Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
File: JBOjQZZ67b5SqLEcecsTkRpKn3c.mft (raw, json)
Hash identifier: MIDEy5230ecASZXN2KisYkc3zEYmRY3qiIR7rjKFr2E=
Subject key identifier: F6:26:5F:36:9F:CF:40:BC:C3:B2:09:FA:6A:A8:12:97:0D:FA:D7:FC
Authority key identifier: 24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
Certificate issuer: /CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Certificate serial: 0199FFC79ACDE2AA5F8D527E958F000F5871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 04:01:35 +0000
Manifest this update: Mon 20 Oct 2025 04:01:35 +0000
Manifest next update: Tue 21 Oct 2025 04:01:35 +0000
Files and hashes: 1: JBOjQZZ67b5SqLEcecsTkRpKn3c.crl (hash: a0YYwJf2vIRbDzspg77P5wBg5DzXtCGyeSczQQ1jJMY=)
2: Q9tpjWUnZ29Md-50Kxu_HQRQ-Mk.roa (hash: zHTjqQivC3Wds3ZRsFbwTssRdBvxgxtLcNo5p+QkSKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:9a:cd:e2:aa:5f:8d:52:7e:95:8f:00:0f:58:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Validity
Not Before: Oct 20 04:01:35 2025 GMT
Not After : Oct 21 04:01:35 2025 GMT
Subject: CN=f6265f369fcf40bcc3b209fa6aa812970dfad7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:60:78:05:b7:7e:96:ee:18:02:37:01:a2:
4f:82:11:59:e1:ef:1b:a8:b1:01:aa:af:35:ad:92:
6e:67:38:4b:1a:24:db:b8:dd:62:31:c9:44:a0:f6:
6a:b3:cc:7a:7a:8b:a3:16:d5:fb:e6:1f:bd:cd:b2:
85:19:8d:f3:b9:08:46:3f:5b:52:37:69:72:0a:6f:
5b:f6:3c:bc:51:54:b0:b7:34:97:69:a0:36:ed:d0:
ef:87:24:e7:e0:00:40:77:18:c0:fe:9d:a6:c1:85:
da:07:7e:12:2e:a6:27:79:27:6f:9e:d3:10:69:cb:
c6:ab:ed:a2:ad:f6:f9:fd:18:ed:1e:9d:c1:b6:0d:
b8:b8:14:97:b4:12:11:1a:8f:9e:ec:f3:0d:66:cb:
79:84:ec:9f:cc:e6:8c:01:49:27:89:b0:e5:2f:9f:
5d:35:b5:93:40:3b:48:b9:a0:81:ea:2c:1b:8f:62:
84:d4:78:de:93:ac:37:f1:a5:9a:dd:3e:00:c9:ee:
59:99:8b:6a:11:c4:4e:90:35:ae:3a:da:d2:ba:0c:
b1:0a:73:81:07:d9:ed:03:29:2c:f7:64:d4:32:3e:
c5:91:1f:47:0e:7d:34:b1:0d:7e:e7:ed:c1:10:e3:
18:3d:69:2a:9b:a9:9d:1d:5b:be:2c:37:9b:46:d3:
1f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:26:5F:36:9F:CF:40:BC:C3:B2:09:FA:6A:A8:12:97:0D:FA:D7:FC
X509v3 Authority Key Identifier:
keyid:24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0c:3f:cb:97:34:a2:47:44:3c:45:57:cb:01:12:fb:8c:45:
0e:b4:d0:f0:19:3a:f9:2a:46:d8:21:29:70:60:fb:79:c5:5f:
93:37:1c:2d:e5:91:28:02:ea:9d:00:7c:94:d7:1f:59:4d:2c:
d3:c8:45:d9:de:02:40:11:f7:15:62:4b:7e:39:cc:ea:2f:12:
7f:a2:ad:9c:a1:4e:20:17:c5:85:1a:e3:d9:51:c5:c8:64:26:
1b:57:13:47:2d:dd:27:b2:97:27:71:fc:cf:a6:b9:6f:ee:2c:
50:d5:ab:c4:bc:91:21:7e:ef:dc:d2:5f:e7:ff:e5:11:91:2a:
52:1a:88:43:7b:2b:68:8d:98:cc:49:12:37:4a:c1:3f:15:0f:
5e:19:37:11:fe:5a:b6:9a:7e:83:4d:08:da:df:79:b8:98:11:
2a:9c:87:61:5e:ed:34:7b:bf:6b:1b:bc:20:e3:9f:f1:75:e9:
47:81:74:b1:cf:18:cb:93:03:f5:73:de:f0:4b:dd:48:21:a6:
e8:56:77:09:d7:1c:f6:51:cb:65:9b:68:12:15:d8:83:ae:cd:
18:a3:0a:56:82:f2:78:3c:41:c8:7b:05:bf:af:44:f1:f0:50:
93:51:b5:d5:0d:63:c2:2f:b0:94:f8:e4:c6:05:69:02:3b:9e:
28:3a:d7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:38:20 2025 by rpki-client