Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
File: JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft (raw, json)
Hash identifier: xaLsnwOU8mYfa8Go8JzpdophD3PtnjP4qJbaglzPIIk=
Subject key identifier: BE:8F:E7:F7:1C:6E:7D:67:DC:55:69:43:80:C4:07:4A:0A:59:08:00
Authority key identifier: 24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
Certificate issuer: /CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Certificate serial: 019A134DA84BE0BAF8B1232722CAA06C0288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
Manifest number: 03CC
Signing time: Thu 23 Oct 2025 23:00:47 +0000
Manifest this update: Thu 23 Oct 2025 23:00:47 +0000
Manifest next update: Fri 24 Oct 2025 23:00:47 +0000
Files and hashes: 1: JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl (hash: x6ZKsbTqRgWTzvYwUdgc7P3dOqboJTBpKhP31X3p8JY=)
2: Np4SGefOBCZiVQwVOhlw43OZIsc.roa (hash: 4LHgzyDtN1tlOUmbwRr7JMfVVPaWldi7uvsqlFbuzcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:4d:a8:4b:e0:ba:f8:b1:23:27:22:ca:a0:6c:02:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24afeae83d2d5e2ea77ac6147f75837b27f74349
Validity
Not Before: Oct 23 23:00:47 2025 GMT
Not After : Oct 24 23:00:47 2025 GMT
Subject: CN=be8fe7f71c6e7d67dc55694380c4074a0a590800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:cf:6c:8a:aa:84:91:09:90:f5:d4:91:ac:3e:
01:f8:f4:22:1c:12:b5:b4:18:b4:91:14:b3:9a:38:
30:ea:ba:ac:01:b7:e8:32:f4:63:cc:1e:ca:c1:d3:
0c:bc:a5:61:5f:2a:b3:04:5c:84:28:70:93:4e:43:
f1:38:7c:da:99:fd:78:58:81:3d:b7:73:eb:e6:60:
ce:be:2e:5f:cb:7e:ad:d2:4a:95:0b:4b:64:92:1f:
08:1a:ec:8d:44:25:79:07:5b:97:c9:f4:fd:3f:b7:
46:43:23:bc:e3:21:59:89:2a:ba:63:d0:c2:36:9b:
79:4a:7c:e4:e0:66:bc:4f:10:4f:bb:18:74:de:8b:
95:1a:99:e5:6c:ee:74:58:4b:14:93:fc:20:48:3c:
6c:a6:08:0a:4b:f3:58:65:19:f8:d0:36:0d:cc:02:
68:b8:94:30:23:1a:df:28:e9:3c:cc:f3:62:bd:85:
a4:ef:d6:fa:e7:d9:9f:d2:ca:41:e6:36:6d:08:d3:
b4:84:b2:3b:de:9c:1e:03:04:5c:89:b3:bc:39:7b:
ea:fb:c3:89:c5:31:05:e7:4f:f3:6d:89:7e:09:ed:
eb:57:c2:e5:3e:26:d3:4c:8a:f7:f4:9b:9f:bc:21:
26:e6:c0:bd:7d:3c:47:64:73:3d:e3:45:ce:cb:3b:
aa:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:E7:F7:1C:6E:7D:67:DC:55:69:43:80:C4:07:4A:0A:59:08:00
X509v3 Authority Key Identifier:
keyid:24:AF:EA:E8:3D:2D:5E:2E:A7:7A:C6:14:7F:75:83:7B:27:F7:43:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JK_q6D0tXi6nesYUf3WDeyf3Q0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7a940b-340a-4d08-afd8-53c5720cfbeb/1/JK_q6D0tXi6nesYUf3WDeyf3Q0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b4:7a:1f:b1:d3:e9:44:3d:c2:a3:dd:9f:7e:0f:29:fc:b6:
c9:50:a8:71:cf:38:2f:6b:4f:00:7e:47:ca:ab:51:be:06:24:
ff:65:92:ba:9b:d0:ce:d6:34:f6:6a:66:b0:73:49:2f:88:9e:
e4:cd:ea:2f:23:0b:87:d7:f0:32:f6:18:3e:f3:0f:8b:39:61:
81:5e:ed:77:2c:d7:7a:70:0e:5b:aa:78:27:34:df:23:76:55:
ae:3f:0d:b5:6e:dc:96:cb:52:50:2b:8a:fb:f6:3a:4d:31:6b:
fc:0c:10:16:7c:33:a9:fb:ea:89:63:81:0b:30:ad:c7:b6:b3:
f5:65:6c:7d:de:e1:1a:bb:29:a2:7b:df:d9:fe:ea:9a:39:f1:
10:c2:96:07:f7:db:44:1e:a5:cc:cb:ea:7c:f7:7e:f4:96:97:
af:d0:6f:2f:93:cd:ba:7d:d0:e3:7b:52:38:f1:56:c7:ae:e4:
1e:95:c3:81:c1:75:6c:ee:ae:b5:1e:fd:bc:ed:9d:1f:74:21:
86:a8:de:42:87:aa:13:f3:a1:f0:b4:90:d7:09:f3:da:bd:5b:
b9:94:be:80:e0:01:5c:21:7f:40:b0:58:40:29:5a:e1:10:68:
12:8d:c5:2a:43:be:61:b6:90:d8:90:35:07:a6:49:8b:0c:79:
6b:59:9a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:15:15 2025 by rpki-client