Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File: JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier: /h5B7HRtckdknP9DIb6ZM2ZUciKqI1JAjhpnEA2XWdM=
Subject key identifier: 33:AB:94:B5:BB:BE:89:C3:AC:F6:FC:85:1A:B6:F1:C7:01:D6:BD:E7
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer: /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial: 019A52D171C5981B8239A10D152F66B79E3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number: 02DA
Signing time: Wed 05 Nov 2025 07:00:49 +0000
Manifest this update: Wed 05 Nov 2025 07:00:49 +0000
Manifest next update: Thu 06 Nov 2025 07:00:49 +0000
Files and hashes: 1: JFbIS27IKVFB-sXMdYdpnlEymqA.roa (hash: y1iRyb0r9qXHHkGFrahYiSMyCM8wsIM4hJtuQx44zzA=)
2: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: Y1p+chrMtn0t2Xm8JYxaU7Sc7qIGzI0fPQO35rMni1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:71:c5:98:1b:82:39:a1:0d:15:2f:66:b7:9e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Validity
Not Before: Nov 5 07:00:49 2025 GMT
Not After : Nov 6 07:00:49 2025 GMT
Subject: CN=33ab94b5bbbe89c3acf6fc851ab6f1c701d6bde7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:da:30:0c:27:03:fa:5c:94:51:ab:a7:ae:a9:
e6:fa:c9:d2:6e:0d:99:1c:8c:fb:44:3f:58:80:c4:
af:ee:25:2b:78:0f:cb:0c:60:b2:7d:52:8e:c0:82:
a7:e6:a1:ad:6b:55:3b:81:da:eb:94:e1:30:5e:ad:
8c:3d:c2:b0:8a:fa:f5:e3:59:fa:d0:9c:1e:6b:73:
a3:be:14:fd:15:22:90:62:21:b1:55:49:0c:55:be:
6e:fd:29:7f:76:22:eb:0d:1d:f8:8b:71:98:97:3d:
0e:74:49:1a:ac:f0:c0:c1:ba:7d:fc:c6:45:f7:7e:
60:fd:67:cf:a0:bd:cd:c2:b2:b7:2f:2e:8d:1f:46:
c4:7a:0e:59:08:72:bc:d4:c6:c1:6e:e0:e4:41:1e:
cb:59:8e:70:6f:6f:cc:f8:a1:6e:6b:ff:aa:28:52:
a9:4d:71:31:c6:3d:6f:c1:89:fa:15:3b:dd:7e:fe:
5b:c5:cd:5e:58:5c:a0:72:6c:48:4d:c7:71:b2:ca:
25:4b:b0:7d:de:b5:ca:d2:d8:26:cf:0b:48:e0:51:
74:0f:dd:0f:52:51:47:2c:09:10:4e:8c:47:19:b8:
87:c8:77:ba:d7:8f:71:72:aa:89:fb:b7:28:c6:e5:
6d:0d:c8:e5:5d:6f:cd:af:fd:44:e7:1a:ad:a8:f4:
de:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AB:94:B5:BB:BE:89:C3:AC:F6:FC:85:1A:B6:F1:C7:01:D6:BD:E7
X509v3 Authority Key Identifier:
keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:34:1d:71:67:2a:8f:06:71:df:b8:46:dc:e3:65:c0:88:01:
eb:e1:ef:9d:57:ae:57:6b:62:a4:e3:65:d8:6f:31:6d:43:57:
17:ce:1a:a0:5d:60:d0:f1:82:8b:01:10:e6:ca:8a:97:61:aa:
80:b4:9b:88:d7:c6:83:dd:44:5e:11:42:3c:ac:57:91:9c:ab:
1c:76:6b:ac:ba:ea:c7:77:6d:23:a8:d2:c1:30:40:6b:40:e5:
f7:63:a4:3f:9a:c7:bc:c0:84:c7:22:49:7d:3d:78:37:e8:6f:
1b:6c:94:2b:3f:73:e3:fd:7e:c9:42:e5:59:55:0a:13:28:59:
83:81:20:33:de:f4:ad:26:59:23:aa:42:54:bb:ee:e2:58:9d:
b1:58:6f:78:5c:1f:29:c1:31:f7:98:cc:9a:a0:ea:df:0d:95:
04:83:e7:8b:90:33:67:77:58:1f:c9:99:42:7e:ba:31:df:62:
e5:5a:90:3e:9c:bf:3e:1a:73:67:64:22:75:17:41:ef:63:e1:
17:10:11:27:d0:8c:16:8c:e4:19:37:23:f8:2b:1f:f8:dc:82:
b2:45:8b:9f:91:59:76:03:55:6c:2b:8c:0c:25:ff:79:b4:04:
25:db:89:cb:55:00:03:62:e7:80:be:be:1c:92:0a:7f:4d:fe:
f9:39:62:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:08:57 2025 by rpki-client