Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier: mXdvZwwXG1FyQAgjDY24ZXhB3tmeqlFke0ZXBSj7vYk=
Subject key identifier: 36:78:D9:59:42:62:49:B8:2C:24:BD:DA:6A:90:82:43:2B:D8:BC:96
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 0199CBA3BB792C2B297011FC57F371440021
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number: 165B
Signing time: Fri 10 Oct 2025 01:02:09 +0000
Manifest this update: Fri 10 Oct 2025 01:02:09 +0000
Manifest next update: Sat 11 Oct 2025 01:02:09 +0000
Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: JSmTLkL24OeSUxS3GOkmX23OfNC2j/S7FIfnWRipaRY=)
2: UFrxJgzTwVdJL_jkED60zsAU8jc.roa (hash: iRzsXtUX9Sxs+CrzlnzXYrSJNm2lX5qV3x514cI48DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cb:a3:bb:79:2c:2b:29:70:11:fc:57:f3:71:44:00:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Oct 10 01:02:09 2025 GMT
Not After : Oct 11 01:02:09 2025 GMT
Subject: CN=3678d959426249b82c24bdda6a9082432bd8bc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:47:e5:97:7a:7a:e5:bf:47:a9:81:d4:42:
d8:7b:2d:47:fb:3a:ec:cd:0d:1c:1f:3f:06:0c:50:
3f:d8:57:0d:f3:bb:51:08:e0:61:92:b7:93:d9:3c:
26:01:85:75:11:cf:2e:7d:7a:a9:2a:98:43:e2:a4:
fa:c2:7a:e8:ae:19:d9:5d:f5:bf:e4:35:a3:ac:57:
b1:26:88:4f:ff:0f:95:fd:eb:bf:c2:a9:15:e3:ed:
ce:25:d7:1f:22:83:c6:1f:4b:dc:26:36:35:7d:53:
e4:24:bf:6f:f5:06:cb:49:86:07:25:c2:03:a3:9f:
1e:af:56:b1:f8:c0:74:f3:8d:0b:58:63:00:01:fe:
05:f0:31:cc:e6:34:f7:6e:6d:1d:53:4d:ac:cd:79:
df:8c:ae:80:3e:7e:55:25:74:10:e9:2e:4b:a0:66:
d7:6e:24:f9:e4:1e:09:25:81:f6:0a:c7:c2:1a:f1:
23:b4:95:b7:a6:9f:67:f4:16:f6:4b:44:28:79:24:
ea:96:cf:a0:1c:3b:36:d7:fe:58:73:88:12:1b:0d:
83:5e:4c:f5:4e:1c:3a:7d:38:08:4d:7a:33:06:18:
9c:c8:f1:8e:e4:2a:11:7e:85:3f:f7:d4:62:ed:e9:
cc:ff:48:a7:a8:43:65:61:c2:4d:7d:42:41:5f:73:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:78:D9:59:42:62:49:B8:2C:24:BD:DA:6A:90:82:43:2B:D8:BC:96
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b9:34:0d:9c:f8:f2:3e:94:ed:07:b9:aa:65:86:fd:97:17:
74:61:1d:ad:0d:14:78:24:8e:5e:9b:15:ed:f9:f0:ab:f2:e5:
bf:7a:56:7c:bf:9c:d2:10:2a:3b:35:7c:38:83:d4:11:13:6a:
a3:7f:dc:d8:f2:aa:58:64:6f:4a:d9:20:35:7a:ef:71:60:d2:
57:57:ac:50:b6:65:be:3e:8d:42:af:d6:71:f8:bc:16:6d:26:
80:ce:77:9b:13:79:82:14:88:d9:02:d6:ea:3c:82:2f:81:30:
15:a6:9f:f0:1c:46:3f:81:bd:91:93:91:b8:fd:48:f3:af:bf:
48:5b:b5:20:01:b1:63:d7:95:a2:6c:8c:92:d5:63:08:a9:44:
36:c7:81:38:5a:90:14:60:9a:01:01:9a:1c:ef:34:c8:b6:1b:
5f:55:ea:7e:e8:99:70:f2:f8:32:94:b0:23:e5:1b:ce:e6:69:
d3:11:3a:95:9e:9d:77:01:fc:81:a9:2f:3a:cc:d3:1f:8e:de:
4f:c2:a8:e1:b4:2e:5c:ad:99:3d:89:78:a3:13:98:4a:73:6f:
37:f0:e6:33:3c:ca:6b:b9:2c:0a:cb:3b:29:f4:c1:92:64:07:
a1:8b:96:25:63:cf:a8:29:38:4d:8f:34:92:bb:70:dc:9b:da:
a3:2c:92:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:54:17 2025 by rpki-client