Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
File: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft (raw, json)
Hash identifier: aUYEVDEoBSbMeevjVTGkV/Cj8JftoWVF0np5vZf9iHo=
Subject key identifier: 2E:90:37:D3:FA:78:B8:91:08:EB:8D:77:E6:77:33:6A:FA:E9:31:B2
Authority key identifier: 8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
Certificate issuer: /CN=8e79cef458de50392e3c02b69182f34c60148d24
Certificate serial: 019A51BE383863036F757F1AC5C10F9D6574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
Manifest number: DE
Signing time: Wed 05 Nov 2025 02:00:11 +0000
Manifest this update: Wed 05 Nov 2025 02:00:11 +0000
Manifest next update: Thu 06 Nov 2025 02:00:11 +0000
Files and hashes: 1: FjU0H7vPdjT4WlcuRh8u9jonq80.roa (hash: FVDMMIfr/P3OKDJ02oDTFPsyvxmI1cgf33doeyF5iQw=)
2: jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl (hash: mmqiYNVvhVaKgh4A7Qd7qr6h6gKw7OdSdDVl2WrekfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:38:38:63:03:6f:75:7f:1a:c5:c1:0f:9d:65:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e79cef458de50392e3c02b69182f34c60148d24
Validity
Not Before: Nov 5 02:00:11 2025 GMT
Not After : Nov 6 02:00:11 2025 GMT
Subject: CN=2e9037d3fa78b89108eb8d77e677336afae931b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:68:48:5b:d2:f4:98:4a:aa:ac:c1:0c:83:
3a:58:c7:ff:ce:03:da:47:22:74:12:c0:6b:49:44:
eb:c9:37:88:bc:66:a7:09:dc:e5:43:52:50:a0:b3:
43:09:d2:bf:c1:61:11:b9:58:1e:d3:b3:f0:cf:68:
54:d1:42:fe:ab:d7:31:58:ec:bc:0c:01:99:68:c5:
21:6b:bb:70:9c:48:07:23:52:51:8a:3b:37:1b:e2:
d9:34:2a:8a:09:b7:e3:26:e7:2d:0d:0b:b1:2f:27:
dc:be:51:cd:76:d3:31:76:92:70:81:2c:84:11:53:
fb:83:3f:49:d1:f9:a6:47:a5:d1:b8:7b:ec:91:6b:
9d:7b:4d:03:ab:2a:52:cd:8d:97:4e:4e:75:31:43:
ae:66:48:49:89:4c:c1:a0:e3:f1:e8:ff:32:d5:92:
b1:1a:06:b6:2b:76:ef:15:06:29:66:98:fc:b2:85:
50:fc:2d:9b:39:5b:83:1f:80:e9:e2:5a:61:1a:fa:
ab:33:40:e0:e4:df:bd:86:f5:12:d1:c4:cd:e2:d8:
86:5d:58:e3:f0:e7:64:c6:fc:31:4f:5a:d1:f7:26:
c1:df:fb:24:ce:27:87:5c:f8:15:a3:aa:8c:14:ba:
a4:3c:f9:a8:ac:c9:6f:b8:d2:65:7f:82:e4:22:7b:
80:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:90:37:D3:FA:78:B8:91:08:EB:8D:77:E6:77:33:6A:FA:E9:31:B2
X509v3 Authority Key Identifier:
keyid:8E:79:CE:F4:58:DE:50:39:2E:3C:02:B6:91:82:F3:4C:60:14:8D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/334d54-4943-4deb-891c-cc1208148729/1/jnnO9FjeUDkuPAK2kYLzTGAUjSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:38:a8:19:ab:21:aa:97:a7:93:89:76:fe:8c:ed:61:33:d5:
99:69:96:3c:b8:04:e6:40:ae:bd:a7:7b:a9:52:ee:7c:6f:ad:
d6:38:71:00:2e:7f:22:6f:1a:a1:f7:e2:b1:00:b5:44:6a:1a:
54:67:bc:0f:14:80:91:ba:4f:89:bb:08:a9:95:e7:2e:d6:b7:
62:3b:51:ed:81:e7:df:ff:43:5b:82:45:bf:be:8c:e1:be:35:
88:bf:d1:1b:3b:6d:98:12:04:cc:e5:b8:c6:62:6d:e3:4f:0a:
50:e5:1b:44:98:6c:6a:c1:ef:5b:77:50:6f:f3:91:c1:ac:09:
64:0a:ed:84:2d:7b:10:db:63:31:a5:41:f9:37:91:84:2a:f9:
65:e1:90:2e:c7:af:ea:b4:12:9f:2b:8f:3d:37:39:1e:d0:1b:
88:9a:9f:79:47:35:b1:4b:0f:ec:d2:7c:ab:f1:5e:cf:a3:88:
9e:62:b1:a7:78:32:c4:4d:9e:5b:1f:cf:47:09:29:e7:71:ca:
9d:0e:c3:52:90:6a:28:fa:e5:f8:8e:a8:29:c0:32:f8:df:be:
8b:97:21:29:c5:f3:27:66:ee:5f:69:b1:ba:a2:c7:95:7e:ec:
3e:42:ac:74:db:99:fc:06:14:62:e8:fb:34:d1:36:2e:b1:08:
88:f6:d6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:24:32 2025 by rpki-client