Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
File: JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft (raw, json)
Hash identifier: sUPmhTrrkCxIXTlmjc00Li5UDrPXHKWf7kBeOT+kOYE=
Subject key identifier: 41:6A:15:B7:9B:60:27:28:6F:D5:8E:31:B5:53:80:61:45:EB:4A:F5
Authority key identifier: 24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
Certificate issuer: /CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Certificate serial: 019A52D1BE9F409E74E4F6E788E7A61D9C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
Manifest number: 1768
Signing time: Wed 05 Nov 2025 07:01:08 +0000
Manifest this update: Wed 05 Nov 2025 07:01:08 +0000
Manifest next update: Thu 06 Nov 2025 07:01:08 +0000
Files and hashes: 1: 3I4C6Ngc7fDqENlrP9MQ3movJoI.roa (hash: CozQlTp6j6rye5pcJ/4KWGyOSARgztmDQg7ndMeU3mw=)
2: 9fhOOLWzaKKnUgNesblBRXup_NE.roa (hash: TIicytJIGRARKhFkXUtm3rRLHNbDX7lgNERyWMF3Dfw=)
3: JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl (hash: ickpqM/E4FtRX1Od06MNc+TM4XHSlc+gKjh+d4Pl11E=)
4: aLheTfUgtUNdeT-nsAOrx74v2WY.roa (hash: yUihWXxYUVQMAsj8/uxzJUGwVEI6SwR8Wy4B7TIZZnQ=)
5: gzLs6Xol47tKfjPqLr4RNwy_8T0.roa (hash: l9a7Iax1Z9uUS5+rKaniwvZo+UX2Ws1F66M5mMABVgA=)
6: mLsh4sGtoHIqeKrfN3jXMMLu4k0.roa (hash: m/Mvmk/5mQxCIOXX60XJtwJ8Xe1PRKwFBcukoCDP1Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:be:9f:40:9e:74:e4:f6:e7:88:e7:a6:1d:9c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24ba4f52ac1be0755d34bc5483c061bdf293447e
Validity
Not Before: Nov 5 07:01:08 2025 GMT
Not After : Nov 6 07:01:08 2025 GMT
Subject: CN=416a15b79b6027286fd58e31b553806145eb4af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:28:b3:fc:b3:bf:b2:e9:8c:4a:8a:6a:21:
5b:2f:49:82:53:99:d9:43:f2:e3:ae:88:67:a5:36:
25:c8:bd:f7:62:5d:09:b9:5a:4d:81:6a:42:af:83:
a3:3a:24:8f:0b:9a:48:ed:a5:6e:d5:5a:34:90:f4:
a1:b7:4a:81:34:47:a7:e9:4b:57:f1:1a:99:82:3b:
eb:12:35:48:76:94:ee:aa:c4:a7:ed:1d:f1:97:c1:
e3:04:48:75:c7:75:51:3a:61:20:2b:e2:1a:8b:17:
2c:82:f2:3c:99:5b:35:55:da:c0:65:43:b6:fb:45:
3a:67:84:31:87:69:08:b0:97:9c:81:a6:84:4d:1f:
1a:c7:2b:a5:f0:8b:06:3c:3d:b3:cc:b3:ce:db:d5:
cc:bc:c6:65:0a:6b:60:72:7f:3c:43:63:a4:1f:c2:
ab:2e:5d:bf:3c:87:b1:a2:4a:05:de:24:d4:36:d8:
f2:c9:26:c3:e8:97:a2:d8:44:6a:40:db:01:69:d6:
9a:5e:ff:84:dd:3c:6b:fd:ac:c0:90:cf:32:eb:36:
fd:70:ae:86:17:18:d8:c0:d8:09:88:a9:5d:70:fe:
b9:45:3c:54:a6:c5:89:06:ec:1e:46:ca:96:fe:a9:
d0:fa:bd:6a:04:18:6a:52:7a:54:ed:b8:8e:41:a7:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6A:15:B7:9B:60:27:28:6F:D5:8E:31:B5:53:80:61:45:EB:4A:F5
X509v3 Authority Key Identifier:
keyid:24:BA:4F:52:AC:1B:E0:75:5D:34:BC:54:83:C0:61:BD:F2:93:44:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLpPUqwb4HVdNLxUg8BhvfKTRH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/397546-dc7b-4660-8a51-bf59fc1cb26d/1/JLpPUqwb4HVdNLxUg8BhvfKTRH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:61:63:43:4a:06:f5:10:f6:0f:00:4d:78:17:ca:8c:e9:36:
79:03:dc:60:8e:69:61:d6:5a:ec:fa:5e:7b:54:43:95:e3:ed:
b6:b8:21:f0:e1:21:d8:0b:0e:43:ac:f2:fa:b6:00:85:c3:04:
3b:23:24:84:97:0a:31:5a:ef:3d:3e:1b:3c:e5:0e:e2:ee:ad:
6c:da:e3:7b:83:c2:9d:96:c8:24:79:13:3c:d9:94:71:6c:f1:
96:13:c4:1b:6d:69:ea:f2:5d:73:34:f6:c8:a4:a2:68:21:ef:
e7:7c:ef:ac:1a:93:0e:ff:58:8d:08:bf:f7:31:41:b4:79:7b:
1d:1e:01:8e:d8:69:44:ce:0b:b1:8c:9a:4c:c7:3e:93:19:97:
b4:59:1f:cf:25:91:50:86:bf:8e:ea:1a:20:21:67:01:a8:ee:
d9:0b:2f:ee:2d:9c:82:00:a2:fe:ee:86:bd:f8:10:b1:9a:2f:
05:ef:51:e1:0b:a7:e7:8d:9b:90:fc:45:a2:c4:ec:d0:65:ab:
26:84:74:30:8a:47:43:06:fd:26:32:a0:c0:98:c8:1a:8b:0c:
67:d5:21:c2:55:dd:e3:dc:72:74:4d:de:a4:b1:41:7a:ae:f4:
f2:ce:2d:d5:47:77:b0:38:30:5e:26:b9:2a:49:e5:c7:41:8f:
c1:d5:50:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:30:48 2025 by rpki-client