Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: TjZJkQzqgPJT9ZB4Wu3E6xxeDX1CwGKlcgk0L8S/+lc=
Subject key identifier: 8A:5A:6D:C1:3F:AD:26:3C:55:59:25:3F:70:7E:32:46:EA:04:5B:E3
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 019A0CA6AFE6BAD0765557A5685E0FD010CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 08A5
Signing time: Wed 22 Oct 2025 16:00:41 +0000
Manifest this update: Wed 22 Oct 2025 16:00:41 +0000
Manifest next update: Thu 23 Oct 2025 16:00:41 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: PKc8mGlWWOyPuyvAGw6c4SFckqBJ63xuXxX0xAaRVf0=)
2: tH5X1sIrBGaWrxtJcDhQJ2X9uHg.roa (hash: DV2Ywdf2IF4IJkXNNJ6gs2p5s2GMK9q52zFH8lpr0iI=)
3: wpydopt6VUah6RQMZrzjsU6WoPc.roa (hash: cp20Yibn6t1V4VomO6+maPrzeM92DrtR/BD0ISnTpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:a6:af:e6:ba:d0:76:55:57:a5:68:5e:0f:d0:10:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Oct 22 16:00:41 2025 GMT
Not After : Oct 23 16:00:41 2025 GMT
Subject: CN=8a5a6dc13fad263c5559253f707e3246ea045be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b0:ae:63:8f:ea:00:a8:f3:7f:7b:6e:3a:99:
0e:69:dc:24:fd:26:92:0c:44:f4:63:5e:03:17:2c:
89:ec:33:9a:b4:ac:ca:b1:8d:73:36:88:44:59:c7:
7a:24:9b:16:f9:8b:1d:96:00:6a:58:e3:73:55:29:
73:79:05:ff:be:3b:41:7a:14:f4:77:c6:62:c2:41:
d9:3a:94:53:f5:09:53:0e:9f:6a:35:af:47:cc:c7:
ab:7a:46:d8:c6:d4:97:ec:29:2c:50:2a:51:3c:f7:
23:06:cc:7f:28:23:42:86:5d:6f:c5:3e:ef:c9:a9:
07:86:46:29:ba:f2:a7:84:83:da:5c:fe:44:91:e1:
7c:ae:e2:6f:f6:ac:37:c3:de:75:8d:e7:82:70:8e:
ab:2a:7e:87:84:3e:3a:06:ba:a7:1f:b3:15:93:0b:
2b:34:87:4f:26:bd:b8:b7:1e:0f:cc:11:5b:75:ab:
15:a1:42:05:f6:89:b9:1b:f7:9c:ab:ec:09:4a:00:
8d:b9:7b:ea:7b:f8:ab:fc:72:24:55:ce:42:0d:0f:
7b:5e:9f:62:20:6e:fc:3e:36:4e:54:27:11:8f:ea:
c7:02:ba:10:1c:9b:0c:c4:4c:7f:ee:a5:7d:25:3b:
25:18:0a:7e:b8:f0:fb:2d:bf:f1:f5:1c:99:98:28:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5A:6D:C1:3F:AD:26:3C:55:59:25:3F:70:7E:32:46:EA:04:5B:E3
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:bb:95:fb:09:fe:4b:15:68:35:f3:9c:9b:ed:ff:d1:a0:bc:
42:88:0f:70:bd:63:11:15:d4:42:31:fc:da:10:72:ac:94:94:
7c:71:04:d2:8f:5f:79:e5:ec:ac:c4:d4:7b:18:f0:f0:18:40:
2b:4d:51:de:b0:33:5f:8d:6f:86:3f:4c:74:ff:21:ee:90:58:
62:77:2d:73:6f:be:cf:a3:ec:4d:9c:e5:27:2e:d6:d7:1d:c0:
86:e1:2a:bc:d0:72:ff:d4:2b:dc:d4:df:0d:f3:a0:62:12:fd:
07:8f:e6:31:c5:f5:2d:1e:bf:8d:44:f3:48:e0:d5:17:0e:b4:
cc:4f:5a:14:e3:ea:58:be:c3:b3:d6:bb:2c:30:ca:99:c9:30:
5a:6f:78:13:b0:7b:76:94:ce:f9:08:9e:9e:2b:42:c8:7f:2f:
62:e9:96:23:e4:5e:32:40:5f:91:4a:70:5e:93:27:2c:21:87:
2a:96:0a:7a:69:43:79:0b:8c:a5:ed:80:4d:44:33:9c:92:40:
e4:0c:6c:4a:bc:6c:57:14:bc:9b:da:01:09:f0:a3:df:39:44:
89:7d:42:41:f9:ad:99:5d:5f:02:42:70:08:2e:66:c9:61:c5:
b0:52:b5:52:0d:23:3d:31:12:d3:8f:ac:3e:c2:47:8c:e5:68:
f4:04:97:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 21:59:49 2025 by rpki-client