Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
File: JFjwpFOzL_OiHmajG3T-SdjkajM.mft (raw, json)
Hash identifier: Kr6aJAhj7huC0E5WOf+aTuB7GGQm+ZBafJQE/c8uRwA=
Subject key identifier: C6:A8:64:03:A3:ED:D9:52:81:67:35:83:0A:D8:F7:87:EC:4C:2D:56
Authority key identifier: 24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
Certificate issuer: /CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Certificate serial: 019A7225ED4F22C763FA38260C2EE6997F68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
Manifest number: 124C
Signing time: Tue 11 Nov 2025 09:01:19 +0000
Manifest this update: Tue 11 Nov 2025 09:01:19 +0000
Manifest next update: Wed 12 Nov 2025 09:01:19 +0000
Files and hashes: 1: JFjwpFOzL_OiHmajG3T-SdjkajM.crl (hash: Bdltcy9MlQiZBo+cGAstrqZagjj7uNs2T9HH5m/Br1k=)
2: _d1GEPj08rPnUJ5e0jIgKD6QCFQ.roa (hash: vnr1x2ojeLhbVafxW9oqVV43qotLr8cLQwIIuErWSfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:ed:4f:22:c7:63:fa:38:26:0c:2e:e6:99:7f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2458f0a453b32ff3a21e66a31b74fe49d8e46a33
Validity
Not Before: Nov 11 09:01:19 2025 GMT
Not After : Nov 12 09:01:19 2025 GMT
Subject: CN=c6a86403a3edd952816735830ad8f787ec4c2d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:ae:72:ba:31:a5:7d:6a:74:d1:bf:ea:fa:
17:4a:07:35:c0:a6:24:8e:bf:05:ff:9a:b3:40:4f:
cd:47:fd:d7:b5:60:cd:28:a7:ef:46:26:fb:0f:a3:
36:aa:cd:f2:6c:80:26:97:7f:5e:7c:58:6e:eb:c5:
7c:ac:bd:37:60:b8:f5:86:fb:8b:07:ae:e2:d5:52:
4a:fb:b5:6a:68:8d:09:bd:03:74:35:86:b8:a7:f9:
3f:8c:58:70:f3:aa:c7:90:9a:10:d6:7d:b0:4c:3e:
2c:eb:8c:ff:9a:a2:d9:ed:3a:b2:95:9a:90:65:22:
ca:6e:ad:2f:8b:79:b1:31:dd:df:4f:50:25:7f:7e:
12:8b:fe:7e:ec:08:72:9c:46:25:cd:3a:4d:c2:81:
2e:1b:f5:52:74:fe:27:60:71:a3:91:d0:a9:fd:65:
24:d0:2e:45:ee:74:ae:70:d9:82:d2:e7:eb:a3:8e:
c4:fb:9e:38:af:8d:68:7b:a0:4a:84:9c:2a:2a:de:
fc:71:70:00:9c:52:d0:0b:8f:92:05:7a:07:71:74:
37:b4:22:c4:0f:97:54:03:d8:c8:da:de:75:35:66:
6e:8e:c3:9a:1e:c3:a7:e0:f3:12:80:c9:83:52:da:
39:11:87:1b:f6:f3:6f:bb:f0:cc:4a:a2:a1:27:17:
1f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A8:64:03:A3:ED:D9:52:81:67:35:83:0A:D8:F7:87:EC:4C:2D:56
X509v3 Authority Key Identifier:
keyid:24:58:F0:A4:53:B3:2F:F3:A2:1E:66:A3:1B:74:FE:49:D8:E4:6A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFjwpFOzL_OiHmajG3T-SdjkajM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/11192d-1740-4e8e-9e04-ee379518c686/1/JFjwpFOzL_OiHmajG3T-SdjkajM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:50:87:01:29:f7:32:79:01:e1:ec:08:f5:06:b0:dc:6b:f8:
ad:41:3d:2b:2d:4d:ce:ae:ca:6b:e9:65:e8:76:d0:a5:3f:b3:
88:27:35:d0:95:b5:fc:a8:38:be:44:ea:ff:ec:2a:c6:92:bd:
b7:96:1a:f1:53:93:88:f1:6e:ed:b3:11:77:b0:ac:5b:63:16:
a1:8f:51:a3:48:21:cc:a6:73:78:c6:0b:44:86:3a:b3:3e:1f:
e4:ae:fc:95:8e:34:01:df:71:ee:34:85:de:37:9e:1a:47:64:
fb:21:0b:34:76:0e:30:e6:b7:fe:ee:cb:38:18:de:9a:35:06:
04:9a:14:b0:70:10:e7:92:e6:5b:47:21:cc:bf:8e:bc:9b:8d:
75:3f:c2:dd:38:8d:2f:85:cc:cd:2b:34:95:2c:19:e2:eb:ff:
a7:b2:36:8f:aa:99:42:e8:ad:74:2f:85:99:b5:13:84:13:53:
ab:f8:c2:4c:74:f7:3c:7e:cd:8f:25:87:3d:c2:39:4e:31:65:
eb:62:c6:98:ec:f7:92:d6:ce:58:dd:47:20:02:91:db:e6:5d:
2e:b1:39:e2:20:eb:56:de:31:c2:40:3b:1e:4f:d3:d1:d9:d5:
5b:f5:46:fc:ff:38:ea:67:36:2f:93:20:e0:af:01:32:0f:b6:
2a:11:74:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:06 2025 by rpki-client