Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
File: JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json)
Hash identifier: PqgJd8+2HJytrpO9tDgS6ZK/AWZlS2pP7xjua+BSLKY=
Subject key identifier: 84:25:94:74:30:62:FB:DF:6D:C5:C4:E0:8C:CE:C0:D8:9B:72:48:89
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial: 019A4D074ADEA072BBCDF7FDE53D3E430C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
Manifest number: 0B1A
Signing time: Tue 04 Nov 2025 04:01:54 +0000
Manifest this update: Tue 04 Nov 2025 04:01:54 +0000
Manifest next update: Wed 05 Nov 2025 04:01:54 +0000
Files and hashes: 1: 6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa (hash: qemS/elZANo0HMcYP0VSYi/2UWeoq+R5j6kNuTymeGQ=)
2: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: /Jw3b8aZi8hrCLQW5PeKZYFT9lX1KkbPzg4NOGS/Hgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:4a:de:a0:72:bb:cd:f7:fd:e5:3d:3e:43:0c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Validity
Not Before: Nov 4 04:01:54 2025 GMT
Not After : Nov 5 04:01:54 2025 GMT
Subject: CN=842594743062fbdf6dc5c4e08ccec0d89b724889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e5:2a:ab:4e:ef:77:88:22:36:6d:0f:b0:b3:
07:e2:4f:07:cb:4d:4d:a1:e9:5d:98:1d:ae:b7:1c:
1f:3a:c4:5e:89:d8:b7:2b:29:67:01:9a:e3:f0:a8:
59:2e:c3:e6:b7:62:43:c8:f3:1d:df:01:a8:32:d1:
2b:dc:3c:f9:5c:19:87:89:35:52:c2:32:22:9a:2d:
b9:38:77:cd:29:78:2f:3f:bb:05:76:0a:49:e4:46:
24:c5:29:63:2c:f0:51:14:05:a2:55:b9:ad:4a:89:
70:1a:46:ce:5f:98:6f:94:f9:3d:fc:38:21:56:e2:
9f:8a:ac:96:24:73:3e:d6:19:1a:e8:37:df:ab:e1:
aa:91:96:43:d3:1a:45:aa:45:cb:16:88:8d:25:7d:
11:2a:cd:5b:e6:ae:55:97:7d:08:06:4b:db:fa:06:
4a:1c:96:32:f7:93:12:97:c7:d3:d7:65:9a:1d:69:
bc:c9:78:bb:7a:02:90:8d:95:a2:ff:c8:7d:cd:7c:
20:0e:6b:ae:47:c5:ac:5f:2f:28:fb:54:57:13:63:
40:e2:c4:23:85:2e:c3:60:4c:5c:df:d7:e1:7e:0b:
45:31:50:96:57:2e:02:21:0e:d9:6d:70:6f:96:d9:
a6:25:c6:02:1e:2d:ba:c5:9d:4a:7b:71:9f:0e:49:
6b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:25:94:74:30:62:FB:DF:6D:C5:C4:E0:8C:CE:C0:D8:9B:72:48:89
X509v3 Authority Key Identifier:
keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:95:35:74:f0:bf:ea:66:50:b0:b5:02:01:d3:d3:0f:4d:66:
b9:fd:9b:77:4f:4e:66:d9:e3:af:63:92:1a:3d:32:c2:51:7e:
85:27:1d:c1:f6:97:14:46:6c:6c:9f:29:ac:e0:c1:37:56:2b:
d3:ff:b4:75:c8:ab:79:1f:c6:29:37:1d:03:8f:ea:75:74:b0:
2a:65:e3:2e:6a:95:02:f6:3c:14:f3:d0:d6:7f:50:f7:30:fb:
53:0d:11:12:54:ce:4f:86:1a:34:db:bc:b4:6d:2a:b0:9d:60:
dd:0b:40:27:83:5d:a6:ba:12:fd:47:f7:98:00:8e:af:6c:a9:
86:a4:bc:d7:c2:d0:10:cd:e8:1a:4a:4c:08:10:35:71:20:4b:
47:f9:c4:c3:94:b7:82:e2:3e:8b:d1:da:2d:7a:fc:a4:74:47:
8f:2c:b6:d6:a0:a8:81:97:26:d9:3f:0d:34:40:1f:63:57:e0:
e1:96:de:82:9f:e8:ce:55:3a:ac:5a:bb:f7:e1:46:e1:e2:98:
5d:55:a7:30:55:b4:39:df:a3:20:8b:4c:73:56:85:41:ed:9e:
26:62:52:95:eb:b2:94:5a:91:e5:90:38:0c:db:cf:3f:6f:8c:
10:09:c5:d6:c0:3c:5c:0f:cf:b4:0b:06:8f:c9:1c:60:22:55:
aa:a2:9a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:33 2025 by rpki-client