Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
File: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft (raw, json)
Hash identifier: Q4R5AKdtxPcJ0VvVjchGCAXssXIlhBBvKXhCBh3to5I=
Subject key identifier: 0A:7F:C6:72:2F:09:9A:DF:42:22:E3:4C:D8:AB:A3:2F:6C:C8:3C:E1
Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
Certificate issuer: /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Certificate serial: 0199FDD8B9FA3AD46351079AAB748F4A5567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:01:02 +0000
Manifest this update: Sun 19 Oct 2025 19:01:02 +0000
Manifest next update: Mon 20 Oct 2025 19:01:02 +0000
Files and hashes: 1: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl (hash: LuWvVL+7PzccTFZk2NhJ9DoQsxAoxAgZXS9voUJsNrE=)
2: O7SXZPMFV3Am85txyKq-wzV0mJk.roa (hash: E3gQb/T8VdnvnhmQexSN7n2IkCaiiXjYdA/H9y6oGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:b9:fa:3a:d4:63:51:07:9a:ab:74:8f:4a:55:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Validity
Not Before: Oct 19 19:01:02 2025 GMT
Not After : Oct 20 19:01:02 2025 GMT
Subject: CN=0a7fc6722f099adf4222e34cd8aba32f6cc83ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:94:95:0c:3a:c5:81:48:63:6f:9d:81:90:2a:
68:21:18:f1:af:67:0f:32:4a:06:e6:5b:85:9e:15:
95:15:4c:e4:10:ab:a1:0b:c7:af:2f:a3:5c:65:2c:
25:2c:d9:62:7f:61:e5:f0:92:2a:2f:97:f6:9c:d0:
4b:55:68:9b:3d:39:41:50:36:aa:f5:10:46:05:84:
e6:0a:9a:52:38:d6:fa:77:94:24:cd:80:b0:23:0d:
c9:21:5c:6b:4c:2f:84:db:1c:4f:5b:67:7b:e4:6e:
0f:ab:69:cb:1b:23:3a:aa:95:3f:8e:a4:f9:5c:6e:
d9:2c:b6:e8:25:94:64:86:10:1a:3e:f3:a8:65:39:
3f:4e:f0:24:e4:af:97:6d:72:26:77:af:6f:7c:9f:
fc:44:ea:04:7e:13:7b:dc:48:d0:21:70:dc:92:64:
07:67:70:19:0d:51:f1:1e:d9:d2:ed:64:14:8a:7a:
13:d2:31:02:fb:15:22:e6:59:b9:55:d2:af:d0:e0:
74:9c:c5:bd:4c:ac:a9:8b:d1:36:a9:48:57:ed:94:
e8:08:bc:d5:03:cb:bb:d3:76:24:3f:f1:d6:d8:96:
98:39:fa:5a:fa:71:41:3c:e5:2c:48:fc:f3:96:31:
89:e1:47:a7:89:cd:58:be:cb:db:8a:64:39:d1:c4:
83:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7F:C6:72:2F:09:9A:DF:42:22:E3:4C:D8:AB:A3:2F:6C:C8:3C:E1
X509v3 Authority Key Identifier:
keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:7b:32:52:0d:71:d6:26:cb:e6:93:49:c5:57:02:f7:f7:68:
dc:ff:9c:27:27:96:ec:ff:28:12:b3:bd:a1:04:8c:12:63:ac:
90:bd:32:3f:a9:1c:13:c3:54:98:a7:ee:95:78:49:fa:cc:ba:
61:d2:2f:95:a4:9c:65:57:14:0d:d6:58:68:c9:51:71:b7:95:
0a:6d:cf:bc:48:75:14:0f:d6:75:4b:43:2d:79:cc:36:0e:eb:
55:19:58:f3:39:63:44:74:8b:f1:45:9b:3c:f6:1a:38:ea:4a:
fa:e3:56:1b:57:d9:e1:d5:e4:e2:9e:ec:fd:20:85:ba:44:15:
20:ad:39:92:8d:ce:54:88:51:10:15:48:1a:76:22:d2:08:d1:
5a:ff:ea:d6:46:50:15:ec:88:26:05:8e:eb:01:2f:7b:f8:64:
bf:0f:dc:17:c3:f8:6b:43:3a:5b:3a:17:c3:c4:11:7f:44:e8:
c9:cd:bf:1b:29:69:27:13:75:c1:1d:78:10:94:70:9f:f0:72:
56:7e:13:22:84:3a:4b:75:f1:1c:f4:63:35:11:0d:ed:cd:76:
ba:80:06:17:4f:5a:a5:df:58:1b:58:76:d9:5e:4b:b2:27:99:
0c:23:a8:03:35:8a:38:f9:67:4c:90:af:d6:56:af:7f:7d:03:
c9:ca:c1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:24 2025 by rpki-client