Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
File: JU0Xi-GyC41zhEa-BS4InImgCrM.mft (raw, json)
Hash identifier: lhU4G4LCMQsGpP0EUSCVWSsMnPUVszqRVRaY3AdYj7E=
Subject key identifier: C4:57:B5:B7:EA:7F:62:EB:E4:11:09:B2:69:39:72:CE:23:14:F9:57
Authority key identifier: 25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
Certificate issuer: /CN=254d178be1b20b8d738446be052e089c89a00ab3
Certificate serial: 019A1EADBFCC570DCCACF82DB3BB85A9CA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
Manifest number: 16F0
Signing time: Sun 26 Oct 2025 04:01:34 +0000
Manifest this update: Sun 26 Oct 2025 04:01:34 +0000
Manifest next update: Mon 27 Oct 2025 04:01:34 +0000
Files and hashes: 1: IsnX0_z6sUY7gM44dV8Vz9Tz84M.roa (hash: U6eJPJn6v41NXuScfHVoxXiwmhNM1UGaum7aJQ+kl/o=)
2: JU0Xi-GyC41zhEa-BS4InImgCrM.crl (hash: sh7rfFGWOxjhd2Rwh4D60cIjspJ32bQA7MsntFg2Uj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:bf:cc:57:0d:cc:ac:f8:2d:b3:bb:85:a9:ca:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254d178be1b20b8d738446be052e089c89a00ab3
Validity
Not Before: Oct 26 04:01:34 2025 GMT
Not After : Oct 27 04:01:34 2025 GMT
Subject: CN=c457b5b7ea7f62ebe41109b2693972ce2314f957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:52:ec:70:91:54:96:f3:38:2b:da:2e:f4:8b:
28:6f:bb:b9:ba:ff:4a:b4:f5:5d:78:e1:ac:5f:35:
43:29:09:53:b1:eb:9b:6d:a6:84:1c:ed:d6:28:6b:
87:98:ff:95:5d:4a:41:40:1e:0d:5d:7a:0e:d6:aa:
bc:a6:63:50:a3:7e:fb:95:b0:00:5e:40:f8:11:35:
1b:4d:f3:10:97:c1:67:6e:c4:db:bb:fd:0a:32:c4:
e3:49:c7:27:d5:16:ce:4c:a9:db:a8:6e:ef:27:89:
da:99:9d:01:84:b8:39:cf:1e:bb:88:2a:e2:1f:ed:
88:25:46:5b:a4:13:43:a2:d0:79:12:e1:7a:39:3e:
f9:28:59:71:fd:ba:fc:1e:6f:e8:60:b7:01:32:ad:
41:61:f8:b2:81:ae:b2:9e:8b:3e:71:3d:ad:44:ec:
1a:d5:38:90:e2:5a:5f:01:b1:6e:3e:5f:f2:7e:48:
a1:ea:f8:58:35:6b:71:22:38:4f:a0:77:06:bf:57:
5f:eb:6f:b3:7b:a3:3c:29:5c:96:61:af:f5:cb:f1:
f5:81:7e:96:a5:ec:1f:cf:71:ca:2a:d6:2c:d6:36:
c1:89:c3:9c:63:f3:90:c1:9a:04:14:63:55:a1:23:
94:08:4f:1f:5c:88:c7:c3:db:51:93:7f:1f:11:f6:
a7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:57:B5:B7:EA:7F:62:EB:E4:11:09:B2:69:39:72:CE:23:14:F9:57
X509v3 Authority Key Identifier:
keyid:25:4D:17:8B:E1:B2:0B:8D:73:84:46:BE:05:2E:08:9C:89:A0:0A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JU0Xi-GyC41zhEa-BS4InImgCrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/68ace7-3e31-4cfe-a1e4-a104d247715f/1/JU0Xi-GyC41zhEa-BS4InImgCrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:10:50:04:1b:66:b7:ef:23:5f:79:f8:94:86:7e:60:d1:05:
67:d5:a9:b3:ea:b6:00:41:29:c2:e0:ea:f0:e6:45:a2:6a:88:
95:40:9e:75:b7:61:63:b7:e1:1f:ca:ab:0c:15:40:82:7d:77:
90:03:90:42:29:e5:f7:1a:57:73:6a:62:1f:fc:c4:d1:31:26:
c6:1b:27:7d:b8:0c:ce:07:2a:75:91:0f:fa:ca:a2:4a:aa:29:
bd:7c:d3:70:88:50:72:07:77:0e:da:ea:eb:21:b6:05:31:b5:
77:03:59:32:3e:3d:cd:03:90:db:01:e6:f8:b8:c9:88:63:a9:
06:83:3c:ab:bc:01:40:b5:ea:16:5f:c0:97:ee:3d:3d:6b:26:
b8:0d:34:e3:1b:2a:d8:6e:3f:11:42:80:59:30:62:c6:b3:dd:
19:62:71:2b:6e:ad:eb:61:36:55:0a:61:84:42:20:ab:40:a6:
67:8a:81:ac:76:b3:c7:6a:04:87:f8:14:fc:3b:b7:9a:be:84:
7d:96:88:42:c3:ea:8d:ec:ab:73:d0:cd:bd:aa:c3:48:80:1c:
cf:e1:4c:43:ab:54:33:ed:73:bc:a4:02:ae:cc:b6:eb:50:62:
ca:8b:36:ca:97:04:52:3f:4d:95:d3:41:bf:60:fb:0e:eb:38:
73:58:ae:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 10:39:29 2025 by rpki-client