Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
File: JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft (raw, json)
Hash identifier: /PNlAgeviuZDDayAZj1y+WirtgJunTcXJcRFupQCigM=
Subject key identifier: F9:27:05:D9:EC:DB:1A:48:39:5D:BC:98:51:5E:FF:9D:D4:80:19:13
Authority key identifier: 25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
Certificate issuer: /CN=25572e8f93b18a401cfecdf62586783858cc5f14
Certificate serial: 019A50071E8D3B6FEBC2AA14DA9F3ACCD958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 18:00:35 +0000
Manifest this update: Tue 04 Nov 2025 18:00:35 +0000
Manifest next update: Wed 05 Nov 2025 18:00:35 +0000
Files and hashes: 1: DTLOnLZIHhlPP7pvWpWEUTLWHQg.roa (hash: QLz4ZYz1buP6/UJvo5YrZ+4VolEyE3vVmr+8wwogqDA=)
2: JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl (hash: ZgM0tMwxZgUBB45DHgPJ5stATqf3yK/PGgNZ7+zatO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:1e:8d:3b:6f:eb:c2:aa:14:da:9f:3a:cc:d9:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25572e8f93b18a401cfecdf62586783858cc5f14
Validity
Not Before: Nov 4 18:00:35 2025 GMT
Not After : Nov 5 18:00:35 2025 GMT
Subject: CN=f92705d9ecdb1a48395dbc98515eff9dd4801913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:9e:80:cd:92:cb:55:40:53:8d:33:29:3c:
bc:32:6a:a8:4c:63:cc:d2:6b:19:99:3d:b2:50:41:
fa:79:a7:68:4e:4e:b4:fb:6f:cf:1e:9f:40:a2:96:
77:16:57:ac:1b:12:91:6d:bc:74:94:c3:cb:3d:48:
eb:48:fb:25:cf:48:13:ed:5d:ee:69:c6:6f:e8:53:
06:4b:c8:be:2d:71:8a:7b:c9:78:43:3d:ce:5c:7c:
04:47:1a:76:67:ed:0c:e7:f5:9f:6d:3a:c3:56:4c:
dc:fe:a8:4a:9b:01:6a:ab:bf:3c:15:3c:a1:11:ae:
c9:87:5c:3b:16:43:5f:d4:bb:f5:77:cd:5d:29:32:
d4:59:75:f7:c9:75:90:2e:a3:33:3c:26:72:a7:46:
10:5e:bb:65:a7:69:93:b0:5b:4a:0c:48:fe:67:1b:
01:d8:d4:f2:fc:30:3f:40:45:06:97:ee:24:51:d3:
bb:93:0f:86:25:35:ec:0d:c4:14:12:09:b8:1e:9d:
68:59:34:6d:7d:af:57:6c:2a:fb:84:d1:35:ec:06:
b6:7f:42:63:2f:3d:be:3b:66:15:ed:48:12:34:20:
7c:7c:16:58:7d:bd:5f:be:81:c1:58:62:f8:37:9e:
c1:17:a4:e4:81:b5:5d:38:99:09:1f:e4:92:08:f3:
f0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:27:05:D9:EC:DB:1A:48:39:5D:BC:98:51:5E:FF:9D:D4:80:19:13
X509v3 Authority Key Identifier:
keyid:25:57:2E:8F:93:B1:8A:40:1C:FE:CD:F6:25:86:78:38:58:CC:5F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVcuj5OxikAc_s32JYZ4OFjMXxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/4b1a35-4a84-414b-b073-66d35e525039/1/JVcuj5OxikAc_s32JYZ4OFjMXxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5b:f2:98:f9:08:98:e8:64:02:7b:4d:52:9a:03:07:b9:53:
d2:14:66:83:8f:d8:a9:9b:97:dd:d0:28:7a:60:b8:80:9c:46:
ee:56:30:1d:4a:b3:1b:5a:4f:8f:68:6e:39:b0:de:34:fe:20:
e0:c2:f2:ef:02:fd:8d:51:78:06:46:8d:83:d4:ae:b1:52:24:
a1:09:03:ea:9e:56:08:d0:60:ec:ad:cc:37:18:95:94:c7:ad:
5c:94:9e:01:ee:67:21:d6:f2:0d:a1:9e:7a:74:ca:f1:e0:d2:
85:73:b9:eb:87:9d:a4:9c:1f:7c:38:f3:20:6a:cc:aa:30:70:
81:36:85:13:2a:6e:de:d3:85:f2:71:60:51:e0:76:1f:5b:ce:
c3:b2:a3:3e:fb:e1:18:89:61:57:b0:de:b7:f5:39:6d:d5:8c:
4e:b2:33:0f:3c:b7:c9:c1:c6:4a:05:53:c3:62:e9:6b:8e:22:
7c:a5:42:c0:45:09:31:05:c7:09:2a:3a:de:00:9b:27:41:4b:
6a:91:f1:55:07:e4:10:23:03:7b:da:4d:75:d8:9b:10:57:87:
ef:86:44:39:a7:98:b0:25:d5:7d:16:78:cd:7f:d0:8c:dd:26:
4c:5c:1e:a8:05:3e:61:e7:1e:fb:58:d7:0a:57:3b:36:23:53:
43:b3:52:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:14:32 2025 by rpki-client