Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
File: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft (raw, json)
Hash identifier: hlsSoKdfXTwXt/UH6+6rtn8l8AZbkUQiuoUD6DhA3Fo=
Subject key identifier: 12:A0:73:90:90:84:B4:C0:CE:C7:56:E7:62:E0:02:35:18:67:28:A1
Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
Certificate issuer: /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Certificate serial: 019A4EF5E58372D2336EE347BF46692D6566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:02:09 +0000
Manifest this update: Tue 04 Nov 2025 13:02:09 +0000
Manifest next update: Wed 05 Nov 2025 13:02:09 +0000
Files and hashes: 1: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl (hash: cB6i4sWam7Q7YtvA5X2BIXw+IMHoVEJoe3MaHEH3H8Y=)
2: O7SXZPMFV3Am85txyKq-wzV0mJk.roa (hash: E3gQb/T8VdnvnhmQexSN7n2IkCaiiXjYdA/H9y6oGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e5:83:72:d2:33:6e:e3:47:bf:46:69:2d:65:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Validity
Not Before: Nov 4 13:02:09 2025 GMT
Not After : Nov 5 13:02:09 2025 GMT
Subject: CN=12a073909084b4c0cec756e762e00235186728a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:99:7e:48:da:04:f4:3b:cc:a4:e2:61:24:
60:13:13:d1:42:e3:d0:69:fc:ee:27:75:46:3f:46:
a9:2f:66:0e:82:8e:d8:19:b0:2b:af:22:cc:0f:be:
7b:ae:c3:5c:00:74:60:db:44:f4:3d:29:ca:fd:64:
1d:3c:9c:c8:e2:47:34:6f:10:9c:34:6a:0d:ed:fe:
97:17:90:b8:53:ba:4e:4b:4d:0d:16:ab:41:77:34:
7d:20:53:fd:2f:cc:4b:00:80:c1:eb:ea:d9:32:48:
59:e9:b5:6f:20:e3:b3:30:08:8b:a3:e8:c8:4f:4d:
75:b6:ca:e7:65:92:b2:c8:f6:c6:89:c2:e3:db:a9:
5e:32:ba:6a:0c:e5:cf:f4:a3:aa:39:ea:4b:70:d5:
38:1b:d3:9f:27:64:51:1a:7f:fa:20:de:69:5f:3b:
c5:3f:af:a7:8c:d6:2d:79:5d:c1:52:45:03:8b:c8:
5a:d3:c4:d3:7a:54:83:51:85:1c:eb:83:ac:4c:35:
b9:40:7d:c3:76:4a:ba:19:58:8b:6a:e0:17:53:fa:
6a:d7:e7:51:22:c6:40:33:f6:03:dc:a1:bf:9a:41:
c3:f1:00:a5:82:bf:ff:85:53:59:47:3e:86:44:b4:
67:b6:7a:7d:22:f7:df:e8:de:f7:5a:d4:a8:a5:65:
72:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A0:73:90:90:84:B4:C0:CE:C7:56:E7:62:E0:02:35:18:67:28:A1
X509v3 Authority Key Identifier:
keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b0:e4:8a:eb:f0:1f:39:bc:a3:4e:1c:b9:62:aa:72:ec:1f:
6a:e2:7a:a5:e4:91:42:91:0b:b0:e1:0c:cb:ab:d6:13:55:e0:
ab:01:9f:33:9a:ab:f6:98:84:c2:ac:46:b8:cd:09:60:bd:26:
ea:40:15:90:04:66:61:6f:08:87:1b:9d:f9:1b:e9:e6:22:0b:
1a:6b:7c:cf:21:46:05:6f:ab:f3:22:60:37:ba:59:6f:34:0c:
5c:35:b3:a6:a5:4a:33:e6:99:04:a1:bf:a7:c9:41:17:cf:2f:
8f:1a:7d:03:14:c3:95:ef:ae:1a:8f:76:7b:0c:93:cd:b4:3e:
bd:d4:54:66:81:c7:e0:88:b0:ac:ef:1f:9b:f0:39:41:12:ff:
7d:8a:17:84:58:91:a5:4a:0f:24:e6:23:f0:55:92:50:a7:b5:
cc:c7:18:9e:f0:4d:bc:84:6a:d7:74:85:00:e1:e4:20:d3:70:
fd:ea:3c:a0:56:8b:7c:c8:c1:6e:c5:c0:ed:6c:13:3f:b6:27:
62:9e:6c:c5:a7:b5:cf:02:e8:d3:b2:d9:14:7b:ed:6a:af:b0:
c1:6c:c8:d8:d9:c8:9b:3a:20:87:0a:b7:95:4d:39:83:0e:2a:
17:52:cb:ee:7b:bf:74:af:08:1b:6e:36:7f:05:2d:ac:e4:75:
fb:a6:30:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:45 2025 by rpki-client