Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
File: JLZgphGYDGgnMTnjKv-3S0VKnTI.mft (raw, json)
Hash identifier: PYsWU4cGv77oT1IA6A6mgO9RvWbcd2/8WuuaoGO0TsA=
Subject key identifier: B2:09:82:40:B1:66:CF:F0:7B:75:2C:45:0A:FB:FE:CF:16:0C:06:B0
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 0199DE1714408F68609C369FED64F447BAA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
Manifest number: 0E73
Signing time: Mon 13 Oct 2025 15:01:18 +0000
Manifest this update: Mon 13 Oct 2025 15:01:18 +0000
Manifest next update: Tue 14 Oct 2025 15:01:18 +0000
Files and hashes: 1: 5zfU3CLdzJ4_dnw1BhYJzGB5MAE.roa (hash: FF7iz/Png0ollPk0Y1YxpFPUlPc6nBCym+9BzksDmfY=)
2: JLZgphGYDGgnMTnjKv-3S0VKnTI.crl (hash: IPR94Lopm4SrFkcbryFpTmXpex4FrEeMfgd5gHoJUc0=)
3: _8hSLgr4JdqEI1Dpn8hoZhNP1qQ.roa (hash: GqMn4/1oRrYEDz1sgi+iXh7bgMGiwNGyyfe2qMxH+7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Oct 2025 15:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:de:17:14:40:8f:68:60:9c:36:9f:ed:64:f4:47:ba:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Oct 13 15:01:18 2025 GMT
Not After : Oct 14 15:01:18 2025 GMT
Subject: CN=b2098240b166cff07b752c450afbfecf160c06b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:90:96:7a:00:11:12:4e:a6:09:8f:ee:95:
32:46:b0:46:6e:bc:f6:4c:d6:9e:3f:ad:e6:e6:0e:
81:26:46:f3:36:ac:94:0b:d0:f0:62:ae:54:18:96:
f1:4b:dd:c8:6d:80:06:7a:34:84:e7:bc:58:d8:31:
1a:a5:c5:0e:78:9a:b6:17:2c:e1:22:2b:62:09:76:
ba:f1:60:f7:6b:8a:e3:e6:c5:e4:53:f7:a6:21:6c:
ba:36:ed:c0:f4:7f:f2:3a:d8:9c:6a:03:77:a3:41:
1f:39:f7:b7:c7:03:81:c7:ca:37:ca:fe:c6:fe:7c:
68:7a:d4:eb:95:3c:a4:af:cf:5d:23:d4:bc:09:13:
09:06:5a:ae:f7:66:1a:6d:b5:cb:9f:69:11:92:9b:
72:68:b3:3e:3b:d5:f6:2c:1f:56:c2:84:4d:4b:b7:
16:eb:6a:9c:8f:5f:60:5e:24:cb:32:0c:7e:7e:09:
54:1a:14:db:06:58:6d:73:64:6c:e5:05:f5:21:c6:
e8:f5:7a:ae:8a:18:c6:9d:3a:bd:6a:d7:27:1c:c7:
3a:0d:9a:0f:b6:84:35:37:72:62:c8:ad:54:ef:57:
f9:2a:80:8c:72:2d:31:d8:20:59:6c:60:5b:6f:7b:
76:8c:58:52:b1:5a:a8:c3:44:73:0f:a2:f4:0a:df:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:09:82:40:B1:66:CF:F0:7B:75:2C:45:0A:FB:FE:CF:16:0C:06:B0
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:35:0e:96:e4:26:78:90:21:2b:91:dc:04:a5:42:57:11:8e:
43:3f:56:c1:49:8c:5b:47:c3:68:41:92:6d:88:94:88:46:0b:
6c:8b:83:4b:4b:97:d7:1c:31:7b:ae:f0:04:75:c5:89:36:c0:
8a:a4:62:e0:a0:49:f5:d6:b7:e2:2f:f5:42:26:d4:df:96:35:
da:2b:ec:32:a3:93:af:01:a7:3f:ad:bd:3b:08:0a:ce:1e:fa:
2e:c6:e4:2c:33:d7:16:95:d0:22:90:d2:89:ed:19:81:7c:08:
39:6c:72:e7:ea:bf:1b:da:bf:86:4c:31:fa:89:cc:eb:c9:11:
5e:7d:15:da:ce:ab:e4:c4:0d:23:f0:7c:e4:ed:2d:45:69:56:
5e:a9:85:bd:00:a7:ed:78:1c:6b:12:74:5f:79:76:1c:06:8b:
45:ab:5c:26:25:9f:bd:f3:01:5d:1b:9b:c1:f5:5a:26:f3:fc:
c0:b7:03:57:62:20:22:c7:dc:3f:a7:4a:4f:1b:54:6d:90:9f:
d2:50:2a:08:58:75:14:93:79:f6:cb:43:cb:5e:36:d2:bb:d0:
54:7e:8f:1a:c3:46:12:bc:ec:f1:64:0a:b7:54:cb:40:73:39:
3b:d8:0d:f8:f4:b2:6a:4e:8a:48:3c:a6:9f:27:3c:23:bd:d7:
26:8b:d5:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZneFxRAj2hgnDaf7WT0R7qmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjY2MGE2MTE5ODBjNjgyNzMxMzllMzJhZmZiNzRiNDU0
YTlkMzIwHhcNMjUxMDEzMTUwMTE4WhcNMjUxMDE0MTUwMTE4WjAzMTEwLwYDVQQD
EyhiMjA5ODI0MGIxNjZjZmYwN2I3NTJjNDUwYWZiZmVjZjE2MGMwNmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBWQlnoAERJOpgmP7pUyRrBGbrz2
TNaeP63m5g6BJkbzNqyUC9DwYq5UGJbxS93IbYAGejSE57xY2DEapcUOeJq2Fyzh
IitiCXa68WD3a4rj5sXkU/emIWy6Nu3A9H/yOticagN3o0EfOfe3xwOBx8o3yv7G
/nxoetTrlTykr89dI9S8CRMJBlqu92YabbXLn2kRkptyaLM+O9X2LB9WwoRNS7cW
62qcj19gXiTLMgx+fglUGhTbBlhtc2Rs5QX1Icbo9XquihjGnTq9atcnHMc6DZoP
toQ1N3JiyK1U71f5KoCMci0x2CBZbGBbb3t2jFhSsVqow0RzD6L0Ct9JCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLIJgkCxZs/we3UsRQr7/s8WDAawMB8GA1UdIwQY
MBaAFCS2YKYRmAxoJzE54yr/t0tFSp0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYt
NzA1MTk3NTA3YTU5LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYtNzA1MTk3NTA3YTU5
LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzUOluQm
eJAhK5HcBKVCVxGOQz9WwUmMW0fDaEGSbYiUiEYLbIuDS0uX1xwxe67wBHXFiTbA
iqRi4KBJ9da34i/1QibU35Y12ivsMqOTrwGnP629OwgKzh76LsbkLDPXFpXQIpDS
ie0ZgXwIOWxy5+q/G9q/hkwx+onM68kRXn0V2s6r5MQNI/B85O0tRWlWXqmFvQCn
7XgcaxJ0X3l2HAaLRatcJiWfvfMBXRubwfVaJvP8wLcDV2IgIsfcP6dKTxtUbZCf
0lAqCFh1FJN59stDy1420rvQVH6PGsNGErzs8WQKt1TLQHM5O9gN+PSyak6KSDym
nyc8I73XJovVMQ==
-----END CERTIFICATE-----
Generated at Tue Oct 14 00:54:37 2025 by rpki-client