Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
File: JFcCfjoIe2X5aLU15BX2dDJpWHY.mft (raw, json)
Hash identifier: ttwXAxZdjX4RrIC+L1q0dXaaIgOPSAQyxagSXCWt6Do=
Subject key identifier: DC:D9:5F:4C:63:D9:D9:23:9B:94:18:32:64:23:D1:91:4A:EA:D9:6C
Authority key identifier: 24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
Certificate issuer: /CN=2457027e3a087b65f968b535e415f67432695876
Certificate serial: 019A21ADF0246519B6CCCB312519F31BCDFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
Manifest number: 0A10
Signing time: Sun 26 Oct 2025 18:00:38 +0000
Manifest this update: Sun 26 Oct 2025 18:00:38 +0000
Manifest next update: Mon 27 Oct 2025 18:00:38 +0000
Files and hashes: 1: JFcCfjoIe2X5aLU15BX2dDJpWHY.crl (hash: Fae757wPElmCAurCn02Mjd2Deaisr6UMzQd9aQvKlfY=)
2: YRQ4mvsGwzil4hFVAUOAk6dNVCU.roa (hash: X5eaS1qa/k5JOAN5WxaVK8Rkr/iQxPqJC1ctHVNkj8M=)
3: clLzc_fPy2OSfEJhnvCxw-gzmJg.roa (hash: QOQMhVAiztAASS43Dph/mctPcwas/jY/zxydrARjdnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:ad:f0:24:65:19:b6:cc:cb:31:25:19:f3:1b:cd:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2457027e3a087b65f968b535e415f67432695876
Validity
Not Before: Oct 26 18:00:38 2025 GMT
Not After : Oct 27 18:00:38 2025 GMT
Subject: CN=dcd95f4c63d9d9239b9418326423d1914aead96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b3:7e:a5:dd:ac:02:ef:72:cc:32:ff:3c:4d:
b7:9d:e6:6c:62:e1:ef:80:37:ae:48:d2:b0:b8:cf:
cb:d1:59:e4:68:d4:9f:f2:74:27:a1:a8:12:5c:21:
5a:a2:0a:3b:20:80:f0:41:68:c1:1f:cf:e6:16:85:
59:91:09:30:fe:17:02:79:26:b3:a4:6a:4f:82:e3:
30:f9:c9:7b:f8:51:df:0b:25:9e:6b:01:e9:8a:9d:
f0:a3:43:19:f0:e4:da:42:28:b8:13:5d:06:bf:31:
0c:39:d9:fe:0b:3c:1f:ed:92:7c:fe:bf:e8:cc:df:
b6:ac:7f:c7:b2:a2:d4:42:bf:34:5b:81:dd:59:a9:
d1:c3:f4:d5:f2:9e:e9:d2:b0:ea:90:4b:69:24:ce:
96:f1:e8:77:bb:1e:3d:f0:f2:bb:6d:53:24:c7:7f:
64:fd:ab:59:0d:6b:06:6e:32:39:98:e9:bd:25:9e:
f2:1d:29:9f:c8:c7:8b:08:39:b7:20:6d:08:46:b1:
52:6d:0d:57:1f:e7:c2:b3:aa:5a:68:0f:2c:4a:e3:
d9:3a:fd:4e:9f:bc:34:ba:4a:21:b5:2c:93:6f:74:
f8:cb:27:42:2f:ff:dc:b9:d9:96:62:b0:45:34:03:
f8:fb:c8:46:c1:64:fb:d2:71:01:35:50:60:42:4d:
71:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D9:5F:4C:63:D9:D9:23:9B:94:18:32:64:23:D1:91:4A:EA:D9:6C
X509v3 Authority Key Identifier:
keyid:24:57:02:7E:3A:08:7B:65:F9:68:B5:35:E4:15:F6:74:32:69:58:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFcCfjoIe2X5aLU15BX2dDJpWHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/95f320-c7d3-41dd-b125-b79d08fa1747/1/JFcCfjoIe2X5aLU15BX2dDJpWHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5b:7e:d0:66:15:42:61:1e:ba:9d:43:cc:43:a9:23:26:1e:
f3:99:59:0c:94:cf:f1:b0:bc:78:66:1d:01:4d:bc:95:85:84:
90:d4:c5:2a:2b:0a:fd:07:90:9d:d5:47:ae:00:81:0d:ed:7a:
65:f3:2c:0e:08:3d:1a:8d:eb:8f:1f:3f:06:59:e6:d6:ce:08:
ad:41:89:29:af:af:98:4b:62:2a:c8:33:5b:ee:67:39:be:2d:
27:3f:78:d0:26:dd:1d:8d:71:28:af:1b:9c:a1:76:b6:d4:86:
22:01:7c:c3:0f:85:e2:00:10:73:d5:e8:2a:09:a5:4d:03:0b:
ad:d7:6d:55:24:7b:2c:16:59:68:bf:6f:9d:d4:87:3c:a8:2a:
2d:d4:3c:b8:d5:70:11:a8:0a:26:40:56:91:76:96:66:fb:af:
ab:c6:7e:4f:ac:53:64:52:75:ed:9e:89:aa:ee:8c:f6:ea:34:
e9:1a:57:2b:2a:b4:5f:75:7e:d5:23:67:14:2b:3e:5e:cf:cc:
90:a9:99:a4:fe:24:25:5e:f2:63:3e:cf:c3:b2:67:a5:89:12:
c5:40:f9:10:b1:c6:6a:f6:24:d5:6a:7d:85:19:dd:7f:50:c7:
e6:97:9b:a4:37:7b:9a:67:21:e0:e6:07:9b:78:d8:e2:ef:6d:
ad:10:e9:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZohrfAkZRm2zMsxJRnzG83/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTcwMjdlM2EwODdiNjVmOTY4YjUzNWU0MTVmNjc0MzI2
OTU4NzYwHhcNMjUxMDI2MTgwMDM4WhcNMjUxMDI3MTgwMDM4WjAzMTEwLwYDVQQD
EyhkY2Q5NWY0YzYzZDlkOTIzOWI5NDE4MzI2NDIzZDE5MTRhZWFkOTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrN+pd2sAu9yzDL/PE23neZsYuHv
gDeuSNKwuM/L0VnkaNSf8nQnoagSXCFaogo7IIDwQWjBH8/mFoVZkQkw/hcCeSaz
pGpPguMw+cl7+FHfCyWeawHpip3wo0MZ8OTaQii4E10GvzEMOdn+Czwf7ZJ8/r/o
zN+2rH/HsqLUQr80W4HdWanRw/TV8p7p0rDqkEtpJM6W8eh3ux498PK7bVMkx39k
/atZDWsGbjI5mOm9JZ7yHSmfyMeLCDm3IG0IRrFSbQ1XH+fCs6paaA8sSuPZOv1O
n7w0ukohtSyTb3T4yydCL//cudmWYrBFNAP4+8hGwWT70nEBNVBgQk1xkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNzZX0xj2dkjm5QYMmQj0ZFK6tlsMB8GA1UdIwQY
MBaAFCRXAn46CHtl+Wi1NeQV9nQyaVh2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUt
Yjc5ZDA4ZmExNzQ3LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy85NWYzMjAtYzdkMy00MWRkLWIxMjUtYjc5ZDA4ZmExNzQ3
LzEvSkZjQ2Zqb0llMlg1YUxVMTVCWDJkREpwV0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS1t+0GYV
QmEeup1DzEOpIyYe85lZDJTP8bC8eGYdAU28lYWEkNTFKisK/QeQndVHrgCBDe16
ZfMsDgg9Go3rjx8/Blnm1s4IrUGJKa+vmEtiKsgzW+5nOb4tJz940CbdHY1xKK8b
nKF2ttSGIgF8ww+F4gAQc9XoKgmlTQMLrddtVSR7LBZZaL9vndSHPKgqLdQ8uNVw
EagKJkBWkXaWZvuvq8Z+T6xTZFJ17Z6Jqu6M9uo06RpXKyq0X3V+1SNnFCs+Xs/M
kKmZpP4kJV7yYz7Pw7JnpYkSxUD5ELHGavYk1Wp9hRndf1DH5pebpDd7mmch4OYH
m3jY4u9trRDpZg==
-----END CERTIFICATE-----
Generated at Mon Oct 27 01:32:44 2025 by rpki-client