Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
File: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft (raw, json)
Hash identifier: m89w9O4DwYvRQ1rLJ6g2Dc2xUw5w0L8m+O64EloBBhU=
Subject key identifier: B6:C9:36:3E:AC:A4:F6:38:C2:DE:53:A2:B7:FE:BC:FC:44:74:80:41
Authority key identifier: 24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
Certificate issuer: /CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Certificate serial: 019A4EF431B63207F0AC61C128900C179CCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:17 +0000
Manifest this update: Tue 04 Nov 2025 13:00:17 +0000
Manifest next update: Wed 05 Nov 2025 13:00:17 +0000
Files and hashes: 1: 1-nkq1gI9c-xmhnINJKTO0eY1F-c.roa (hash: esI7VyyO9I62Rhxi2p/PfcbKRFK2dputujGVLb2DIKs=)
2: JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl (hash: D/DJ+chc4WcIbILUJ/ZawZw4yKLOGzB25mwjB1/m9p0=)
3: NLCollhjrEEQOE-PDJFwvSEkpWg.roa (hash: MVYofLmObC6krPDdhLIsoczQc+WblQhfU3QgFVWsECQ=)
4: ngBNYl-whCyGIde-bD1GXnCv6tc.roa (hash: jOzkj1FabBPArbWH4CC715VSys+dMBcuG0O5ZOY3nPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:31:b6:32:07:f0:ac:61:c1:28:90:0c:17:9c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450bfbf798faeaa7d6a36058d013e24d4bb1d9d
Validity
Not Before: Nov 4 13:00:17 2025 GMT
Not After : Nov 5 13:00:17 2025 GMT
Subject: CN=b6c9363eaca4f638c2de53a2b7febcfc44748041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6e:99:23:19:78:7b:38:65:8a:06:aa:2d:2e:
83:4a:ea:43:eb:86:ed:32:18:6b:27:31:7b:ee:90:
f7:58:4e:8f:8d:ca:14:c7:b8:3d:1d:03:dd:ab:a0:
20:5f:56:c6:b4:0d:2f:81:5d:2a:fc:0c:4c:16:e3:
49:bb:f1:14:4a:a2:26:10:d1:29:46:64:6d:93:da:
bb:9d:23:a1:da:6d:fb:73:96:6b:6a:be:1a:2c:22:
7c:14:6c:cf:27:d2:4c:95:81:0a:41:24:82:3c:88:
08:a1:4e:73:74:85:9f:a6:c9:75:3c:79:19:4e:ce:
fb:9c:c0:04:b8:af:37:ac:60:80:1a:d0:e3:43:e7:
a3:3f:79:9d:1e:2c:43:a2:0d:9a:bd:26:32:63:37:
f6:f9:e7:47:ea:3a:95:0d:59:98:94:d4:6d:89:4f:
38:05:08:d2:c0:7e:24:21:1f:27:3d:31:b7:2d:da:
f8:2d:ff:e0:cf:06:86:1e:83:a4:08:49:d1:09:46:
70:64:e9:50:c4:fc:fd:e3:e2:c3:8c:d6:0d:9f:d1:
11:63:fd:64:52:bf:fc:b4:f6:40:f6:24:82:80:d6:
ca:f4:fb:99:5e:42:9b:79:c6:c7:f3:a8:f1:9c:4e:
04:ee:2e:e4:75:38:36:7d:7d:79:2c:a0:f1:dd:6d:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C9:36:3E:AC:A4:F6:38:C2:DE:53:A2:B7:FE:BC:FC:44:74:80:41
X509v3 Authority Key Identifier:
keyid:24:50:BF:BF:79:8F:AE:AA:7D:6A:36:05:8D:01:3E:24:D4:BB:1D:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/19c76f-2f67-421c-84ae-dd549f3b83bf/1/JFC_v3mPrqp9ajYFjQE-JNS7HZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a9:74:a3:62:96:ae:ef:27:b5:7a:73:01:fc:d3:cd:b3:b2:
e5:a1:0f:07:ce:64:cb:42:a7:ae:1f:73:09:a8:35:94:75:26:
07:63:fa:bf:89:50:20:47:c8:53:9c:1f:0a:ae:b6:33:c1:20:
fb:9f:97:0e:8e:ea:20:d2:8d:ca:5e:7e:b1:fc:ce:f4:69:93:
74:86:e6:67:f1:99:d2:f3:49:05:9a:26:9b:a8:38:96:c8:95:
7b:96:30:8d:1c:4b:31:29:fc:ca:8c:f6:a3:ba:6f:26:02:b3:
cc:51:52:b8:00:52:93:d7:de:14:3f:fa:b4:1e:dc:20:78:b7:
a6:b9:b6:3b:c4:39:9e:d9:58:2e:ad:a2:95:56:9b:2a:2f:5f:
82:70:10:bf:87:9e:f7:ed:10:0e:26:a5:94:08:5d:22:6b:55:
4b:44:26:7a:ba:67:4b:8e:5c:d4:58:78:50:67:70:e5:78:22:
31:63:60:c7:3a:92:ec:5b:71:7d:69:cb:9b:c3:46:78:b4:90:
29:63:78:e1:ae:33:48:56:b6:9d:14:6c:bd:b6:10:1c:fb:8e:
0e:a5:d4:cd:fb:95:f3:fb:12:b1:2e:6a:b7:7a:b2:2e:a4:44:
27:79:d6:0f:94:82:30:68:9d:5f:a0:96:41:ca:50:69:c1:27:
70:f2:7f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:46:14 2025 by rpki-client