:67:4c:38:d5:44:b2:e3:50:03:81:69:4e:b6:ed:ef:
21:a0:09:51:5d:d6:8b:b4:ef:e2:7a:ed:5b:c8:3f:d6:f8:bb:
83:35:df:54:e2:53:ff:b7:34:df:b4:70:99:40:5c:2d:d3:64:
83:0e:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:02:53 2025 by rpki-client