Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
File: JovHlTH32BXSsrUin5rJ9vi_68o.mft (raw, json)
Hash identifier: F3ZAU3ZfCJhvpRBNn3k3/t9/LYMi1RYQSjcf7fnvDdw=
Subject key identifier: 83:40:86:9F:E7:1E:1F:92:2A:6F:19:81:C3:28:4E:73:D5:03:89:A4
Authority key identifier: 26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA
Certificate issuer: /CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca
Certificate serial: 019A01B5614A38ED4DDAA302B5BECFF1A9C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
Manifest number: 019A
Signing time: Mon 20 Oct 2025 13:00:55 +0000
Manifest this update: Mon 20 Oct 2025 13:00:55 +0000
Manifest next update: Tue 21 Oct 2025 13:00:55 +0000
Files and hashes: 1: JovHlTH32BXSsrUin5rJ9vi_68o.crl (hash: FwdFx2xNa8rcritEOaRWkiB2HVDdEMsjQL/Ern85bfs=)
2: fbUeFXfkxWs40ix5vT2S2k90Z-k.roa (hash: UcP80IpCz9vBYWCvKMhbqTO9Etv9kTfCKFjSdIAUqCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:61:4a:38:ed:4d:da:a3:02:b5:be:cf:f1:a9:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca
Validity
Not Before: Oct 20 13:00:55 2025 GMT
Not After : Oct 21 13:00:55 2025 GMT
Subject: CN=8340869fe71e1f922a6f1981c3284e73d50389a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:37:3c:d9:45:55:44:2b:bc:09:46:03:50:
c9:b9:ae:52:57:ec:e0:0d:72:e7:27:f7:7c:83:1a:
ed:76:e1:57:15:ec:d2:da:38:45:65:e8:68:b3:2b:
45:a2:95:bf:2c:e4:8a:96:64:ba:e8:4e:f8:b2:4a:
3b:c3:47:eb:0d:f2:b6:3b:d2:f4:08:eb:9c:5b:b7:
ba:73:87:7a:2a:b4:66:60:71:77:90:3c:66:c3:44:
eb:ed:38:f2:d0:ae:5c:d6:ca:02:06:1a:5a:5c:8e:
b9:25:c7:60:95:3a:c7:41:fb:0a:0f:71:ce:d5:c4:
2c:31:7d:c7:24:d4:13:55:c2:02:4d:82:be:39:75:
8b:04:3f:7a:74:b7:df:21:07:00:01:00:23:b0:08:
94:35:ff:b6:fd:21:27:9d:91:66:fb:1c:83:1c:bc:
04:15:c4:d3:e2:8b:15:18:40:0a:36:fe:e1:bf:19:
fd:d2:8d:e0:85:69:17:50:55:8f:be:f8:0d:22:c6:
73:d0:59:87:73:65:4e:15:01:6c:fd:34:21:29:49:
4b:f6:76:31:9c:db:b6:03:09:0d:da:43:39:20:22:
89:2c:54:51:90:13:e1:5a:13:13:2a:64:f6:20:3c:
59:0f:7c:f9:3e:02:9a:73:2f:88:06:27:7f:05:5f:
29:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:40:86:9F:E7:1E:1F:92:2A:6F:19:81:C3:28:4E:73:D5:03:89:A4
X509v3 Authority Key Identifier:
keyid:26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:78:69:da:00:9b:8e:3f:91:64:17:d9:ec:49:4a:dd:ea:b6:
45:f0:00:b8:8e:f1:45:0f:65:30:f2:37:25:93:b7:e3:03:b3:
81:27:2b:4c:b3:da:8f:3f:21:8b:66:98:05:43:59:2a:18:b4:
5b:53:c5:8a:d3:34:c3:f1:9c:a0:11:fc:1e:eb:ff:d4:06:c1:
29:19:64:f2:71:03:f9:14:50:a3:6d:39:5b:57:ea:00:04:d0:
62:29:52:4e:28:e2:07:34:b1:47:01:53:3b:24:12:94:bb:6b:
97:8e:c5:7d:8c:17:84:8c:88:fb:94:f4:98:0c:9e:dd:ac:e5:
52:a7:51:49:2f:ef:38:12:71:74:af:9a:9a:2a:ba:a9:f3:28:
93:07:ec:97:11:95:31:60:6c:38:0a:36:84:41:08:a8:ef:93:
c7:42:96:3b:09:6a:34:77:d5:f5:ca:f8:54:d9:ab:f4:06:6a:
13:4b:76:a5:a9:b4:3a:1f:5e:7c:7f:1b:c5:f7:8c:e6:6e:b5:
a4:cc:fc:9b:9f:03:3c:cf:45:d2:99:a9:4f:1c:1f:f1:f6:62:
12:6d:02:af:11:33:e1:7a:ff:b0:e9:c3:f5:b9:5b:9d:22:02:
c8:02:f4:1a:13:50:83:15:0a:a4:d8:37:25:6c:aa:1c:06:b4:
75:a0:99:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:23 2025 by rpki-client