Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier: n1sOvo7CKPcloGsq8KAqwLZzIz/GlsJO3Z6i8W1TPeA=
Subject key identifier: 44:18:96:98:C5:E4:6A:F4:21:71:EB:8D:AB:81:CD:8A:8C:C6:0C:BD
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 019A5187D437B9B407D883FD6D77CBBDBA6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number: 0142
Signing time: Wed 05 Nov 2025 01:00:47 +0000
Manifest this update: Wed 05 Nov 2025 01:00:47 +0000
Manifest next update: Thu 06 Nov 2025 01:00:47 +0000
Files and hashes: 1: GEvk-OYZIbLA1C0nUWdR9FADeU0.roa (hash: gvjvLQ8vouXFqczTAQsahxoWOc7htNN/RNSCq7vtiz0=)
2: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: 0IB7KwvKLxSW0FL6r2CAz38oiWW77O8BSgy4Xn6e3yg=)
3: msaFLgq-O5K0HfQvNfj4IRLOZYs.roa (hash: 6dnMxl0kl5I2KX9y31y9JTB+6L9iasfKkgN1lMOhfc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:d4:37:b9:b4:07:d8:83:fd:6d:77:cb:bd:ba:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: Nov 5 01:00:47 2025 GMT
Not After : Nov 6 01:00:47 2025 GMT
Subject: CN=44189698c5e46af42171eb8dab81cd8a8cc60cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:18:52:72:5c:7d:00:44:30:fb:61:99:97:ec:
68:24:2f:a5:c8:e1:7e:cf:01:b0:3b:20:3c:25:6a:
5e:b7:aa:7f:ae:80:c3:4d:9d:69:3f:6d:3e:a4:38:
92:e7:db:81:b7:05:f3:17:e8:de:99:3f:76:28:cd:
21:93:04:29:79:68:80:b1:26:ed:99:b8:29:ed:66:
0e:39:4d:70:c9:da:94:5b:74:6f:a7:69:c3:a7:ff:
47:22:c9:6f:52:7d:5f:c7:e4:3a:f8:e9:ee:8c:dd:
b0:c7:eb:55:f5:b4:d7:20:29:ba:2e:33:2a:c3:03:
fe:13:bb:70:15:9b:e0:5e:c1:85:8a:7a:3a:55:cb:
c9:27:94:b6:1e:93:46:59:1a:d4:f3:e5:c1:2c:f3:
94:e8:f1:c1:82:61:a5:12:4d:0d:d2:dd:d3:4b:6f:
ef:56:24:ce:b3:29:37:53:17:a7:27:7d:67:66:4c:
32:ff:c9:7b:62:81:2b:22:de:af:98:4d:4c:98:71:
fb:7a:ee:cf:fc:d5:e5:c5:05:a0:65:dc:aa:8e:93:
ce:2d:b5:45:69:7f:76:bd:95:88:d2:95:fc:63:ed:
c5:3d:8a:e4:a4:df:7c:f7:2d:20:51:7c:6d:56:db:
50:e2:ff:63:09:cd:9e:29:27:b4:73:5b:23:95:c7:
e6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:18:96:98:C5:E4:6A:F4:21:71:EB:8D:AB:81:CD:8A:8C:C6:0C:BD
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:3d:6c:dd:b0:8a:ce:66:d2:93:9a:1d:62:ab:4e:22:b9:68:
7f:1c:57:ff:bc:99:5e:e4:dc:5b:23:c2:50:40:dd:12:66:08:
82:5c:45:0b:b8:6d:83:25:ef:49:c7:7d:98:4a:7a:5c:56:0d:
81:88:57:23:3b:b2:08:6a:67:91:5d:bb:71:a3:a6:39:9a:1c:
e8:9e:43:fe:54:b5:45:ee:2c:18:18:58:23:ca:6f:b7:6a:c5:
c9:57:26:17:16:a8:b0:86:58:a6:de:f9:1d:64:a1:08:fa:ab:
ca:29:7e:be:ec:44:02:bd:42:e1:e8:16:bd:01:55:dd:37:7f:
68:98:02:87:a4:f1:4a:be:e7:75:6d:87:6f:45:28:7d:72:f6:
25:aa:90:75:07:6e:7e:c5:ff:df:6f:aa:1b:00:6c:10:78:32:
d2:8c:e5:75:67:10:7d:72:b7:01:9b:74:44:93:c3:9b:ea:82:
f7:99:b0:dd:f8:0a:41:4b:de:32:55:c8:20:1b:a2:e9:68:b5:
28:ac:90:61:4e:2f:47:d1:ca:df:8f:c5:cd:60:c4:a8:2a:37:
65:d8:d3:60:9a:fd:33:c8:bd:92:b9:75:8b:f1:b5:65:6a:ac:
14:88:a8:cf:e9:75:bd:89:af:d9:96:1a:91:a7:17:09:33:ab:
ee:6f:b0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:42:05 2025 by rpki-client