Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
File: JFKrHS0pusnVLrR53mTAcA_Gck8.mft (raw, json)
Hash identifier: Lxa/yNUjTmmCdZsZpJZhl1zUn++iNHmYI0zFHnbEgV0=
Subject key identifier: 1B:70:95:8C:F8:B7:53:60:FC:E7:5E:8E:55:CC:0F:99:FC:EA:70:AA
Authority key identifier: 24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
Certificate issuer: /CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Certificate serial: 019A4E4F36CAC140BFD36BEF8393CA36D8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
Manifest number: 1468
Signing time: Tue 04 Nov 2025 10:00:05 +0000
Manifest this update: Tue 04 Nov 2025 10:00:05 +0000
Manifest next update: Wed 05 Nov 2025 10:00:05 +0000
Files and hashes: 1: JFKrHS0pusnVLrR53mTAcA_Gck8.crl (hash: WhEdTeWr+mIXRFoehoQRHbHnLI4RTOEjr0zRQ9XKlg4=)
2: RB71fE5v8RGGcKN579UUTlog13U.roa (hash: UN1kwnBlPArV0/xDWD7jjI+PopLvxSAGBUZUVl+Xi54=)
3: t_n8d9oI1aH-bEIOwJVaWHaCJBg.roa (hash: zQKAJ7WWLqDL9BuKcs6iIJKFW7l+LUz0khsopSEliO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:36:ca:c1:40:bf:d3:6b:ef:83:93:ca:36:d8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452ab1d2d29bac9d52eb479de64c0700fc6724f
Validity
Not Before: Nov 4 10:00:05 2025 GMT
Not After : Nov 5 10:00:05 2025 GMT
Subject: CN=1b70958cf8b75360fce75e8e55cc0f99fcea70aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:bd:92:ab:de:9b:92:cd:d5:b1:66:0b:b6:
8c:0c:d3:cb:8e:24:06:7a:b9:32:f0:98:ef:a5:f2:
e1:d0:d3:bc:1a:24:05:f1:f8:fb:53:97:b0:14:ca:
d9:85:20:6c:48:9b:e6:f3:9b:17:33:85:d1:08:e0:
6b:be:6d:2b:a8:41:bb:74:7b:9e:42:e3:ef:62:ae:
ee:61:95:a9:22:a5:a8:e7:17:22:19:30:72:f5:44:
b2:d5:07:9f:00:30:39:0a:16:53:4e:ee:4c:d7:03:
2a:39:2d:7c:61:7d:4a:f1:38:70:10:d8:d6:99:a3:
86:fb:38:ed:34:d2:6c:b9:44:d8:78:01:40:fe:9e:
5c:e6:95:20:ce:49:7e:96:f7:d6:72:4b:34:05:9c:
83:14:5d:a7:6c:8e:a4:58:76:9e:8f:d6:2d:e2:4e:
b7:f9:2f:a3:85:d9:ff:bc:1a:02:c4:45:e5:ca:14:
38:89:dd:c2:76:80:7a:e6:a6:dc:20:5d:23:21:fb:
05:89:61:34:ab:48:a0:62:a3:29:6e:ad:46:ca:4a:
78:f5:9a:74:88:27:13:60:75:a3:8a:80:f1:4f:f8:
4d:36:59:6d:c8:4b:65:dc:fe:17:12:e2:1e:30:d4:
c3:89:87:3a:db:43:ed:ae:0b:df:8f:42:35:d6:2d:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:70:95:8C:F8:B7:53:60:FC:E7:5E:8E:55:CC:0F:99:FC:EA:70:AA
X509v3 Authority Key Identifier:
keyid:24:52:AB:1D:2D:29:BA:C9:D5:2E:B4:79:DE:64:C0:70:0F:C6:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFKrHS0pusnVLrR53mTAcA_Gck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc1d14-15c8-48fd-9ec3-969c94de89a5/1/JFKrHS0pusnVLrR53mTAcA_Gck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:13:8d:61:e1:20:8d:01:c4:ad:de:10:2a:47:5c:2a:a8:d3:
32:5e:ea:f8:06:d4:3b:db:1f:16:d2:b2:3a:08:1c:11:f5:0a:
d7:ab:30:23:63:2f:29:1d:b4:81:f4:27:e2:4c:3f:fd:5d:bd:
20:9c:07:ff:3b:91:b4:15:96:2c:59:cd:af:16:5f:9f:18:7e:
27:4e:fd:07:f1:dc:dc:8c:d8:29:5f:49:9f:d4:df:dc:64:20:
b1:5f:b9:6c:f7:11:10:9e:20:7d:f8:a9:b6:e2:7f:ea:20:cd:
58:ac:2d:c3:e7:99:e4:c5:a9:05:93:6b:48:c6:11:03:df:ff:
ed:6e:c0:10:60:41:ae:c2:51:c1:c0:b9:af:a8:3c:f4:6b:bd:
e2:c8:37:c4:3f:e5:e3:c4:98:8c:a5:2a:09:8e:ba:c4:b8:3f:
96:ef:e9:cb:3c:8f:67:86:af:1b:6f:c6:5a:97:c7:11:d2:09:
6f:75:da:c9:b8:2d:74:74:82:c1:bb:41:5b:7f:f8:89:b8:6e:
a8:85:fb:66:be:34:bc:b9:e0:c5:9e:f3:27:35:98:e9:48:bc:
fd:d4:2e:5c:97:21:a0:0b:81:87:f1:97:b8:a2:fb:bb:91:eb:
35:d5:d0:43:d7:3d:57:14:fe:48:85:a2:4a:25:b6:4e:df:fe:
be:5d:0c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:34 2025 by rpki-client