Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: J81vIEoIsR0n0TKDi9q2ElL4udNKkNSiTvSTcK/pqXQ=
Subject key identifier: E9:2C:6F:7E:7E:80:F2:75:20:7F:8B:DA:B9:9B:2C:77:E0:CB:4D:F6
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 019A4E86B4114E9B79B1CDF20D74C477FB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 1003
Signing time: Tue 04 Nov 2025 11:00:41 +0000
Manifest this update: Tue 04 Nov 2025 11:00:41 +0000
Manifest next update: Wed 05 Nov 2025 11:00:41 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: qRrq2RfwEXFP2iUqWGPdzRP/aly9aUrE9Eae+dKY1vY=)
2: b_FpEo5mzbhghU7FQIOJJKiIivU.roa (hash: HOe4R50HkhUSwXgPcBKFKJCslwOuwtpIjbbm5rlZl9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:b4:11:4e:9b:79:b1:cd:f2:0d:74:c4:77:fb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Nov 4 11:00:41 2025 GMT
Not After : Nov 5 11:00:41 2025 GMT
Subject: CN=e92c6f7e7e80f275207f8bdab99b2c77e0cb4df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:a9:13:b5:9d:45:df:a1:c9:ba:11:85:6b:
89:6f:61:06:30:fb:46:cc:dc:c9:0a:d8:58:d9:2d:
db:f4:24:dd:b8:80:55:cf:a0:d7:6f:70:c3:99:98:
0a:d5:86:f3:d7:ba:53:78:1f:98:9a:01:7f:9b:8b:
a6:b8:51:90:e4:f0:59:d1:71:e5:e3:5a:df:bc:e2:
cd:9f:3a:1b:4e:c8:0d:65:92:a0:6b:7a:28:a2:b0:
c4:96:e7:29:30:c5:94:3e:9b:8d:e3:24:b0:91:8e:
d3:7e:99:a6:1e:75:ac:d4:c6:87:c8:78:fb:f4:72:
47:95:4a:62:2a:4e:9e:f7:cf:47:3d:a6:18:7e:9e:
d0:18:3d:9c:49:32:ee:13:67:68:75:cf:cb:5d:4a:
17:83:66:d1:59:bc:78:29:5d:dc:42:36:22:98:6a:
44:a1:37:62:67:0d:29:20:03:62:9e:f6:b2:41:73:
5c:1d:41:13:1a:fc:44:a9:e4:3d:3b:2a:b6:4d:8b:
91:43:17:4b:23:b1:dd:15:aa:04:67:5a:d2:21:fe:
3a:f1:99:37:7b:0a:89:d9:f6:a6:f3:47:15:d5:92:
64:b5:6c:97:d5:22:c2:da:5d:c9:e3:d4:0e:b1:a7:
92:8a:1c:17:bb:5c:61:4d:d9:72:f1:89:40:c0:f5:
35:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2C:6F:7E:7E:80:F2:75:20:7F:8B:DA:B9:9B:2C:77:E0:CB:4D:F6
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c4:02:3d:d9:96:92:47:e3:6b:b9:7f:cc:04:a8:d8:26:1a:
27:53:6e:bd:ef:41:5c:c0:b3:ea:00:04:b2:48:6c:53:41:ed:
1c:2a:e6:62:b0:52:9f:a2:4f:04:e0:4e:53:46:05:e0:93:87:
93:b7:58:ad:f5:4b:89:4a:66:66:67:24:d5:8e:3d:60:90:fe:
b9:cb:30:f2:34:95:2e:f0:57:42:c1:4d:00:a6:5b:32:64:a9:
5a:5c:fb:48:82:e0:b9:32:cc:12:24:0c:50:e5:df:ad:f5:81:
58:d7:20:86:1c:79:00:08:69:df:02:ee:cc:d8:0b:27:14:c3:
87:c7:0c:a4:3e:98:28:5b:f2:a8:84:c5:76:89:fa:b8:86:26:
41:41:c5:ae:73:9a:93:56:16:12:75:55:3a:1c:e3:7e:af:a7:
10:1d:8c:07:5e:77:cb:f1:e6:fb:14:30:06:31:ee:1b:96:bf:
25:9c:32:c9:73:23:e8:a8:50:9f:cf:08:e0:54:b1:76:fb:0a:
a0:7d:e1:ef:83:c3:f9:de:33:a3:b6:51:65:87:25:29:d1:e5:
e1:f3:cc:58:c7:2a:cf:a1:4b:ef:a4:b3:52:bb:4a:96:85:5a:
84:9e:56:7b:08:dd:e4:18:6b:01:49:e4:06:4d:a0:53:f2:2f:
c9:b8:b9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:56 2025 by rpki-client