Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
File: JOzROuAn838DhidJNHBEomICjrA.mft (raw, json)
Hash identifier: lBSlQZG+QsMe/1hWf6IGEh1bqD4aHfpi1znF6yqgYJw=
Subject key identifier: FA:5E:49:C5:0B:F5:14:92:EA:75:80:78:77:58:76:ED:C8:18:4E:4F
Authority key identifier: 24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
Certificate issuer: /CN=24ecd13ae027f37f03862749347044a262028eb0
Certificate serial: 019A70DBF79AE18280463BDBDF02AE98BDDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 03:00:55 +0000
Manifest this update: Tue 11 Nov 2025 03:00:55 +0000
Manifest next update: Wed 12 Nov 2025 03:00:55 +0000
Files and hashes: 1: JOzROuAn838DhidJNHBEomICjrA.crl (hash: dfTNieMVHqMNqaW4oIg1bqJPnLdtVvyBxnyEADBV3ZA=)
2: kDftkP-w1YBe-HJAv5LXS10Il0Q.roa (hash: +/EpK+4hyPfZfhLX+mr8yi7klGBJXOB+8POH+U7AuxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:f7:9a:e1:82:80:46:3b:db:df:02:ae:98:bd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ecd13ae027f37f03862749347044a262028eb0
Validity
Not Before: Nov 11 03:00:55 2025 GMT
Not After : Nov 12 03:00:55 2025 GMT
Subject: CN=fa5e49c50bf51492ea758078775876edc8184e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:fd:20:54:42:73:06:87:61:67:61:99:c8:
c8:e0:69:16:7c:f6:0e:79:28:cd:fa:55:ad:f4:27:
ce:35:ad:0f:ff:8e:8f:8f:a8:53:03:ba:a7:7c:36:
fc:d5:d5:df:c8:f7:92:9d:c3:c2:d3:23:b9:b7:a0:
3b:f6:ac:9a:34:8e:50:d4:8f:ef:62:4c:f4:0a:99:
24:a4:1d:ae:36:f5:68:a7:e2:87:43:a7:a0:4f:0e:
23:01:fb:12:3d:96:3b:93:44:12:63:1d:fa:b7:71:
26:1a:ea:cd:4f:c8:e2:08:11:da:8f:ca:92:c0:9b:
5d:18:c6:99:11:7f:5e:01:5e:38:d0:d9:2f:da:f6:
35:b3:d4:1b:5b:56:3c:aa:fc:17:b7:55:93:6e:77:
a8:fe:b0:dc:8a:6d:f9:0f:e5:be:a3:ce:06:15:88:
cb:b0:96:a7:f1:f9:9f:2e:d4:b7:0e:80:30:09:a5:
44:4b:45:86:87:fd:e6:e4:11:e9:ea:b0:90:15:45:
98:8a:2e:cf:9d:e1:85:ca:d5:c5:a5:e0:56:23:7b:
49:ae:f1:44:3b:3e:80:ac:1b:a2:7d:8f:90:e4:5b:
83:bc:41:3e:5b:f2:99:ef:14:ab:e5:76:b5:d0:13:
9b:dd:96:ab:26:05:57:b6:8e:36:cc:20:29:8e:1a:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5E:49:C5:0B:F5:14:92:EA:75:80:78:77:58:76:ED:C8:18:4E:4F
X509v3 Authority Key Identifier:
keyid:24:EC:D1:3A:E0:27:F3:7F:03:86:27:49:34:70:44:A2:62:02:8E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOzROuAn838DhidJNHBEomICjrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fbcbf7-ffc0-4392-8203-9c0a9e8b78e1/1/JOzROuAn838DhidJNHBEomICjrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:21:76:ca:f6:a7:d6:f0:06:6b:f5:a3:ba:0f:75:2d:f3:90:
ac:a6:10:e7:2e:af:be:89:61:57:d8:af:cc:70:c1:41:5b:7f:
83:1f:4b:c8:d4:8b:61:88:71:e2:bb:86:6f:40:91:48:39:f7:
cd:a0:f3:30:3a:ef:a7:43:70:50:4b:81:de:73:6c:74:b9:1f:
94:8a:2b:bc:01:8d:4a:52:13:6c:ad:21:cc:49:85:9d:2d:15:
37:91:5a:f9:f9:d7:87:01:da:b2:76:b1:13:6e:df:0a:28:68:
a3:25:35:62:c6:63:6b:dc:21:27:2c:53:06:78:91:cd:08:70:
68:a0:9f:ba:37:a3:b0:c9:13:98:46:06:4f:c6:1e:26:82:29:
7d:8c:11:14:6a:a5:8d:5c:ce:b8:0d:db:3c:1f:46:60:b7:78:
67:df:a0:22:c6:d3:d3:2e:4e:88:0e:75:c6:62:fc:55:66:89:
e9:67:1c:c7:f7:fa:46:d9:be:cc:cf:8d:cd:05:0a:22:a3:0e:
a7:ae:42:e9:4b:91:61:a8:42:28:de:57:90:9a:21:f5:d9:58:
cd:87:9d:02:75:ba:6e:50:09:fc:37:46:72:94:b8:03:b3:82:
9d:c0:9e:83:8c:83:09:4c:57:b5:13:72:fd:22:09:7c:80:ad:
62:ef:13:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw2/ea4YKARjvb3wKumL3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZWNkMTNhZTAyN2YzN2YwMzg2Mjc0OTM0NzA0NGEyNjIw
MjhlYjAwHhcNMjUxMTExMDMwMDU1WhcNMjUxMTEyMDMwMDU1WjAzMTEwLwYDVQQD
EyhmYTVlNDljNTBiZjUxNDkyZWE3NTgwNzg3NzU4NzZlZGM4MTg0ZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmz9IFRCcwaHYWdhmcjI4GkWfPYO
eSjN+lWt9CfONa0P/46Pj6hTA7qnfDb81dXfyPeSncPC0yO5t6A79qyaNI5Q1I/v
Ykz0CpkkpB2uNvVop+KHQ6egTw4jAfsSPZY7k0QSYx36t3EmGurNT8jiCBHaj8qS
wJtdGMaZEX9eAV440Nkv2vY1s9QbW1Y8qvwXt1WTbneo/rDcim35D+W+o84GFYjL
sJan8fmfLtS3DoAwCaVES0WGh/3m5BHp6rCQFUWYii7PneGFytXFpeBWI3tJrvFE
Oz6ArBuifY+Q5FuDvEE+W/KZ7xSr5Xa10BOb3ZarJgVXto42zCApjhq6mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpeScUL9RSS6nWAeHdYdu3IGE5PMB8GA1UdIwQY
MBaAFCTs0TrgJ/N/A4YnSTRwRKJiAo6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mYmNiZjctZmZjMC00MzkyLTgyMDMt
OWMwYTllOGI3OGUxLzEvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9mYmNiZjctZmZjMC00MzkyLTgyMDMtOWMwYTllOGI3OGUx
LzEvSk96Uk91QW44MzhEaGlkSk5IQkVvbUlDanJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyF2yvan
1vAGa/Wjug91LfOQrKYQ5y6vvolhV9ivzHDBQVt/gx9LyNSLYYhx4ruGb0CRSDn3
zaDzMDrvp0NwUEuB3nNsdLkflIorvAGNSlITbK0hzEmFnS0VN5Fa+fnXhwHasnax
E27fCihooyU1YsZja9whJyxTBniRzQhwaKCfujejsMkTmEYGT8YeJoIpfYwRFGql
jVzOuA3bPB9GYLd4Z9+gIsbT0y5OiA51xmL8VWaJ6Wccx/f6Rtm+zM+NzQUKIqMO
p65C6UuRYahCKN5XkJoh9dlYzYedAnW6blAJ/DdGcpS4A7OCncCeg4yDCUxXtRNy
/SIJfICtYu8Txg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:42 2025 by rpki-client