Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
File: JhRBGJnXIfND7So5YplpQXtbZV0.mft (raw, json)
Hash identifier: 3YoNM+t5tfA/ByKTPnZMfy/SOje6PUQEoyVFAiDUN3A=
Subject key identifier: 06:2F:9C:4F:47:AD:0C:F3:D1:86:DB:05:2B:12:7B:10:3B:E7:DB:15
Authority key identifier: 26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
Certificate issuer: /CN=2614411899d721f343ed2a39629969417b5b655d
Certificate serial: 0199FD6B575932FF453CE2E60752FA91840D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
Manifest number: 1059
Signing time: Sun 19 Oct 2025 17:01:34 +0000
Manifest this update: Sun 19 Oct 2025 17:01:34 +0000
Manifest next update: Mon 20 Oct 2025 17:01:34 +0000
Files and hashes: 1: BW4BmUKCyDozy984WvALErmmyWk.roa (hash: NoDLKqIq52rdkg1nyOBS52VEKKgBzHcZpmlA/5oZ2N4=)
2: JhRBGJnXIfND7So5YplpQXtbZV0.crl (hash: PXGc8rxkwB20fq/BlHcOeo5xMC4+PHHRFeeerKlDH4g=)
3: kRjRCT1hQD1ho57w--1uU8Vfnmw.roa (hash: hC2/HbU7Mf5QSInHXiOZZl8RFNv/DCEQb2nhsuAiYAk=)
4: knYcxIk4gBoyhnJA7zGhUiEOoU0.roa (hash: Pb2aA+Tft7i/Jp7vyucHlf/5bNws4Usmn/wz+ukU/co=)
5: mDIQfv7lheWlkNzFn-WZkIXBSMc.roa (hash: v+ukO0uJ0pKEoYLwa+X3bJdigzbF9dbIADjWYWJJUdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 17:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:57:59:32:ff:45:3c:e2:e6:07:52:fa:91:84:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2614411899d721f343ed2a39629969417b5b655d
Validity
Not Before: Oct 19 17:01:34 2025 GMT
Not After : Oct 20 17:01:34 2025 GMT
Subject: CN=062f9c4f47ad0cf3d186db052b127b103be7db15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:0b:5b:3e:c7:1b:80:fa:61:f4:d5:07:f8:
c1:0a:24:14:ca:d9:2a:51:a6:e5:bc:a3:80:1d:ad:
8e:84:4d:ee:6a:b9:1a:26:e3:ee:62:84:95:23:35:
f6:eb:12:1a:cc:33:4c:6f:48:5d:c5:8a:c5:da:96:
df:f6:30:98:57:07:23:27:64:f7:db:5e:b9:40:81:
e5:20:06:97:ce:de:58:ef:3f:f8:fc:11:a1:ea:e8:
dc:36:f9:e5:5a:17:ca:b7:e5:dd:48:a0:94:c0:bf:
e9:f2:95:31:bd:f5:55:a8:e4:ed:8f:fb:73:42:03:
16:0a:eb:25:91:8e:75:cd:d7:40:72:e1:8d:65:d6:
00:95:5a:09:c8:8e:79:26:1b:6f:5d:9c:78:c9:5a:
46:6a:cf:c3:33:63:ad:95:18:01:1e:d1:9c:04:e2:
84:a2:58:d6:e4:17:74:a8:be:5a:46:61:09:45:2e:
e9:b7:15:10:f9:e8:18:c5:26:5a:85:53:db:2f:bc:
a3:4b:d3:e3:0c:1e:0e:31:4c:e6:7f:7e:00:d7:f7:
08:9d:0b:1e:b2:61:9f:da:ad:7d:10:48:e8:ce:ab:
f8:45:f2:56:db:ae:00:39:41:80:14:7f:9e:63:c5:
f9:cd:d1:07:24:4f:f6:2e:ec:48:62:e5:1b:09:bf:
a7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2F:9C:4F:47:AD:0C:F3:D1:86:DB:05:2B:12:7B:10:3B:E7:DB:15
X509v3 Authority Key Identifier:
keyid:26:14:41:18:99:D7:21:F3:43:ED:2A:39:62:99:69:41:7B:5B:65:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhRBGJnXIfND7So5YplpQXtbZV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/dc4e00-78b6-475b-85c4-02144551299f/1/JhRBGJnXIfND7So5YplpQXtbZV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7e:e9:f3:04:ed:3c:0b:94:7d:1e:ef:56:76:cf:e6:e4:f8:
1a:a2:9f:c1:36:b6:dc:f1:48:f3:02:f9:09:8c:23:4a:1f:18:
44:24:97:37:66:6c:d1:4b:4b:54:1b:2d:4a:68:4c:1b:e0:9c:
cf:29:80:2d:16:46:4f:8b:a9:38:31:fb:cf:37:1d:58:88:02:
d3:0e:5c:00:f8:1c:f8:0a:0b:80:84:c1:f9:02:6f:21:38:f2:
49:cb:87:ab:f9:9b:ff:60:6e:b0:21:5e:6f:8b:65:4c:d7:4e:
11:90:b1:3a:3b:a3:72:1d:02:de:cd:c7:96:d1:9a:c2:52:0a:
ca:b2:8e:e6:5a:ac:dd:b7:82:eb:6e:95:32:d8:eb:13:a5:d3:
83:1b:40:92:db:21:3e:35:1a:48:c8:d6:2f:36:e1:a4:10:43:
5d:b8:ea:25:8b:c8:b2:b3:62:ef:a0:3d:da:17:ba:af:a1:b0:
b1:30:3c:9f:0f:f4:8f:2a:f6:83:c2:0d:80:e2:f1:96:69:55:
ff:93:72:a8:5b:98:9e:90:0d:d5:77:0c:27:ee:b5:61:33:f8:
43:20:ad:18:1a:29:53:57:d5:49:d5:92:0c:9d:c8:dd:06:39:
dd:70:d0:80:c2:05:6a:95:d4:07:b6:65:b0:0d:80:f3:45:8f:
db:25:9e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:38:07 2025 by rpki-client