Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
File: Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft (raw, json)
Hash identifier: t4Ww/0g6B3VFqPahB/54+Xah0HXFjCcpGL8Mxgu3t/o=
Subject key identifier: 29:74:93:FC:43:C8:C2:11:7B:ED:82:DE:F7:98:89:DB:17:AA:2F:DE
Authority key identifier: 26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08
Certificate issuer: /CN=265e85f8262888b54a849bdcf4cec50316911a08
Certificate serial: 019A4EF5CF21359ED5B34C6FA05665050F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
Manifest number: 059F
Signing time: Tue 04 Nov 2025 13:02:03 +0000
Manifest this update: Tue 04 Nov 2025 13:02:03 +0000
Manifest next update: Wed 05 Nov 2025 13:02:03 +0000
Files and hashes: 1: JLn2-fTGyC2xpSevRCFHgEEXDMM.roa (hash: FRV3MQqTud+Qm1Qqb2d3CxKErVFv6q4kbbzR6kYGMOc=)
2: Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl (hash: BlbU0IEk4bL2OVsIm4x/NzugTOl7T9lGQ0nu+pERrcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:cf:21:35:9e:d5:b3:4c:6f:a0:56:65:05:0f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265e85f8262888b54a849bdcf4cec50316911a08
Validity
Not Before: Nov 4 13:02:03 2025 GMT
Not After : Nov 5 13:02:03 2025 GMT
Subject: CN=297493fc43c8c2117bed82def79889db17aa2fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:96:ff:7f:ab:95:1b:18:8f:b5:46:36:4e:9b:
b3:25:2e:ed:b7:28:dc:8a:80:73:94:8a:8e:ee:74:
a6:18:64:20:d4:08:90:9b:a7:42:27:41:ce:c6:69:
90:c7:21:76:23:eb:d9:c2:f6:3b:3b:d5:13:f4:0e:
47:a7:b0:d9:84:0d:68:f9:7b:5d:ae:d9:6f:05:cb:
7e:bb:1a:80:25:10:a3:d6:95:8a:a6:c3:09:06:13:
02:68:ec:6b:de:ab:01:7d:65:5d:38:c5:79:91:d3:
6b:7e:64:bd:75:55:c2:1b:40:4a:5b:c4:29:a4:37:
ba:bd:7d:a7:2b:a0:37:bd:e8:cf:51:fb:80:e1:58:
c0:e9:a5:e3:e2:0f:3d:82:82:f2:9a:62:87:b6:d5:
b1:9c:5c:c6:21:01:39:38:4a:71:6e:49:57:ec:57:
5c:de:7c:3b:71:f0:5a:cd:83:bf:9d:6f:fb:05:be:
8e:a5:9c:b3:22:ce:c5:a4:74:84:13:3a:cc:2d:da:
e8:86:b2:b8:d7:29:6d:f1:51:68:33:57:88:3e:4e:
fb:60:83:8d:68:25:c4:c4:9c:f8:9c:db:0b:24:67:
49:bf:be:b1:ec:b5:f0:4a:00:c2:d9:8a:35:91:1e:
51:54:8e:9f:f4:02:23:3b:f2:ba:c8:16:10:3b:eb:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:74:93:FC:43:C8:C2:11:7B:ED:82:DE:F7:98:89:DB:17:AA:2F:DE
X509v3 Authority Key Identifier:
keyid:26:5E:85:F8:26:28:88:B5:4A:84:9B:DC:F4:CE:C5:03:16:91:1A:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/491925-df90-4014-8caf-5aa367d6ab6e/1/Jl6F-CYoiLVKhJvc9M7FAxaRGgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b5:f0:50:d1:25:74:86:bd:a0:7b:54:67:4e:92:e3:1e:a3:
9a:1c:bc:1d:16:74:25:65:66:e0:2a:ed:25:f4:5f:2c:ca:de:
c7:2d:4a:ed:d2:06:13:d2:39:dc:62:dd:49:91:17:72:6f:cc:
a1:07:a1:db:2a:36:f6:6d:15:64:4a:20:fa:b5:e2:f3:51:5c:
d5:3b:2f:5d:a8:84:30:02:5a:bf:b2:8a:1a:97:2b:d1:d7:5d:
d3:9a:d2:7b:f1:59:99:4e:8b:7a:82:22:91:57:53:59:43:fc:
a6:c0:be:62:f6:51:32:66:8a:21:29:9d:ea:2a:06:60:03:80:
ba:1e:97:9e:30:32:21:6c:d6:f3:bd:67:99:80:12:dd:fa:ba:
f8:7a:66:45:91:62:18:4f:02:ce:d8:db:7c:dc:52:ab:cf:c4:
c1:a5:1d:16:45:a6:d5:fd:ec:22:50:e4:45:c5:8b:46:2d:5d:
9d:6d:f6:5c:cd:88:a7:d8:90:46:65:91:47:48:21:d9:ad:15:
82:b6:65:75:18:ca:97:ff:db:33:87:97:7a:87:1a:ee:c1:fc:
a9:90:7f:65:6f:e2:c5:ff:32:32:0f:06:3b:c3:cd:c0:3f:67:
8d:c4:2d:a9:3c:ff:22:00:1d:15:ee:18:38:a7:81:73:44:02:
e6:21:91:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:00 2025 by rpki-client