Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
File: JPUbvfAQiNNMa6ru-GvaJanwIZY.mft (raw, json)
Hash identifier: 6ycZb93jmKXkPhk95gWoi1qIDzxTNnjoHdsrpKfctps=
Subject key identifier: 92:B3:B6:0B:26:2E:76:98:49:62:E4:6E:93:0B:38:B4:72:9E:81:3E
Authority key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Certificate issuer: /CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Certificate serial: 019A1F1B128CB10BB4A1D002F8FB50C63883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
Manifest number: 07CE
Signing time: Sun 26 Oct 2025 06:00:59 +0000
Manifest this update: Sun 26 Oct 2025 06:00:59 +0000
Manifest next update: Mon 27 Oct 2025 06:00:59 +0000
Files and hashes: 1: JPUbvfAQiNNMa6ru-GvaJanwIZY.crl (hash: CLpKmDQ8fBmFobiPqJ6AUeRc/QExFlM0qGS8JS/BHXk=)
2: fLXiRPdHI-7ZXM738GnPEvoiyOc.roa (hash: mxOqTfa0/eUKhzvYGP8+UstSP5NK5/GLU01oehfJvC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1b:12:8c:b1:0b:b4:a1:d0:02:f8:fb:50:c6:38:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Validity
Not Before: Oct 26 06:00:59 2025 GMT
Not After : Oct 27 06:00:59 2025 GMT
Subject: CN=92b3b60b262e76984962e46e930b38b4729e813e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:c8:7c:b4:88:46:7a:56:74:b5:ae:45:53:
69:80:a7:a1:7b:c2:1e:77:72:8e:45:f0:b0:3d:60:
e4:1b:cb:b1:bc:f6:ee:77:d6:9e:50:d2:f5:8e:26:
ce:81:eb:d1:58:92:9f:14:0a:b4:70:cf:90:94:1b:
25:42:f1:2f:17:d8:0b:a2:39:0e:3b:8b:c2:66:67:
42:c9:9f:9e:29:3f:e0:e1:c5:40:54:cc:61:f2:b7:
9a:39:49:d2:30:16:41:11:c2:45:89:73:1a:07:1a:
c0:64:5c:b9:61:1b:5c:43:df:c7:59:10:15:fb:e5:
27:7b:d4:4f:2d:e6:4a:bf:68:95:23:9e:27:56:47:
67:7b:bc:19:65:85:e7:49:2c:4d:7e:8c:f0:60:8e:
4a:5d:f9:4d:5b:fc:5c:29:c8:1b:99:77:96:26:d1:
f5:ca:3f:c1:e9:53:3d:6f:26:0e:17:47:73:6d:8c:
24:72:24:fe:a7:69:dc:54:ca:f1:72:76:c5:fb:20:
04:61:28:87:77:a9:1e:0f:64:16:ac:a7:16:bf:14:
4d:77:24:93:05:90:05:dc:54:4c:de:09:03:aa:23:
75:25:c8:4e:73:8c:7a:f8:95:db:9a:08:26:04:e5:
fd:82:24:19:ca:a9:d6:60:53:6c:93:8f:27:1c:c1:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B3:B6:0B:26:2E:76:98:49:62:E4:6E:93:0B:38:B4:72:9E:81:3E
X509v3 Authority Key Identifier:
keyid:24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:0b:5f:54:cb:01:1c:dd:fe:92:6e:b2:09:10:a3:4a:6d:52:
85:0c:4f:30:cd:5e:86:e3:d3:45:01:d6:a7:58:84:2f:2a:a1:
4d:8c:4c:f9:5e:03:cd:a9:73:7c:5f:d3:07:fc:4e:fe:51:f7:
3f:b8:47:3b:69:9c:d8:ec:bd:29:f5:bb:71:b7:31:5e:c2:6f:
75:6b:77:11:63:65:8c:4e:62:fe:c0:7e:57:3a:68:d4:ee:35:
37:1f:2d:9f:23:d5:8c:39:36:b8:6a:ca:fd:07:13:c9:48:7e:
e9:66:f6:79:28:60:a2:21:26:12:d3:ca:f5:ff:36:28:5a:40:
72:48:05:38:ca:e5:c7:f2:68:61:b0:09:43:9e:37:af:f6:f2:
7f:22:fa:09:90:82:c4:be:be:e0:e1:08:fc:d3:a6:18:29:06:
fa:ee:ba:2a:d6:a0:a7:f3:8a:61:3f:a8:9d:61:12:31:15:74:
93:5c:30:4f:ed:69:a9:6e:a1:8a:07:ff:0e:37:a8:be:44:36:
3e:ff:30:18:06:de:50:92:6c:d8:6d:24:21:43:08:03:11:2c:
ca:f7:42:37:e5:9d:80:9a:a3:49:b7:10:e5:63:38:78:96:6c:
31:2a:4d:f2:3c:5c:e4:71:91:df:81:27:d1:51:35:af:5a:76:
23:a6:4d:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofGxKMsQu0odAC+PtQxjiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZjUxYmJkZjAxMDg4ZDM0YzZiYWFlZWY4NmJkYTI1YTlm
MDIxOTYwHhcNMjUxMDI2MDYwMDU5WhcNMjUxMDI3MDYwMDU5WjAzMTEwLwYDVQQD
Eyg5MmIzYjYwYjI2MmU3Njk4NDk2MmU0NmU5MzBiMzhiNDcyOWU4MTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrfIfLSIRnpWdLWuRVNpgKehe8Ie
d3KORfCwPWDkG8uxvPbud9aeUNL1jibOgevRWJKfFAq0cM+QlBslQvEvF9gLojkO
O4vCZmdCyZ+eKT/g4cVAVMxh8reaOUnSMBZBEcJFiXMaBxrAZFy5YRtcQ9/HWRAV
++Une9RPLeZKv2iVI54nVkdne7wZZYXnSSxNfozwYI5KXflNW/xcKcgbmXeWJtH1
yj/B6VM9byYOF0dzbYwkciT+p2ncVMrxcnbF+yAEYSiHd6keD2QWrKcWvxRNdyST
BZAF3FRM3gkDqiN1JchOc4x6+JXbmggmBOX9giQZyqnWYFNsk48nHMGrHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKztgsmLnaYSWLkbpMLOLRynoE+MB8GA1UdIwQY
MBaAFCT1G73wEIjTTGuq7vhr2iWp8CGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYt
NTIwMWEyM2Q3YTQ5LzEvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9lOGViZDYtNTYxZC00MmFmLWJiMzYtNTIwMWEyM2Q3YTQ5
LzEvSlBVYnZmQVFpTk5NYTZydS1HdmFKYW53SVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwQtfVMsB
HN3+km6yCRCjSm1ShQxPMM1ehuPTRQHWp1iELyqhTYxM+V4DzalzfF/TB/xO/lH3
P7hHO2mc2Oy9KfW7cbcxXsJvdWt3EWNljE5i/sB+Vzpo1O41Nx8tnyPVjDk2uGrK
/QcTyUh+6Wb2eShgoiEmEtPK9f82KFpAckgFOMrlx/JoYbAJQ543r/byfyL6CZCC
xL6+4OEI/NOmGCkG+u66Ktagp/OKYT+onWESMRV0k1wwT+1pqW6higf/DjeovkQ2
Pv8wGAbeUJJs2G0kIUMIAxEsyvdCN+WdgJqjSbcQ5WM4eJZsMSpN8jxc5HGR34En
0VE1r1p2I6ZNyQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 12:09:14 2025 by rpki-client