Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
File: JFf3O_AvdUseYxfumk8-iGN_Gqc.mft (raw, json)
Hash identifier: A9qqY4IyYzwFUNpmBucAQXZ4+GdRPYg6Ar0hYLcjiEc=
Subject key identifier: BD:79:71:93:4C:06:CC:AB:4F:AD:09:D1:9F:1D:0D:1E:FF:EE:A1:52
Authority key identifier: 24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
Certificate issuer: /CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Certificate serial: 019A240A0B2E9E164EB4F2E753A091342E4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
Manifest number: 052C
Signing time: Mon 27 Oct 2025 05:00:29 +0000
Manifest this update: Mon 27 Oct 2025 05:00:29 +0000
Manifest next update: Tue 28 Oct 2025 05:00:29 +0000
Files and hashes: 1: JFf3O_AvdUseYxfumk8-iGN_Gqc.crl (hash: HW75JzwjgI9H3vzi7VpzTCUjYNr/Xoswn0OQjZGZWKk=)
2: cXiQb0zcA0CLvw3qjr3Z14vvqVw.roa (hash: pX6VDAJEOVOavf5pZdZN7fQIN/wzAPZygKeMCqQda9A=)
3: pAkDpXLHJSVq5brO4eRR6jwHtU8.roa (hash: wuv8wzRTFGHFi0hdFLFmbRsgX25lIcuDItaxFFAOXPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:0b:2e:9e:16:4e:b4:f2:e7:53:a0:91:34:2e:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457f73bf02f754b1e6317ee9a4f3e88637f1aa7
Validity
Not Before: Oct 27 05:00:29 2025 GMT
Not After : Oct 28 05:00:29 2025 GMT
Subject: CN=bd7971934c06ccab4fad09d19f1d0d1effeea152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cf:f7:7c:f7:b1:4e:96:e8:23:a1:ed:9c:f0:
4f:1d:b6:e5:5c:16:c0:cb:d0:29:90:8f:15:81:1c:
a7:96:d8:00:92:66:b3:86:25:25:38:21:17:34:d6:
24:90:f7:14:43:43:37:89:a0:70:c6:81:f4:1d:87:
8b:93:9f:0a:3c:e1:12:b9:54:16:38:c6:f9:02:ad:
32:64:27:4f:29:05:f7:a4:b1:2d:a7:2d:88:d0:d7:
46:57:5f:b4:d8:06:67:28:93:cf:3e:5a:b9:74:42:
e0:24:47:2b:b7:51:5a:49:92:07:2d:09:c2:48:35:
91:44:07:65:b8:1e:0a:c1:c3:82:59:89:76:59:d2:
4f:4e:bf:d4:79:89:d6:4a:0f:63:bf:22:6e:a2:e3:
d9:53:b1:ab:1c:ef:9c:6a:00:4d:f6:21:32:a5:2a:
15:3a:63:1e:b3:d9:e9:fc:23:2f:42:c0:b7:c2:ec:
4d:18:b8:1e:94:c8:4e:49:be:8b:b8:ae:b9:26:26:
4a:72:67:bc:6e:47:ea:75:e8:81:9a:ae:25:e5:5e:
7f:72:46:e7:23:5f:3b:59:a3:37:10:ed:b6:e6:34:
87:a5:14:25:12:f7:82:04:96:d9:9e:a3:3a:e9:91:
7a:ad:76:e3:d0:af:09:82:1f:55:95:33:99:b1:1e:
29:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:79:71:93:4C:06:CC:AB:4F:AD:09:D1:9F:1D:0D:1E:FF:EE:A1:52
X509v3 Authority Key Identifier:
keyid:24:57:F7:3B:F0:2F:75:4B:1E:63:17:EE:9A:4F:3E:88:63:7F:1A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFf3O_AvdUseYxfumk8-iGN_Gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0ba59b-ff4f-438c-8417-5fa380749497/1/JFf3O_AvdUseYxfumk8-iGN_Gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bd:c5:35:ee:60:ad:1b:60:e3:2e:c3:c3:db:0a:36:e0:f3:
73:df:f7:b7:fb:46:f6:c3:34:c9:df:fe:cf:cc:47:31:00:16:
8d:ea:84:33:4b:ab:f1:aa:e0:26:1f:76:35:9f:aa:60:80:84:
71:ef:d2:35:57:c3:02:29:70:5f:52:80:13:2d:41:b0:81:52:
8d:c2:51:81:2e:6f:7b:83:e9:b9:ab:d2:e1:89:5e:63:07:23:
e2:08:5f:b5:44:48:bc:9a:1d:a8:bd:b3:ba:bf:75:15:b9:32:
b4:67:42:17:e4:a2:6d:8c:51:72:37:ae:11:97:28:4a:06:e4:
9b:51:22:5f:9b:bc:58:13:6f:78:8e:2e:b2:59:4c:f3:36:93:
33:5d:dc:90:5b:ea:2a:54:12:2f:88:02:a1:8d:a0:b0:bd:47:
d8:2f:79:05:c8:6a:1e:0d:55:a1:e4:f0:cf:36:e9:41:fa:95:
04:19:98:54:07:4b:20:b3:aa:09:f9:77:13:da:88:61:8c:1c:
6a:26:7d:01:e6:64:89:af:69:d8:22:e1:a3:a2:10:37:99:c3:
f9:f7:69:dc:36:18:bf:f3:94:c6:f5:bf:12:cd:e6:37:52:f8:
28:aa:3f:7d:8c:9f:eb:49:b7:ca:03:a1:ba:25:b7:f1:2a:99:
8a:77:2b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:10:13 2025 by rpki-client