Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
File: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft (raw, json)
Hash identifier: GDCGC5lPm8ADh6OpFCucoiJJIIkSLoScgu8fd39rA70=
Subject key identifier: 21:D0:B6:6A:96:33:BE:BD:6E:4D:74:3C:E1:67:65:1F:61:F7:F2:BD
Authority key identifier: 24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
Certificate issuer: /CN=240fd0d33886d839c5cc90103a186e13a348ad50
Certificate serial: 019A1FF5FFFF70A40F1E4C193592A5708D3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
Manifest number: 16F2
Signing time: Sun 26 Oct 2025 10:00:06 +0000
Manifest this update: Sun 26 Oct 2025 10:00:06 +0000
Manifest next update: Mon 27 Oct 2025 10:00:06 +0000
Files and hashes: 1: JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl (hash: 8wLQYbKEI2fqE4+ZY8amf9KfGvUo9G+bpe2WeKusNgA=)
2: e2Te0aWCQ8EtrlV0PLf_q38tHSg.roa (hash: 4ft8eS+VBA6HZC5LW6/i8Z2mYfS+sEEPwTfWda0kvP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:f5:ff:ff:70:a4:0f:1e:4c:19:35:92:a5:70:8d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240fd0d33886d839c5cc90103a186e13a348ad50
Validity
Not Before: Oct 26 10:00:06 2025 GMT
Not After : Oct 27 10:00:06 2025 GMT
Subject: CN=21d0b66a9633bebd6e4d743ce167651f61f7f2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:5c:9c:dc:8b:79:76:b0:07:7b:fc:7c:aa:
cf:a2:f2:bc:ad:a1:fc:11:41:c1:02:4c:60:19:4b:
93:44:76:45:8c:1f:92:90:60:59:25:dc:64:12:f4:
1a:06:d7:e8:f3:f6:3b:77:d3:64:45:aa:5d:b8:e5:
db:55:31:b6:1d:8d:22:cc:b9:73:c3:13:de:ed:e2:
e2:1c:a3:cd:9d:82:fe:ab:f6:36:3f:f2:10:b1:51:
08:98:a3:6c:45:96:f2:38:79:e4:97:11:bc:ea:31:
29:11:92:12:a3:9d:c9:aa:89:38:30:f4:49:62:02:
5c:8f:49:f8:4a:c2:3a:2a:b2:be:9e:b7:60:51:cf:
63:ef:4f:46:0c:1d:7d:9e:52:69:46:ad:27:c3:d9:
5c:4f:5a:e9:19:81:6c:44:b9:c7:ae:2f:2b:80:93:
a8:c4:90:b0:75:07:7b:3e:d8:c8:f8:04:52:53:1d:
48:a5:06:6d:fa:f6:f2:d6:9b:33:59:81:4f:2c:43:
ba:ca:11:2c:a3:83:bd:91:5f:c2:42:4b:1f:8a:1b:
31:78:5a:90:73:2a:bb:26:68:89:bf:20:59:66:b8:
1b:8a:92:c9:05:ae:8e:94:db:0b:43:7c:61:01:ca:
f4:79:9a:4a:dd:22:f8:84:57:18:e1:bf:4d:16:d2:
3b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D0:B6:6A:96:33:BE:BD:6E:4D:74:3C:E1:67:65:1F:61:F7:F2:BD
X509v3 Authority Key Identifier:
keyid:24:0F:D0:D3:38:86:D8:39:C5:CC:90:10:3A:18:6E:13:A3:48:AD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/958a59-f80d-4d58-9d43-f26bff8b4994/1/JA_Q0ziG2DnFzJAQOhhuE6NIrVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4d:7c:5d:f1:3e:c4:00:5d:e5:69:af:5f:d0:77:90:bf:4e:
b6:5e:e5:75:6a:18:77:d9:e2:9d:c7:18:78:09:8c:ba:d0:25:
c7:e6:7f:89:d4:96:3b:1a:e9:ba:ca:b3:95:b7:07:a7:8e:55:
75:54:f0:26:ac:a8:55:99:f1:c9:57:06:f9:db:37:f2:0c:04:
a1:fc:88:43:a5:be:36:63:fa:0d:20:04:0c:fe:77:2a:b7:88:
2a:93:5e:45:e0:2d:43:a4:76:e2:a0:39:c0:81:2e:7d:03:43:
17:75:c1:e5:d5:89:1b:4f:78:0d:a7:fd:35:c2:28:0a:7c:3f:
4b:5e:7f:12:04:a2:c4:24:ee:f4:b8:02:16:85:a9:18:25:b5:
d5:f6:7b:f7:54:64:bd:a8:d3:ed:d3:db:e8:30:b0:cd:3b:c8:
81:81:5f:53:c6:a9:e7:d8:86:a6:ca:34:64:6e:21:40:05:f1:
36:f7:15:e6:1e:02:b2:e0:00:2d:79:8c:c6:21:ed:ae:72:06:
58:15:f3:d0:8b:7c:05:04:15:3b:c2:b0:e4:50:33:fb:2a:6f:
ca:56:b9:d8:ab:45:58:a6:ac:3a:ee:5a:bd:25:b7:22:9b:2d:
3d:c9:52:2b:87:c6:18:d9:18:ec:f0:1f:63:b9:cc:83:98:37:
8a:1f:05:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZof9f//cKQPHkwZNZKlcI0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0MGZkMGQzMzg4NmQ4MzljNWNjOTAxMDNhMTg2ZTEzYTM0
OGFkNTAwHhcNMjUxMDI2MTAwMDA2WhcNMjUxMDI3MTAwMDA2WjAzMTEwLwYDVQQD
EygyMWQwYjY2YTk2MzNiZWJkNmU0ZDc0M2NlMTY3NjUxZjYxZjdmMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqERcnNyLeXawB3v8fKrPovK8raH8
EUHBAkxgGUuTRHZFjB+SkGBZJdxkEvQaBtfo8/Y7d9NkRapduOXbVTG2HY0izLlz
wxPe7eLiHKPNnYL+q/Y2P/IQsVEImKNsRZbyOHnklxG86jEpEZISo53Jqok4MPRJ
YgJcj0n4SsI6KrK+nrdgUc9j709GDB19nlJpRq0nw9lcT1rpGYFsRLnHri8rgJOo
xJCwdQd7PtjI+ARSUx1IpQZt+vby1pszWYFPLEO6yhEso4O9kV/CQksfihsxeFqQ
cyq7JmiJvyBZZrgbipLJBa6OlNsLQ3xhAcr0eZpK3SL4hFcY4b9NFtI76QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHQtmqWM769bk10POFnZR9h9/K9MB8GA1UdIwQY
MBaAFCQP0NM4htg5xcyQEDoYbhOjSK1QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMt
ZjI2YmZmOGI0OTk0LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy85NThhNTktZjgwZC00ZDU4LTlkNDMtZjI2YmZmOGI0OTk0
LzEvSkFfUTB6aUcyRG5GekpBUU9oaHVFNk5JclZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnU18XfE+
xABd5WmvX9B3kL9Otl7ldWoYd9ninccYeAmMutAlx+Z/idSWOxrpusqzlbcHp45V
dVTwJqyoVZnxyVcG+ds38gwEofyIQ6W+NmP6DSAEDP53KreIKpNeReAtQ6R24qA5
wIEufQNDF3XB5dWJG094Daf9NcIoCnw/S15/EgSixCTu9LgCFoWpGCW11fZ791Rk
vajT7dPb6DCwzTvIgYFfU8ap59iGpso0ZG4hQAXxNvcV5h4CsuAALXmMxiHtrnIG
WBXz0It8BQQVO8Kw5FAz+ypvyla52KtFWKasOu5avSW3IpstPclSK4fGGNkY7PAf
Y7nMg5g3ih8FVw==
-----END CERTIFICATE-----
Generated at Sun Oct 26 14:36:13 2025 by rpki-client