Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft (raw, json)
Hash identifier: JuFLZ/Kwb/voOCpPw7dizMceuceiJN3hgmOd97sT1gA=
Subject key identifier: 1A:3A:3D:E1:5D:C9:68:9D:F7:11:85:5F:6A:6B:15:A7:BE:5D:62:4E
Authority key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Certificate issuer: /CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Certificate serial: 019A22F79198144FF6214E8003CE76607A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
Manifest number: 14D2
Signing time: Mon 27 Oct 2025 00:00:41 +0000
Manifest this update: Mon 27 Oct 2025 00:00:41 +0000
Manifest next update: Tue 28 Oct 2025 00:00:41 +0000
Files and hashes: 1: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl (hash: RGC9NWPZiEUYABQ5Vmc7CkZ6GiQsr7QG6R0G1Ea1WtI=)
2: WGqsuG2r1cPbNk_SlZ77XH2CRuc.roa (hash: LWTe3RG5x6p18VhZoks9MnTE5mxlsn7m+dciM17vR7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:91:98:14:4f:f6:21:4e:80:03:ce:76:60:7a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Validity
Not Before: Oct 27 00:00:41 2025 GMT
Not After : Oct 28 00:00:41 2025 GMT
Subject: CN=1a3a3de15dc9689df711855f6a6b15a7be5d624e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:dc:dd:ba:ea:a2:de:47:4c:ed:c5:9c:eb:
ac:6c:ac:f6:d4:9e:2d:1d:40:6d:f3:15:92:8c:88:
38:33:5d:28:74:ca:eb:45:09:33:5c:ef:5d:1d:02:
74:3d:68:eb:16:f5:bb:34:bd:90:f4:4d:98:6e:d5:
e2:e3:d5:00:79:77:35:b0:a4:42:34:e2:bf:37:89:
61:39:07:eb:f3:c3:c6:05:6d:ba:b0:56:0c:12:02:
00:10:14:ee:bc:39:02:2d:d9:27:43:9e:da:a6:18:
f2:b9:68:95:3e:b6:9f:70:79:61:8e:fe:0b:ae:26:
d9:8e:70:24:1d:a7:8a:52:6b:67:22:3e:56:a1:94:
37:13:0b:2f:0d:6d:3a:78:9b:33:d9:5b:9f:84:2c:
78:aa:c9:26:b7:ca:11:a3:7d:dc:76:c5:9b:17:25:
01:50:2c:37:ef:cd:32:6b:0b:9d:0b:d8:18:cb:c8:
2d:3c:77:ba:6a:56:81:ec:98:26:b0:07:b5:02:91:
0e:af:6c:fb:37:98:6b:3b:2b:1c:77:8c:f6:01:8f:
00:ec:14:e8:11:e8:1c:bb:19:e9:aa:21:f2:4a:b3:
be:84:83:86:d8:ff:b4:26:06:77:0b:18:8c:d8:fc:
83:d4:b8:41:36:5b:ac:41:ca:df:ab:40:cd:57:78:
7d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3A:3D:E1:5D:C9:68:9D:F7:11:85:5F:6A:6B:15:A7:BE:5D:62:4E
X509v3 Authority Key Identifier:
keyid:24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c6:ca:75:c3:18:29:69:7e:6b:83:5a:e7:b2:7b:57:8f:2c:
1f:30:df:86:9e:3b:5f:c0:c6:37:cb:ac:b5:0d:71:c6:35:be:
c9:34:60:0d:82:48:b4:ff:19:db:03:bf:71:ce:2f:99:e0:4a:
eb:4b:2a:59:1e:11:35:4e:8f:bf:a4:80:18:a5:47:18:5b:a0:
02:d5:41:ac:71:20:41:cb:61:55:ba:e2:1f:2b:d3:0c:d2:84:
68:a8:ef:3e:96:30:57:21:39:50:82:15:6c:a1:99:29:b3:0a:
9d:90:dd:6c:e3:8f:93:49:8b:e0:0e:f2:b7:d2:fc:ed:d3:eb:
f5:43:eb:f5:90:03:ee:21:b6:d5:25:f6:c3:4e:5b:4f:10:d2:
4e:7a:5d:e4:f9:e9:7f:11:9e:2f:ec:4c:25:fb:9c:e2:cd:55:
e2:60:df:d5:cc:e0:d2:a0:c9:21:20:46:20:5f:a4:36:d4:66:
86:2f:77:06:3e:bd:17:48:40:c9:74:60:db:1d:c1:c2:2d:22:
88:5d:78:70:59:d9:2e:27:b7:f7:f5:22:d3:d7:d0:af:c7:44:
a7:ed:2d:c1:5a:55:b8:3a:9c:1e:63:94:07:47:e7:44:24:62:
1a:ba:9f:17:51:70:3b:cc:53:3c:5c:0d:7e:55:39:ae:96:b8:
1b:d9:f8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:24:36 2025 by rpki-client