Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
File: JUzEq11IxScNQOn-UOcjlt7sWGk.mft (raw, json)
Hash identifier: dH9FirpZIvO846yBy1OqBDKiJ89KGabKQ2/MGOBUM78=
Subject key identifier: 2F:0F:3B:A2:5D:3E:DF:18:7B:A9:52:38:44:7C:D8:69:92:C3:12:C7
Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
Certificate issuer: /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Certificate serial: 019A533EEA7B5BE98F3B6F2926D5E960D3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
Manifest number: 0CE4
Signing time: Wed 05 Nov 2025 09:00:23 +0000
Manifest this update: Wed 05 Nov 2025 09:00:23 +0000
Manifest next update: Thu 06 Nov 2025 09:00:23 +0000
Files and hashes: 1: C2ecozniAHAj0uhFfwHN_H6EGZA.roa (hash: EZUOiLLYsi9hRi0qVE5EwgylGRW0PHLtxyCT19uY13Y=)
2: JUzEq11IxScNQOn-UOcjlt7sWGk.crl (hash: Pr+0QP7WCmUa17pOkffWm0CKftSET5zDTNlDc6rGvs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:ea:7b:5b:e9:8f:3b:6f:29:26:d5:e9:60:d3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Validity
Not Before: Nov 5 09:00:23 2025 GMT
Not After : Nov 6 09:00:23 2025 GMT
Subject: CN=2f0f3ba25d3edf187ba95238447cd86992c312c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9e:75:b7:57:3b:ee:c4:5c:c7:d5:1e:8b:18:
40:76:23:61:42:3c:de:68:80:b4:64:ab:b4:df:5f:
57:c7:ce:9e:1a:9b:85:91:d9:62:f4:a4:a4:18:e0:
1d:00:1f:b8:77:11:e5:c7:de:52:c5:44:bc:f0:b6:
ee:ce:65:e3:86:88:9f:07:86:8a:12:b5:b0:19:1d:
0c:09:25:48:25:dd:91:ff:03:7a:a6:3f:90:23:7d:
ca:bb:0e:90:28:69:ad:29:92:f4:56:dd:30:41:0f:
c5:90:4c:96:cc:d4:bd:0f:63:3f:92:55:95:0c:f7:
2a:4f:a3:98:fd:36:31:b4:79:02:f3:c2:fa:9b:d3:
22:db:fa:ec:6a:08:8d:4a:f2:35:c2:f3:42:10:46:
ad:87:80:f8:46:61:09:76:d8:85:1f:7a:fe:8a:aa:
4d:74:23:14:43:51:6a:38:6a:81:91:ac:69:9a:de:
25:ac:34:1e:ce:43:41:3e:19:97:06:e3:d5:b5:ce:
60:43:30:30:bc:78:d8:04:ee:b9:b8:b0:f7:cf:f2:
11:1a:5c:d2:90:b5:3e:2c:73:dd:fb:df:29:ae:c3:
93:6b:45:a5:85:4e:33:20:f8:4b:59:30:15:25:57:
e0:cc:94:7e:c5:e1:7c:a5:1e:0f:a9:81:bb:95:fb:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0F:3B:A2:5D:3E:DF:18:7B:A9:52:38:44:7C:D8:69:92:C3:12:C7
X509v3 Authority Key Identifier:
keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f3:b4:88:60:a2:ab:86:7a:df:d0:14:73:09:00:76:e1:3f:
57:c3:7b:7d:a8:6e:9a:44:17:62:94:b0:60:2e:32:b5:e0:d4:
1c:4c:a3:d5:b2:15:35:30:4b:c3:5b:45:6a:a4:35:53:0c:56:
f6:41:58:87:cf:97:f1:92:85:a1:56:6e:8e:81:1f:34:0e:71:
9e:5b:62:1f:e7:25:5d:68:04:35:a6:00:e8:76:25:f4:0f:a8:
9f:ca:90:4c:bd:11:c5:54:51:ba:f4:bc:34:3f:6e:2e:20:55:
05:ae:14:ed:da:56:fb:bf:b6:29:7e:27:20:88:42:a5:57:14:
cb:70:ab:0e:cf:19:00:bd:eb:20:4f:76:ef:ab:b2:90:62:e7:
c6:3c:3e:ae:2d:f5:69:2c:8e:52:64:0d:ae:b6:87:f6:85:ca:
0d:5c:c5:63:4e:0a:06:5a:f7:bf:38:78:76:b3:8a:fe:d1:07:
02:7c:68:f7:21:82:da:e6:04:22:cb:6e:dd:d6:25:6c:f7:b3:
2f:84:6e:c0:75:78:9a:1d:15:2d:5c:ec:63:5a:ac:0b:a4:7f:
d7:ae:a5:7f:f4:3e:c8:87:c5:aa:f8:39:5a:b6:da:9d:3c:94:
85:d9:8e:87:35:4c:12:73:5d:ab:9a:a7:01:f7:c8:7b:a1:35:
fd:8b:88:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:21:51 2025 by rpki-client