Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: KPR498W6omwTh1AhZsZuRabnVhyBsDX1Xnv5mNka1/g=
Subject key identifier: E4:E9:1F:25:87:D6:F3:E4:E1:79:49:79:68:8D:CF:9A:DF:07:1F:3C
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 019A1C195722CEFA2879B57561BB42600BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 16F4
Signing time: Sat 25 Oct 2025 16:00:13 +0000
Manifest this update: Sat 25 Oct 2025 16:00:13 +0000
Manifest next update: Sun 26 Oct 2025 16:00:13 +0000
Files and hashes: 1: 5n1EQkcmRaucyrGX88Dgx7YQ19k.roa (hash: t4Vnu9tnDcftty/GlXBTfwRRN3QnsJxvx0/8WS/aC10=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: AjsHd0vBwePnRx/z1JA0rydLPcdn/GtgHT+0Hc8QJQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:57:22:ce:fa:28:79:b5:75:61:bb:42:60:0b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Oct 25 16:00:13 2025 GMT
Not After : Oct 26 16:00:13 2025 GMT
Subject: CN=e4e91f2587d6f3e4e1794979688dcf9adf071f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:55:43:f1:3c:57:3a:31:c7:0e:c7:3b:9f:
13:e5:f8:77:52:9d:99:6f:98:5a:c0:a8:82:54:6e:
09:af:ec:9e:e0:c0:a8:46:a3:cb:4b:d2:bf:c1:e7:
e0:67:3d:1c:aa:47:1f:3c:90:c3:ed:98:4d:d5:06:
26:ee:b3:26:56:62:d7:83:00:1c:9c:5e:c9:e6:a2:
97:a7:38:af:ba:3f:21:d6:71:eb:c9:03:3f:c8:03:
15:0a:42:17:bf:cd:19:8b:56:c0:9f:5c:64:fc:8d:
d4:04:32:ba:50:5a:b6:52:28:d6:81:57:46:80:9a:
c7:d9:c6:de:bc:f6:90:9e:ab:99:1e:e4:b8:c0:c8:
98:c8:dc:77:e6:38:b4:4d:2f:e4:12:44:d4:a8:8c:
1c:4f:e2:07:1f:84:92:ed:f3:76:93:ed:63:97:03:
44:68:f8:bb:22:58:0d:71:06:f7:52:9d:aa:44:9c:
62:2f:21:ff:2a:74:cd:55:86:97:15:67:66:06:bf:
f1:66:3b:79:c2:bd:89:b2:64:82:81:e1:d3:d0:d7:
c1:6c:3e:19:c4:92:74:07:3d:be:44:a3:61:d9:f8:
ec:fd:0d:22:54:c8:49:67:6e:fe:f7:9f:c6:ff:57:
66:e0:fa:a3:10:43:aa:19:90:fc:84:15:f4:e7:6d:
c1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E9:1F:25:87:D6:F3:E4:E1:79:49:79:68:8D:CF:9A:DF:07:1F:3C
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:71:02:1a:2d:00:10:76:a1:a2:7c:13:e2:4b:27:cb:30:5a:
0e:36:54:d0:c8:de:5f:ab:ed:75:fc:12:be:a2:7e:79:f5:11:
5a:be:ca:34:c5:ec:3a:ee:50:34:d5:1a:d4:59:45:08:4e:57:
bb:4c:d7:45:55:fa:d3:ac:a9:f9:97:b3:73:e7:c9:57:95:f6:
a9:79:6f:ec:8a:40:de:20:8e:1f:c2:45:92:e1:c3:54:40:29:
bf:8c:ef:55:5f:f4:23:82:f8:0c:d8:bd:06:0a:bb:c7:75:e0:
f0:e1:86:ad:ad:fa:d7:32:e7:85:99:3b:86:d0:c5:ea:b2:4f:
6f:96:3c:d7:8e:9f:39:c1:44:46:ff:34:12:57:ee:99:09:38:
fd:cb:31:25:f9:30:b8:d8:69:00:2e:f2:d4:83:6a:27:25:b8:
62:22:2f:02:cd:73:9a:8a:11:12:c0:31:ed:13:36:84:ff:a4:
f8:ea:ce:09:b3:b6:9d:aa:03:75:80:80:93:07:2d:f6:b5:ab:
55:69:b7:ae:96:bf:c6:4c:35:4d:3e:b5:a0:ae:ad:1b:e4:d7:
e0:36:6c:d2:e8:00:64:33:b3:9f:4b:44:75:79:ef:7d:9b:50:
52:13:87:44:11:71:72:d3:7e:7b:56:82:8f:f5:d9:9f:db:e4:
af:7e:d0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:09:39 2025 by rpki-client