Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
File: JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft (raw, json)
Hash identifier: bIhG3C/rf3zFNx+QbGClmZqHr9yGa3f/P29iR6UM37A=
Subject key identifier: 06:6A:DF:78:19:66:D9:34:A9:CA:F2:D3:C6:1D:C2:31:BC:FA:E6:5B
Authority key identifier: 27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
Certificate issuer: /CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Certificate serial: 019A71B98287D9260B531EC16F91233ECE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:02:54 +0000
Manifest this update: Tue 11 Nov 2025 07:02:54 +0000
Manifest next update: Wed 12 Nov 2025 07:02:54 +0000
Files and hashes: 1: A60RBGadDjKdPHVlJg0uqTD974Q.roa (hash: 4fXWgPDCvs0uk8MBVH/S+SmZyRTmunHNR49bT2RcI7c=)
2: JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl (hash: RmPvJP8+hDxw4W4hSx562/aLXDxCTQD54Tbu5lggYaE=)
3: ai_RgbT0zKstqqt2SbvFvSaAldI.roa (hash: +RxVDzpwxX0PVjGcCVeFRTO/OITdBFvoCwZmWeh/ZW4=)
4: tVPF_FMNIzvy1aLQDH9JsXjnUzc.roa (hash: NZpf0UeNwGFLjgoytkNM8IGey5uL4sin2yYuLpIaeRY=)
5: wDIhn2R8gp8Ak2ZXBIhikAaJW-g.roa (hash: OepYAELbBzS8mDh4vcbHfRlHazKGsQKZdJc2NWmplLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:82:87:d9:26:0b:53:1e:c1:6f:91:23:3e:ce:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270290f5f31f238df3e8f3bdfcc05751cc2f192c
Validity
Not Before: Nov 11 07:02:54 2025 GMT
Not After : Nov 12 07:02:54 2025 GMT
Subject: CN=066adf781966d934a9caf2d3c61dc231bcfae65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c1:b3:cd:cc:0f:05:5f:98:8e:cc:fb:33:70:
7a:bc:fb:1f:1a:c0:43:aa:64:78:98:c2:64:52:50:
ba:fc:8e:34:c1:85:5f:79:c4:ff:da:08:d8:3d:24:
0e:e9:19:93:2c:93:b3:02:56:67:e8:ef:af:6c:46:
a5:ff:a1:91:d4:f6:36:88:74:bd:0d:6f:74:54:42:
a6:08:ef:b3:10:54:07:e7:e2:8b:a7:bc:4c:0a:5b:
49:d0:71:d0:91:3d:87:99:ea:00:4f:99:14:7b:ec:
0d:b4:97:54:09:12:c8:f2:7b:9d:cf:d6:24:93:e7:
8c:14:5a:cb:f3:31:f0:21:11:bd:c0:78:64:99:79:
9d:c7:6a:b3:d7:e9:0f:66:c8:8f:ff:a1:49:01:96:
2e:ec:e3:f8:0b:ba:e2:84:79:ae:4f:b7:c8:53:b7:
19:82:88:4f:de:85:54:7d:a2:1e:a2:a2:17:15:15:
50:12:27:59:86:a5:dd:06:02:f8:c6:2e:a7:16:a6:
56:f1:2f:df:58:ed:77:47:d7:b3:85:82:44:70:29:
83:20:a6:31:51:82:84:92:bb:ac:d5:05:55:2c:ad:
35:17:14:db:dd:b6:42:9e:cb:b9:a8:ea:46:ee:5f:
17:17:10:9a:73:08:12:95:e8:d0:a6:46:f8:4f:cd:
36:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6A:DF:78:19:66:D9:34:A9:CA:F2:D3:C6:1D:C2:31:BC:FA:E6:5B
X509v3 Authority Key Identifier:
keyid:27:02:90:F5:F3:1F:23:8D:F3:E8:F3:BD:FC:C0:57:51:CC:2F:19:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKQ9fMfI43z6PO9_MBXUcwvGSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a5930a-7233-4ee9-9900-b14cc91c776c/1/JwKQ9fMfI43z6PO9_MBXUcwvGSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f7:26:bf:4d:61:39:4b:b6:85:73:93:f4:cc:19:78:1e:ef:
46:f1:52:2f:1f:6b:75:ae:44:3e:6c:68:50:0b:49:e9:3e:8a:
e6:1d:a9:29:f0:dc:fd:0f:62:ae:39:02:c6:87:c2:05:4c:bc:
38:29:44:e9:61:1f:0f:c6:00:0e:c3:ef:d0:37:82:17:ec:19:
25:4e:c0:7c:fc:03:a5:d9:89:d4:25:eb:e4:99:69:42:f7:58:
89:fc:36:84:46:f2:f8:23:3f:77:a2:60:55:59:fc:85:35:7e:
a1:a1:e0:78:00:35:d4:63:1b:e2:c7:a7:13:76:73:b5:e8:89:
40:fb:2d:15:3e:dc:44:b5:b0:6b:80:6d:a8:26:03:1f:e8:fb:
87:c1:8f:53:78:7d:25:f9:dd:5f:15:22:1a:78:29:99:55:a3:
10:a9:1b:f3:c2:d3:d5:59:1e:92:7d:e6:e6:2e:1d:35:22:d9:
a7:3e:a9:11:c6:c7:f7:82:37:3e:4b:aa:22:57:c1:5f:b3:a6:
9a:c9:88:e5:c8:96:b5:25:66:7f:0c:cd:f6:85:72:06:2b:b9:
c9:cf:36:fa:a0:61:23:c7:3a:f8:82:dd:61:4c:f4:17:5c:66:
a7:e8:45:dd:fc:05:33:09:f4:c7:3f:89:d2:85:92:5d:96:02:
86:89:7a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:57:10 2025 by rpki-client