Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: e9vCiJvqrDX4cTMxNr/ZzPpOL7tZRsnMRoj76M4X+MA=
Subject key identifier: 7A:17:AB:D1:AB:2A:CB:38:6F:8B:34:67:23:67:EA:F2:35:17:44:0B
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 019A4E188C1092249A66B5821F5B26D6F052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 0EAD
Signing time: Tue 04 Nov 2025 09:00:22 +0000
Manifest this update: Tue 04 Nov 2025 09:00:22 +0000
Manifest next update: Wed 05 Nov 2025 09:00:22 +0000
Files and hashes: 1: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (hash: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=)
2: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: DqbG5G8IOxuBoDMgokriMr1mxiv/g3e/im5xP+zHPpI=)
3: _8hSLgr4JdqEI1Dpn8hoZhNP1qQ.roa (hash: GqMn4/1oRrYEDz1sgi+iXh7bgMGiwNGyyfe2qMxH+7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:8c:10:92:24:9a:66:b5:82:1f:5b:26:d6:f0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Nov 4 09:00:22 2025 GMT
Not After : Nov 5 09:00:22 2025 GMT
Subject: CN=7a17abd1ab2acb386f8b34672367eaf23517440b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:f5:48:73:04:bf:7c:0b:77:60:3e:c6:eb:
25:3e:81:a0:80:66:c5:86:bd:a2:be:55:1f:a0:df:
3b:34:da:c6:ba:62:16:c7:dc:bc:f0:52:5f:81:26:
e2:b4:16:64:5c:55:65:fa:66:4a:29:dd:54:be:df:
77:78:d7:60:58:90:8d:61:ed:ad:d0:1f:0e:2c:53:
5d:62:c0:2f:b9:9b:02:08:99:58:69:9c:3f:92:84:
d0:78:a0:af:c7:81:c1:81:75:62:f0:9c:b2:7d:fb:
4f:9a:83:95:0f:e2:45:67:b4:d6:a1:ae:86:98:4f:
8f:33:9a:f1:d3:4d:64:72:19:bf:3f:48:bf:f8:2d:
c3:c3:ee:a1:a6:a2:82:87:4f:72:50:9f:bb:26:84:
7a:db:7b:73:86:fc:4b:74:e2:ab:5a:c8:74:28:0d:
3d:a0:30:43:6a:44:c5:1b:12:b9:cf:2d:85:84:0b:
20:f9:f0:57:9f:f1:7a:ea:47:ae:18:81:3d:4e:ff:
2d:dd:15:cc:83:39:c0:1e:fc:9b:88:99:cc:9e:18:
a3:50:2f:e0:ed:6b:f9:1e:ea:c7:00:c7:24:23:0f:
0a:c0:fe:1a:3b:08:5b:99:ee:32:9e:82:fb:56:85:
45:9e:72:60:ad:b3:a4:ba:e2:86:89:69:72:43:4e:
c3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:17:AB:D1:AB:2A:CB:38:6F:8B:34:67:23:67:EA:F2:35:17:44:0B
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e2:52:1e:10:50:06:36:aa:09:ed:b5:cb:8a:80:d4:1a:8f:
0f:15:6e:6d:2b:89:b4:a0:a5:94:e2:21:0e:24:a3:a6:eb:c3:
44:14:0e:58:f1:80:b1:a7:86:79:e9:c6:30:4a:37:68:77:f3:
48:46:55:de:65:d8:ed:42:d1:c1:55:1a:5b:d3:f1:25:01:92:
fc:22:ae:7a:a3:0b:88:30:9d:c2:43:dc:56:e2:c9:e2:51:00:
0e:f7:77:ed:ff:46:a8:00:b9:42:32:0f:39:44:a8:c8:12:5a:
d5:40:a8:fa:bd:2e:ff:7b:62:ae:3e:92:ca:7c:2e:7b:0d:04:
1d:a6:09:30:30:e6:ac:e5:85:f4:dc:4b:9b:b5:68:c7:d9:02:
f7:3e:72:f5:d8:6d:7e:c1:09:22:67:f5:a1:4f:bb:11:24:28:
dd:77:3c:6c:1c:ba:88:e6:5e:82:a7:b5:e4:c2:3d:cf:19:c7:
7b:ba:b7:8d:5a:b6:7d:2a:a3:bc:3a:cf:34:59:e1:70:cd:df:
d9:e4:18:ea:2f:16:59:43:3d:e9:a3:68:28:ea:0f:ea:d0:c8:
40:53:ab:2b:09:90:81:99:67:6c:8e:a2:c2:8d:6d:87:e4:d7:
64:ac:e5:95:6c:f6:bc:98:b7:1c:0e:2b:f0:0e:e3:e6:cd:b5:
79:b9:f9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:37:56 2025 by rpki-client