Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
File: JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft (raw, json)
Hash identifier: Pt6D9dWlZ0lUOsn/rj1GmJaj5EmsxbjgUK5E5OM3nd8=
Subject key identifier: D6:8D:CF:C1:13:54:B9:4B:91:CD:4F:BE:53:24:44:3C:30:4D:A0:0A
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial: 0199FDD962CF3A5B1D903B1B3EC9A2A33E10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
Manifest number: 04B7
Signing time: Sun 19 Oct 2025 19:01:46 +0000
Manifest this update: Sun 19 Oct 2025 19:01:46 +0000
Manifest next update: Mon 20 Oct 2025 19:01:46 +0000
Files and hashes: 1: JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl (hash: +DfC7GHKvY522ib5SF2hd9dB0WkPXXYPb0bqs9Vud9Y=)
2: K6bM5601EY4aWoYwlB_yWaSAYWg.roa (hash: q1/+kZ6yqPL4e9VCBVnSxVBfdHwsRb33uiurUpP8SWw=)
3: Qp56EhXo02rtbXG9bpMugv8X2n0.roa (hash: TyqFIVR8sVZ/spucHhOleEaJbMKaFD4U+qZbekh1SEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:62:cf:3a:5b:1d:90:3b:1b:3e:c9:a2:a3:3e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Validity
Not Before: Oct 19 19:01:46 2025 GMT
Not After : Oct 20 19:01:46 2025 GMT
Subject: CN=d68dcfc11354b94b91cd4fbe5324443c304da00a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:d2:e7:d1:ce:06:5c:79:9e:32:4b:f9:ae:1a:
ca:e1:e7:bf:65:c9:92:0c:46:3b:9f:92:f3:a7:3a:
1f:ba:1a:72:5b:d3:db:c8:dd:b9:aa:e6:42:93:de:
f3:d7:16:b4:90:2c:cc:5d:fe:53:cf:4b:01:c1:c0:
3f:75:d4:ac:1d:07:7a:9c:df:60:75:18:ce:83:9a:
3d:de:e1:e6:7f:15:ab:bb:c3:b1:f7:f0:7e:e3:83:
a4:34:82:15:97:ab:0f:7f:98:32:b8:ef:a5:b6:36:
25:2f:ac:54:86:99:52:71:b4:38:de:0f:7d:ca:bc:
19:75:d7:d5:39:84:d8:be:0e:b7:19:76:72:90:80:
fd:7a:06:fb:a0:04:3e:ee:6f:66:ad:a9:11:7b:42:
28:9d:31:1f:40:6e:e5:16:a8:64:51:7d:ce:12:5f:
6d:c1:cc:2b:48:61:6f:1d:71:52:40:5b:52:5d:1a:
91:c3:62:6d:a1:a3:db:1b:80:47:ab:26:6c:14:dc:
26:18:2c:a6:11:41:6a:3e:70:70:b5:00:ae:c5:0f:
6e:cf:7b:90:f1:db:da:88:7d:c2:bc:38:70:97:70:
86:06:f5:df:3d:d4:7c:a7:bb:71:b3:b7:5a:cb:3e:
d3:28:e0:c9:76:df:31:4a:96:47:35:66:28:23:d7:
32:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8D:CF:C1:13:54:B9:4B:91:CD:4F:BE:53:24:44:3C:30:4D:A0:0A
X509v3 Authority Key Identifier:
keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:03:e2:a2:c7:ce:07:42:ca:14:5e:f2:cd:88:ff:c4:fd:a7:
d1:87:1e:77:51:7a:9f:6c:c5:a1:12:ff:a4:84:1d:2a:e3:7b:
87:fb:7c:a2:03:8c:21:53:08:62:6a:8d:1e:a9:e0:6b:d6:81:
87:8a:60:57:f5:49:23:c9:f8:09:60:2d:a2:2f:b0:0f:a7:fd:
09:5b:1c:fe:48:4d:42:e2:21:52:9b:c1:d9:e7:70:fc:75:55:
66:eb:ff:82:06:0c:9e:97:05:50:34:6d:53:29:7b:fc:73:e7:
95:de:08:fd:2d:bb:2d:a5:b5:61:dd:26:05:52:bb:f2:ea:0d:
1c:a3:58:b0:46:a0:a2:e7:e1:a1:86:0c:48:57:03:a1:91:81:
18:8d:cb:d8:b4:94:82:d5:c5:a5:2a:a7:d8:89:fc:d8:99:55:
a6:83:f6:c7:7a:5f:a1:fb:2e:ee:09:07:20:17:08:40:10:0f:
b9:ff:69:4d:bb:89:ec:30:e1:58:3c:bf:63:c3:71:c7:5e:06:
4c:46:7e:f7:12:e8:44:a0:2f:ce:f4:34:2c:af:1f:ec:34:13:
2d:83:79:68:6d:d9:fd:3a:b2:29:bb:d1:c3:05:09:97:74:7f:
cd:f3:e4:7b:2b:09:fe:4b:89:16:f4:84:8c:34:ae:54:3f:98:
af:35:7e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:57:25 2025 by rpki-client