Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
File: JF3mXzdRXfjMJC82277zIMbZC08.mft (raw, json)
Hash identifier: hQjFtLN9y8EKOpIjnuox0HoHYeCANZDYj/uHXa61akk=
Subject key identifier: 64:9D:82:2D:0B:AC:94:DF:62:C6:74:48:41:06:49:47:F2:B0:A3:D2
Authority key identifier: 24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
Certificate issuer: /CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Certificate serial: 019A28F9B8F4F586382D8A4DC3736FB699B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
Manifest number: 012D
Signing time: Tue 28 Oct 2025 04:00:45 +0000
Manifest this update: Tue 28 Oct 2025 04:00:45 +0000
Manifest next update: Wed 29 Oct 2025 04:00:45 +0000
Files and hashes: 1: GEvk-OYZIbLA1C0nUWdR9FADeU0.roa (hash: gvjvLQ8vouXFqczTAQsahxoWOc7htNN/RNSCq7vtiz0=)
2: JF3mXzdRXfjMJC82277zIMbZC08.crl (hash: +g+DJnEgyFIsbRuPi1wPE77UhkEAmNXVYxad/Lw/Z/E=)
3: msaFLgq-O5K0HfQvNfj4IRLOZYs.roa (hash: 6dnMxl0kl5I2KX9y31y9JTB+6L9iasfKkgN1lMOhfc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:b8:f4:f5:86:38:2d:8a:4d:c3:73:6f:b6:99:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=245de65f37515df8cc242f36dbbef320c6d90b4f
Validity
Not Before: Oct 28 04:00:45 2025 GMT
Not After : Oct 29 04:00:45 2025 GMT
Subject: CN=649d822d0bac94df62c6744841064947f2b0a3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:72:75:fd:0c:e4:8d:2f:7e:12:77:de:ea:19:
1f:1e:42:e9:98:0b:07:24:3a:fd:a5:f9:95:1d:65:
5b:e4:48:21:c8:ed:9a:df:eb:7f:8c:10:af:a0:65:
13:c7:78:db:36:6b:e7:43:08:ec:03:56:f5:24:51:
70:a7:51:0a:b2:1b:ee:14:ab:5c:e6:78:e2:5f:fd:
c5:1f:e2:66:4b:0a:b6:1c:f9:cd:67:71:ec:e1:4d:
5e:c1:cf:76:f0:6e:17:b8:e5:90:54:2e:e1:43:f5:
8d:37:b8:17:7d:8e:d0:18:59:1e:54:aa:d8:63:d6:
59:28:74:47:e7:c1:ee:25:d2:59:74:11:f1:1c:51:
66:70:44:a0:ec:9c:55:fe:7d:a8:3a:47:23:95:3a:
01:9f:a9:34:69:a3:04:57:42:36:58:95:35:73:21:
95:99:af:8b:45:7c:0c:87:5b:a0:e9:ba:1d:92:b5:
2b:fa:46:ef:a3:45:fe:60:22:d7:fe:97:50:7b:d7:
25:05:75:94:cf:ee:87:f6:86:37:23:66:3d:42:dc:
74:11:94:b6:1b:d5:67:4b:7d:82:77:5f:f5:d2:fe:
a2:dd:5a:e8:8e:1e:21:bd:f1:f5:35:1a:50:57:0f:
7b:d0:b6:1b:cf:3c:86:e5:4b:fc:2d:cb:d9:2a:20:
1f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9D:82:2D:0B:AC:94:DF:62:C6:74:48:41:06:49:47:F2:B0:A3:D2
X509v3 Authority Key Identifier:
keyid:24:5D:E6:5F:37:51:5D:F8:CC:24:2F:36:DB:BE:F3:20:C6:D9:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JF3mXzdRXfjMJC82277zIMbZC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/f6e099-9b64-4041-9d19-317279818acc/1/JF3mXzdRXfjMJC82277zIMbZC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:02:08:71:46:fd:bf:53:d7:c3:24:57:ce:e3:51:6c:4d:50:
63:c4:b6:19:9b:00:15:d7:3d:ae:3f:8b:f2:94:45:18:c3:58:
f3:b0:90:44:53:48:98:b3:87:7b:e1:55:00:a0:90:0c:60:52:
ed:a5:16:6e:3f:3f:e9:df:2b:90:01:60:d5:4d:20:c3:4e:85:
1b:ba:31:9c:62:93:67:88:b5:70:d7:c8:07:4f:5a:a5:e0:62:
70:6d:87:eb:f4:2d:cf:37:e6:e4:2c:04:d8:6f:eb:34:f2:46:
3d:fa:0d:ae:54:86:af:ba:6f:23:21:3b:83:6b:ba:e2:59:98:
e9:d1:95:8e:ac:ee:7d:22:aa:8c:05:88:28:59:b3:e6:02:bb:
32:28:ee:1e:58:d5:f5:dd:27:a1:2c:4e:19:fd:45:37:c5:c4:
18:14:c5:0a:c0:48:4a:f7:6b:31:79:54:56:b7:60:65:e4:1f:
b3:0f:a2:5d:c0:9d:c1:b2:fd:b5:94:17:73:14:29:b1:38:94:
70:60:92:c9:35:a8:e4:93:18:34:d8:a0:fb:59:77:80:8e:c3:
ac:bf:8e:08:ff:66:20:58:0b:89:f6:a4:9b:1e:d0:ca:17:ad:
e5:3d:c3:e8:45:7f:d6:b3:21:c8:cf:0e:81:85:a0:10:22:aa:
39:65:1c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:30:03 2025 by rpki-client