Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
File: JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft (raw, json)
Hash identifier: JhQYLg+Zd+YqZxEsCldulDmAYZ2nBmH/OnHGIFJQkZ4=
Subject key identifier: D7:32:63:37:0F:2E:67:2B:6C:03:A8:87:4E:6E:63:1F:AB:7C:43:B2
Authority key identifier: 24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
Certificate issuer: /CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Certificate serial: 019A571BC235B59BA6F54C803F5E36912116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
Manifest number: 1715
Signing time: Thu 06 Nov 2025 03:00:28 +0000
Manifest this update: Thu 06 Nov 2025 03:00:28 +0000
Manifest next update: Fri 07 Nov 2025 03:00:28 +0000
Files and hashes: 1: 3uavFejgiYtPvHU28rvkzS-PRoM.roa (hash: adHlXrZvrLicIOOrKQ1qwcmYjjUJDcMR41QWoJ5Tzq8=)
2: 6CxZro-eevneCF6C-uhBhwFJdV8.roa (hash: +cSRsic9So2p+WgzYKEuCQ8c+WbynfkIR2MSy+Rcb0M=)
3: JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl (hash: onvxac3mhJ6FtkU+MmVrcJYdxZHijdovB5XcGNw+Yvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:1b:c2:35:b5:9b:a6:f5:4c:80:3f:5e:36:91:21:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2450ca4aab2a3f8abc6c973aa7c0fa13f2571081
Validity
Not Before: Nov 6 03:00:28 2025 GMT
Not After : Nov 7 03:00:28 2025 GMT
Subject: CN=d73263370f2e672b6c03a8874e6e631fab7c43b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:69:c1:4d:6c:be:ca:db:d4:a8:8e:db:aa:
33:53:56:d8:6a:b5:8d:0b:89:be:bf:c4:df:0e:69:
7f:ad:51:f1:fa:3a:65:b7:e8:9d:d3:da:06:6d:7a:
f9:f0:9c:8e:bf:5c:3c:73:37:a3:12:af:26:65:00:
2a:18:5f:cb:a0:4a:8d:22:21:8d:cc:c8:da:cb:19:
3e:04:be:dd:d4:fc:a8:e4:73:d0:fa:ae:73:c4:f0:
76:b7:56:da:90:aa:12:2d:d1:c2:48:03:1c:b6:34:
bb:b9:cb:77:84:ca:2c:15:c0:39:af:56:b7:f4:ef:
6c:0d:4a:90:f0:eb:50:82:5b:16:a7:7c:68:2e:eb:
1f:7f:9c:79:93:d8:62:07:f5:01:d0:4a:ac:85:d6:
8e:ef:10:4a:e3:ba:03:85:df:01:6f:fc:fb:6c:8f:
86:ab:73:c4:9c:6e:f3:8b:06:39:85:a3:b2:f2:8e:
3b:81:12:cc:f6:6f:54:19:d6:fa:b4:75:f5:7e:24:
3c:31:02:8b:d2:c4:df:37:66:86:57:e4:10:d9:6b:
95:16:3a:c2:75:c2:19:78:78:30:f2:a7:c8:fe:b8:
bd:84:6e:8d:76:29:85:c1:99:b1:b0:90:41:8d:eb:
77:d7:9d:ae:e5:2f:36:2e:0b:26:24:44:f6:c6:5c:
aa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:32:63:37:0F:2E:67:2B:6C:03:A8:87:4E:6E:63:1F:AB:7C:43:B2
X509v3 Authority Key Identifier:
keyid:24:50:CA:4A:AB:2A:3F:8A:BC:6C:97:3A:A7:C0:FA:13:F2:57:10:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFDKSqsqP4q8bJc6p8D6E_JXEIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/219c6f-e30f-4a9e-acc0-e0d576d5577a/1/JFDKSqsqP4q8bJc6p8D6E_JXEIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2d:0a:7f:d7:1b:97:3e:e4:84:dd:a2:70:c2:4b:1c:df:5b:
63:49:6b:10:3f:19:bc:cd:7f:7e:51:8a:26:7a:dd:4a:dd:83:
2c:dc:d9:5e:ea:04:72:2f:fc:0f:ad:a2:12:75:3e:b7:ee:02:
c7:00:4b:ab:c3:0d:44:07:b9:18:b1:f6:75:54:20:02:bb:26:
61:96:96:ef:08:79:42:8f:92:4c:d2:58:33:d3:29:d6:84:02:
d8:85:5d:2a:d1:b4:a1:a6:bf:28:b1:13:dc:69:c2:d0:1c:23:
25:93:0c:74:c6:50:29:7f:1c:44:8a:63:b9:e2:de:3f:b5:52:
ed:9d:d8:1e:cd:15:88:38:9a:62:1d:ab:91:6e:6c:bf:62:4c:
bb:f7:d1:04:5a:0b:b7:87:8d:fc:a6:2c:35:da:38:59:18:99:
69:b0:3c:03:29:1e:51:7e:60:27:7c:ff:e6:b8:5d:47:d7:49:
b7:21:6c:44:c4:c1:6e:b8:b0:85:e7:5a:41:d7:b2:7a:58:3a:
5e:76:a0:7e:24:ce:fe:fc:82:39:c5:b4:14:4e:c0:29:79:ea:
30:87:ef:6d:da:dd:b4:5b:c5:2a:22:19:5a:2f:f3:66:1f:4e:
7d:0c:ec:a1:85:0b:05:92:53:b6:c7:8b:94:b1:22:70:39:2d:
fa:82:d3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 12:29:47 2025 by rpki-client