Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
File: JFLek3DCDvG6TX_huwGPP239yc4.mft (raw, json)
Hash identifier: BXbJhIBtD4SKpxq3o4qZDd35oPANOKCRgg2vWVAI0S4=
Subject key identifier: 82:92:15:E8:18:0D:EB:1A:EC:3E:AA:96:12:18:DD:E6:09:64:20:3F
Authority key identifier: 24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
Certificate issuer: /CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Certificate serial: 019A70DC64B7E10B9F7A3DAD681F600A00B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
Manifest number: 0DB3
Signing time: Tue 11 Nov 2025 03:01:23 +0000
Manifest this update: Tue 11 Nov 2025 03:01:23 +0000
Manifest next update: Wed 12 Nov 2025 03:01:23 +0000
Files and hashes: 1: DdP_Bqbhgl16gdJsvkBhi1YcDjQ.roa (hash: I6Jh8sH5S9Q2lg3Ub1gkdbdEGtUo1NZqfvOrCbSIvmc=)
2: JFLek3DCDvG6TX_huwGPP239yc4.crl (hash: 0SoT8Nt2R7t6zrQ5x+C9k21d9Km7YhyVq2L84cgvr5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:64:b7:e1:0b:9f:7a:3d:ad:68:1f:60:0a:00:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2452de9370c20ef1ba4d7fe1bb018f3f6dfdc9ce
Validity
Not Before: Nov 11 03:01:23 2025 GMT
Not After : Nov 12 03:01:23 2025 GMT
Subject: CN=829215e8180deb1aec3eaa961218dde60964203f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5b:0a:03:94:fe:03:47:f8:c9:1b:be:7e:25:
c8:bc:74:b0:d5:5e:d6:1d:cb:de:88:3d:b0:12:ce:
fc:40:ec:0e:22:f3:9b:20:96:6f:e3:3a:70:aa:b4:
a3:43:de:b3:96:49:11:e6:34:e1:cd:f6:ac:94:ec:
fe:a7:ee:7d:e8:40:a3:93:f3:be:e6:55:08:ae:94:
3a:ed:de:9a:38:be:c5:2b:c0:4c:15:76:db:88:66:
01:61:aa:24:af:65:2a:36:4e:cd:3c:d4:79:18:d0:
2c:9d:bf:b2:58:8e:8c:7d:34:35:cf:1e:15:20:8c:
23:bc:60:28:e5:26:b0:43:8e:cc:7d:dc:14:a2:a5:
96:dc:e5:d1:be:0a:61:d4:67:6b:16:83:49:eb:93:
c3:f9:c0:f4:31:26:3d:8d:c6:3c:88:f1:13:eb:cb:
47:57:5f:24:52:1c:51:f0:f5:4d:38:c3:6a:d3:89:
62:54:d7:0b:21:db:8e:b8:17:f7:c4:9d:38:5f:1e:
8b:70:3d:fd:af:3b:76:20:c6:6e:3e:3f:8c:26:75:
05:5a:4c:b5:71:70:79:76:11:15:26:23:78:af:e5:
68:0f:4e:85:18:a7:f6:bb:68:70:7c:68:00:cf:a2:
8d:0b:77:7f:82:85:b7:e6:8d:ec:bb:c3:05:09:95:
67:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:92:15:E8:18:0D:EB:1A:EC:3E:AA:96:12:18:DD:E6:09:64:20:3F
X509v3 Authority Key Identifier:
keyid:24:52:DE:93:70:C2:0E:F1:BA:4D:7F:E1:BB:01:8F:3F:6D:FD:C9:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFLek3DCDvG6TX_huwGPP239yc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51065b-904f-4ce3-8fe5-8ea2d14a642e/1/JFLek3DCDvG6TX_huwGPP239yc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e4:37:0d:1c:6f:50:96:38:65:16:ff:11:ef:36:e9:17:97:
53:e9:6c:2e:1e:d8:7e:ea:bf:28:ea:c7:d5:a7:d1:a1:ae:b4:
7b:59:89:5c:f3:e6:ce:3f:b3:d0:8f:df:40:8a:a0:55:49:2f:
c7:28:3d:ab:c2:e1:e6:ae:a6:5b:3c:ae:32:cb:d3:20:f8:98:
d0:31:d8:68:2e:03:29:1c:c7:5c:e8:0d:09:43:89:8f:55:d4:
dd:52:20:2e:08:13:b7:88:24:24:10:b5:8d:41:18:76:bd:65:
d7:f6:7e:5d:f4:1a:63:c1:5e:98:87:fe:36:3e:01:8d:8f:f8:
81:15:15:e0:c1:a4:82:64:20:8e:9a:68:76:a6:e0:71:ce:c6:
49:c5:e8:0f:15:42:5a:cd:11:b5:9b:3f:9a:3b:2f:41:1b:57:
c2:e7:00:5c:0d:d8:f7:b5:89:40:fb:00:c7:70:75:7a:d4:4f:
84:29:fc:e6:d3:d1:56:b1:b8:d2:6d:da:e4:34:ca:2e:16:ad:
e5:cb:64:92:07:33:74:8b:04:10:f2:46:78:66:28:64:e8:8b:
7c:2b:3c:cf:80:37:04:92:a6:53:e4:cf:65:64:10:17:64:1c:
e7:c8:d7:82:60:6b:cc:16:12:44:ef:6a:29:fa:ff:d2:0c:11:
62:6c:c1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:31 2025 by rpki-client