Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
File: JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft (raw, json)
Hash identifier: FcXCh7IPJ6edtY4+QdF0BsjeC8xRj7IlqVR9kis81X8=
Subject key identifier: 60:C1:89:A3:8D:00:84:DE:56:B4:E3:F4:8E:BB:58:B0:C6:B1:63:C1
Authority key identifier: 26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
Certificate issuer: /CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Certificate serial: 019A047FA1394830AD7997CB2179A271AB90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
Manifest number: 16EA
Signing time: Tue 21 Oct 2025 02:01:04 +0000
Manifest this update: Tue 21 Oct 2025 02:01:04 +0000
Manifest next update: Wed 22 Oct 2025 02:01:04 +0000
Files and hashes: 1: 1-29V0La4_P0UpNW2hXVyslRw2K4.roa (hash: PRcWahKcQ2LuKI711vQsn8rwzS7rSwXmqcqEY1pScJk=)
2: JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl (hash: U4+VbR4qX5J83xNhavm9ARKbS6EtYq3BhF7SIfvdzDk=)
3: pGjA2Uim9v1yrTvx6Xsjk4Bq-40.roa (hash: oBPfYvQmBc3Rm7ciqYTDbiAEwbpepUx9w2RLYYy+K/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:7f:a1:39:48:30:ad:79:97:cb:21:79:a2:71:ab:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2681b7b4ae3e75dc4b36cff2937923ecdff7259b
Validity
Not Before: Oct 21 02:01:04 2025 GMT
Not After : Oct 22 02:01:04 2025 GMT
Subject: CN=60c189a38d0084de56b4e3f48ebb58b0c6b163c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:da:f5:dc:f5:18:4a:1f:56:4d:70:bd:3f:29:
9f:21:05:e3:47:2a:9f:1d:5a:68:46:55:27:c5:7e:
5a:d9:e3:47:f4:2c:b7:b6:b6:24:1d:3c:4b:8f:52:
76:dd:43:cc:36:4b:91:57:7f:df:12:6f:5d:c0:56:
8c:78:a6:9a:1c:40:28:e1:5a:38:f6:c0:82:73:8c:
23:dc:53:24:c2:42:cb:b5:db:c2:51:fa:21:49:0c:
8a:c7:6d:9a:fc:2b:8a:7d:5e:7d:c2:86:3d:58:03:
d3:53:27:28:d8:85:0b:48:8c:f7:8f:4c:c6:d7:2e:
16:b4:a2:67:72:0c:25:b6:08:0b:ac:8d:6b:e3:4d:
fc:ff:49:ba:6b:57:52:48:fb:e4:41:4a:bf:82:6f:
1c:33:dd:d6:f6:ec:d5:d0:09:60:14:c2:79:0d:d9:
db:82:30:17:1c:d3:27:90:ff:bc:e1:84:23:cb:43:
7d:5e:d3:b3:a0:30:da:8f:db:60:90:82:18:37:68:
c2:dd:e8:d8:92:66:0b:bf:58:ef:9f:e6:1b:3c:5e:
3c:54:0b:92:c0:b8:1c:bc:42:8d:82:2f:bc:91:7c:
25:dc:e1:47:4f:95:aa:1c:a4:9c:9d:1d:a4:9a:cc:
66:4c:3b:8e:52:8f:f2:5b:6d:14:57:34:17:e3:09:
d2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C1:89:A3:8D:00:84:DE:56:B4:E3:F4:8E:BB:58:B0:C6:B1:63:C1
X509v3 Authority Key Identifier:
keyid:26:81:B7:B4:AE:3E:75:DC:4B:36:CF:F2:93:79:23:EC:DF:F7:25:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoG3tK4-ddxLNs_yk3kj7N_3JZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/978871-255b-443a-8e01-fc839bb6d173/1/JoG3tK4-ddxLNs_yk3kj7N_3JZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4b:1d:b0:1f:81:76:f1:d7:45:01:d2:16:2a:4c:5c:3a:28:
29:fe:49:d0:1f:da:8c:2a:d1:a2:7e:97:fe:3a:b3:9f:7c:ff:
2f:84:78:90:4f:35:86:b7:da:9a:15:13:3a:6d:9f:3f:77:fa:
4e:2c:d3:24:3c:18:3d:a7:b5:51:a0:27:ab:2a:8e:3d:e9:af:
13:5b:8d:bb:24:f3:4e:4f:50:c1:ad:5a:71:12:d3:31:50:3d:
9c:cc:5f:4c:2d:20:61:e1:15:c8:e1:07:80:d8:f1:41:e6:ba:
ae:e6:77:55:1b:bf:24:f8:40:6b:80:80:85:2c:16:eb:91:e5:
0d:59:03:cd:22:7f:15:93:e5:c7:2b:8b:47:14:ff:90:34:fb:
65:bf:8b:fa:bd:f1:40:92:5b:cc:b1:51:66:24:c1:45:2c:da:
87:d4:72:36:30:97:69:6a:9b:ac:f2:2e:d0:da:f7:bb:44:cc:
bb:97:e6:18:a7:6d:fa:76:39:80:d2:48:e7:35:2e:7a:6d:1b:
9b:44:c6:a6:47:2d:a4:97:c2:af:df:5f:04:12:f8:df:78:0f:
76:ec:79:b8:77:6c:d3:1f:03:c5:89:66:ea:31:e8:58:98:38:
99:e8:bf:a1:e8:0d:21:9d:c9:c7:f5:44:54:4f:6d:d6:dc:88:
e1:94:e9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:02:35 2025 by rpki-client