Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
File: JZSQxdvPv1kNozv703lwoHY0ack.mft (raw, json)
Hash identifier: rLOi16+K2POQou5yLSMNY3WOesTFF5hEdUJUohBC6OM=
Subject key identifier: 42:18:51:1F:23:FD:8E:46:83:EB:8A:1A:E3:C6:C1:A5:A7:0D:BC:8B
Authority key identifier: 25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
Certificate issuer: /CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Certificate serial: 019A1D2C2111103949447583045EE35378F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
Manifest number: 0F24
Signing time: Sat 25 Oct 2025 21:00:22 +0000
Manifest this update: Sat 25 Oct 2025 21:00:22 +0000
Manifest next update: Sun 26 Oct 2025 21:00:22 +0000
Files and hashes: 1: CicZBBxXimIHZjGjJxw0-P_TKwA.roa (hash: WCF5D0GYPfyQKw7aRx70x9QWu1BJyay4IJiNMiHqns8=)
2: H9YBLTYVXKAT5WhHfkCcfarIS3Y.roa (hash: VX1SELBTMMOXweJZC3AHO0K6SmWP/UMVdMCZso8oNU4=)
3: JZSQxdvPv1kNozv703lwoHY0ack.crl (hash: S2rthKhkXRKGpZFAHkml8UsGIDaw7F4/Lqf2t1lGOS0=)
4: KBHAEuTQwMUyiCX_3RfZwtGUVwk.roa (hash: MrQgPzvtmJ1OylGpfrcHItYSdYG/3jwcYZSpyY/5nO0=)
5: Xud5emWKez2CWje3_uKElUeeYZM.roa (hash: JEEaFQSLgyko90PuBT5aCnY8R+bLlVoo/ly+wTonPTM=)
6: aLqHk2UMrsAFp8O_WkYeTwl3zWg.roa (hash: KSJSQQgNlVfvoPK0hF2rIvdyy8wj5LGpw3RQ1LyRxBU=)
7: gQWFEkun2ccvVh53BL0LLh5mo3I.roa (hash: Tz3OrEHIL28w3om3xiZeD8yyhg/V93Fe5zZKo9SAMIg=)
8: lyRiID6blcYjTxuro8RbRo8yBq8.roa (hash: URzaCIkjGunchT54U9dPfC35zUMjoPWxJXeabV1SOog=)
9: yfa_WQD3YpUEPvOqlipnQtZKTbU.roa (hash: aUGBtF0Q+ZPDnjAMxIqBivvu5PiTIPwqlssloFoWyho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:2c:21:11:10:39:49:44:75:83:04:5e:e3:53:78:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259490c5dbcfbf590da33bfbd37970a0763469c9
Validity
Not Before: Oct 25 21:00:22 2025 GMT
Not After : Oct 26 21:00:22 2025 GMT
Subject: CN=4218511f23fd8e4683eb8a1ae3c6c1a5a70dbc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:ec:85:18:45:c0:d5:1e:04:21:38:87:12:
c7:39:32:66:75:8d:08:5a:15:db:e8:3e:33:8e:a5:
58:38:f9:42:83:55:42:07:b3:0d:24:73:f0:3f:ba:
96:9d:43:d2:8b:9c:42:e1:97:69:ef:a4:dc:4d:85:
0e:e9:f9:51:c3:4d:1a:e3:77:76:01:c6:3f:5f:4c:
f1:6a:46:b2:d9:bc:ba:d1:ae:50:66:fb:c7:d8:82:
e7:66:46:7d:f3:c6:34:7f:a8:02:e3:fc:99:be:27:
15:60:6c:23:d1:a1:df:ba:67:f7:ca:aa:f7:f7:49:
97:a2:21:a8:3b:36:6e:7a:4c:97:68:c4:43:b6:bf:
08:2d:b2:9e:a3:71:65:16:2c:1b:b8:c6:b7:16:f9:
53:3e:2a:74:59:0a:4b:8c:eb:11:98:8c:27:b5:b3:
7e:e3:9d:7c:4f:f8:c9:1f:c8:91:7e:31:5a:78:22:
2e:7c:9b:2b:5d:3d:06:e8:85:4a:9b:84:d7:6e:6c:
a8:a4:90:6c:18:9d:5e:33:86:0e:1d:39:67:3f:0f:
f1:54:b6:70:60:d4:2c:3f:a7:38:ad:c6:44:c1:0c:
1e:f5:fa:d5:34:2f:d9:85:04:6b:1b:5d:e8:51:ca:
47:56:df:cf:6f:ca:f0:10:14:ed:9d:e8:0a:64:ec:
13:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:18:51:1F:23:FD:8E:46:83:EB:8A:1A:E3:C6:C1:A5:A7:0D:BC:8B
X509v3 Authority Key Identifier:
keyid:25:94:90:C5:DB:CF:BF:59:0D:A3:3B:FB:D3:79:70:A0:76:34:69:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSQxdvPv1kNozv703lwoHY0ack.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/edad2d-95cc-49d0-86f4-3ce3cf8b1c49/1/JZSQxdvPv1kNozv703lwoHY0ack.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ba:fc:55:f8:01:95:c5:13:77:87:cd:53:03:5e:76:e8:28:
1d:ce:1e:f9:c6:78:ef:f9:98:85:22:ad:70:cf:21:9e:0b:76:
c2:0d:69:3f:95:81:77:3c:39:0e:16:4f:8d:91:0e:f8:25:30:
e1:f5:a6:af:5e:a3:c7:d0:62:4d:34:43:3b:74:98:04:fd:6e:
95:99:bb:6b:bb:56:62:8a:d5:28:50:29:ac:b7:53:b6:5b:2f:
e0:36:ff:f6:0e:1a:f5:5d:44:70:1d:c9:24:ec:d6:e3:ca:89:
a6:e0:ec:a1:8a:77:0b:4f:35:5b:e3:b3:44:de:dc:54:af:88:
f2:59:83:7c:22:58:22:26:51:f6:4c:3a:b0:52:50:29:1f:89:
6e:3e:ae:d3:25:1c:8c:4d:86:99:ba:11:52:fe:2a:d5:ec:09:
9e:cc:5b:a3:20:90:99:8e:84:2a:10:a0:18:77:8b:99:f1:70:
ff:84:4e:c1:7c:26:8b:be:57:19:10:22:61:6b:99:be:6e:a9:
c8:a0:99:0a:3b:bd:3c:9a:dd:6b:a9:85:48:0b:7a:23:2f:43:
20:a6:95:31:1c:e5:c2:1e:fb:d7:c3:5f:06:e7:99:50:83:c0:
57:b9:81:22:3b:ba:00:99:1c:f7:b9:cb:10:a2:0a:4d:b4:8a:
12:cc:02:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:33:24 2025 by rpki-client