Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
File: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft (raw, json)
Hash identifier: /aVVTBpXXg1XnT/5HZ4klkCPdlwZrEVx5OO0bKgvRTU=
Subject key identifier: 5C:2A:E3:28:DB:4F:0A:84:04:CE:60:08:79:1B:46:E6:4F:2D:E7:88
Authority key identifier: 24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
Certificate issuer: /CN=24350aa8a94af666099fd073ec621cd15d04b316
Certificate serial: 019A1F88E703AFFCEC780696060A4E1BEBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 08:00:56 +0000
Manifest this update: Sun 26 Oct 2025 08:00:56 +0000
Manifest next update: Mon 27 Oct 2025 08:00:56 +0000
Files and hashes: 1: Cg0yCK2kQVd5LZZHHCdBRelfy-8.roa (hash: EJ5qFjEdSIaKu0rEkfVQQqMjYA83tlJGweW9Y6wELDM=)
2: DOAjS6N6DDMCT5Gs48jEEQ8kKdo.roa (hash: RxOSt+nS2Pi/oAjRbiU1f0I2BGNusR2WMtoxS2juhtk=)
3: JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl (hash: PJ9JHBwjBM4dF01fXdxKpHK2aB1RTpdtizsHsMqHMQs=)
4: NAFWH-6HZko-2jXV8t7oA0HzSIU.roa (hash: evlx0SvXozysnwaGLeRFiaf3O6MnrQAS3vJN/CS0+Og=)
5: ZDqkiej3KvbVcchBqYbs_m_58AA.roa (hash: WNRpgM2RfMTJF9WJxnTJzmUWmkHVlsXryqz1NtCqsaw=)
6: dtjkwOe--LCCK4SbfbTdSzg4V0w.roa (hash: DEavIckb2pS6VVqJFeMdsfbc6yjw9j8R9FNcBP297Fg=)
7: gvqSMksH9JFq1OfSJxdxmDTsBXc.roa (hash: osF872WgvjeWIvsXIp7+FXDCTfbIPesx6UeUql8Clms=)
8: pjBzn2Sy238yqyUOKntcgX57jHI.roa (hash: b3xbE8EnvkIkCdg8uGMMqz1ugaDBKhweBVSuxKKNfPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:e7:03:af:fc:ec:78:06:96:06:0a:4e:1b:eb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24350aa8a94af666099fd073ec621cd15d04b316
Validity
Not Before: Oct 26 08:00:56 2025 GMT
Not After : Oct 27 08:00:56 2025 GMT
Subject: CN=5c2ae328db4f0a8404ce6008791b46e64f2de788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:6d:70:e3:51:7e:8a:83:90:3d:49:ce:fd:
6f:ba:c1:13:87:55:58:73:6c:e9:ce:64:f9:b0:3c:
5a:04:ae:91:19:19:83:3c:4c:2c:9e:3a:66:10:e7:
0f:19:ba:e9:33:be:0d:04:05:29:ef:c9:8d:da:32:
1d:cd:50:82:02:64:6f:74:32:87:d6:39:50:e2:41:
97:68:81:42:5f:b8:3a:44:8d:e1:33:22:93:62:46:
5b:6b:93:da:5a:d6:f0:0f:9b:90:33:37:19:c1:56:
c3:85:b4:95:63:13:fe:84:d9:fb:90:70:68:3d:81:
2c:d9:cf:a8:cf:38:97:dd:dd:27:70:ce:84:7e:1a:
02:84:a6:12:7d:e5:de:96:95:20:2b:2d:9a:ca:47:
cc:18:59:d5:b3:ed:b6:39:74:51:31:a6:2d:ac:19:
32:42:e3:e2:d8:6c:7c:84:b0:aa:b6:79:0c:f1:9f:
f6:ec:05:55:77:03:3f:52:2b:63:94:f6:81:4f:57:
4a:30:7a:4a:7b:15:c0:7d:a5:9c:68:6a:1c:6c:df:
34:7e:30:b8:c8:6f:ed:f4:01:57:f8:fc:ea:c3:10:
9b:6e:5d:31:3f:9b:b2:2e:f3:f0:cb:37:22:f0:6e:
6d:64:cf:35:d1:80:71:9a:53:ce:bc:30:74:2a:de:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:2A:E3:28:DB:4F:0A:84:04:CE:60:08:79:1B:46:E6:4F:2D:E7:88
X509v3 Authority Key Identifier:
keyid:24:35:0A:A8:A9:4A:F6:66:09:9F:D0:73:EC:62:1C:D1:5D:04:B3:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ab62e7-7367-4bde-934a-b42522d05895/1/JDUKqKlK9mYJn9Bz7GIc0V0EsxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e3:89:98:42:22:12:ad:08:4c:54:1b:93:8c:64:21:a8:11:
7e:8d:d3:1e:ce:92:bf:67:99:cd:38:78:2b:54:f2:8b:04:a0:
7a:fc:29:6c:4d:c1:81:3f:3c:8b:4e:c1:d9:94:2c:db:25:74:
58:6f:ad:d1:58:e8:90:73:2d:46:0e:fd:db:8a:ce:27:dc:d1:
9f:4a:3d:38:69:17:13:19:8b:db:c3:1a:6d:7a:64:db:9f:d6:
00:6c:27:96:bc:6f:1a:8d:3c:c4:f0:91:90:ef:60:7e:97:01:
d1:a8:4a:d5:40:82:cb:19:25:10:b4:6b:06:05:79:5c:71:30:
4d:a5:a6:9c:6a:36:51:e8:71:a2:de:2c:06:11:57:40:2a:c6:
fc:1d:5e:75:c6:b1:3a:40:34:f1:f4:50:80:d5:d2:20:ae:e2:
93:06:69:55:ca:84:9e:99:92:22:aa:e6:d5:72:08:ee:8d:9c:
6c:f2:75:ed:99:3e:8a:68:cd:4a:61:8e:66:77:14:35:7e:bd:
3a:65:a9:9b:4d:97:57:11:1c:68:c4:0e:c4:12:05:90:25:03:
3e:e6:0e:7f:21:7d:f8:2b:e2:61:2a:31:61:c5:b5:40:ed:d7:
3a:9a:5e:be:91:69:15:11:72:6b:58:4f:f9:88:db:6c:25:8e:
23:aa:5e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:31:15 2025 by rpki-client