Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
File: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft (raw, json)
Hash identifier: Feica9H+Q6RsgeyB15V6xIXevXpJFJPTGfJYnKvD8Us=
Subject key identifier: 99:67:69:4F:E0:3A:28:28:91:66:07:E5:D2:EE:94:CC:34:CA:6D:CB
Authority key identifier: 24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
Certificate issuer: /CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Certificate serial: 019A52D16F41F1C371F6A15C5FDE41CA73C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
Manifest number: 16A1
Signing time: Wed 05 Nov 2025 07:00:48 +0000
Manifest this update: Wed 05 Nov 2025 07:00:48 +0000
Manifest next update: Thu 06 Nov 2025 07:00:48 +0000
Files and hashes: 1: JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl (hash: VBMVuRItSaM5NfVq7nolfBhv/6KFKi4q/+0E37SOaDM=)
2: UFrxJgzTwVdJL_jkED60zsAU8jc.roa (hash: iRzsXtUX9Sxs+CrzlnzXYrSJNm2lX5qV3x514cI48DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:6f:41:f1:c3:71:f6:a1:5c:5f:de:41:ca:73:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d2807eae26a67d3ebc25ed50ffe5434bc66c52
Validity
Not Before: Nov 5 07:00:48 2025 GMT
Not After : Nov 6 07:00:48 2025 GMT
Subject: CN=9967694fe03a2828916607e5d2ee94cc34ca6dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f9:4b:dc:51:7c:87:53:78:29:5c:55:f6:f6:
9f:20:71:5c:7e:3b:7d:01:fa:43:54:ff:bc:ac:c8:
1f:5b:2e:5e:bd:5a:cf:97:fa:be:73:26:95:b0:38:
62:89:39:39:3d:2c:46:13:07:52:65:7e:58:f0:44:
bc:a4:9a:13:c0:c3:d2:b2:15:10:b1:c3:00:26:bc:
5f:12:74:55:2e:b5:a8:ad:35:8c:4f:20:27:48:d9:
29:ac:fd:a0:56:48:61:54:0c:89:38:03:58:82:a1:
f5:25:13:74:50:15:15:d0:af:5d:f9:3a:bf:e0:73:
89:19:25:ad:42:19:79:e8:c2:15:34:3b:e3:e6:c5:
be:09:f0:cb:77:c2:6c:d1:12:3a:29:34:e1:b2:17:
8a:ba:8a:6e:35:ce:8b:95:99:0f:2c:87:c2:63:ae:
52:37:02:7c:6a:ef:3b:11:c5:c7:be:dc:f7:02:eb:
b8:82:ac:b9:bb:b7:72:f8:d9:24:68:e7:20:c6:da:
ba:71:bc:b0:2f:fb:6a:5b:da:63:92:39:27:19:82:
0f:51:36:5c:46:48:52:6d:b9:98:cb:e2:71:e5:78:
0a:0a:60:be:92:3a:4c:11:41:64:48:2d:8a:66:e9:
c1:f6:00:4b:67:57:45:ef:5b:5d:3b:1f:53:5c:b6:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:67:69:4F:E0:3A:28:28:91:66:07:E5:D2:EE:94:CC:34:CA:6D:CB
X509v3 Authority Key Identifier:
keyid:24:D2:80:7E:AE:26:A6:7D:3E:BC:25:ED:50:FF:E5:43:4B:C6:6C:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e5344d-5ec3-40ee-8612-f99a3dd99826/1/JNKAfq4mpn0-vCXtUP_lQ0vGbFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:4b:a8:06:b0:e0:8b:e4:b7:65:75:83:45:d1:b9:d4:95:42:
dc:29:4c:83:36:5b:c6:d6:ed:b8:b5:27:d1:a7:c0:a7:11:95:
dd:38:36:37:ff:3c:e3:f8:b3:78:44:6d:f1:22:08:4a:6a:54:
12:97:59:49:d6:d6:a0:6c:5a:c6:e3:ed:cd:4a:49:1d:7f:03:
a1:32:3e:6e:cd:89:63:ab:61:73:ff:39:87:75:78:16:3b:81:
d7:3e:6a:d3:3f:3d:7d:14:67:be:a2:fe:ae:8d:0c:1a:39:8f:
a7:0a:0b:6c:57:44:7b:b4:71:80:2e:65:f6:16:93:ea:15:42:
cb:c5:09:42:42:64:de:df:62:f5:b0:58:2a:18:ed:b1:12:ae:
6e:37:cf:61:92:83:30:81:fb:45:57:b0:7d:ff:20:98:bc:39:
f2:c6:ab:3b:e5:07:83:bf:0b:07:28:95:60:5c:d0:98:ed:bf:
9b:a8:13:75:aa:04:0b:93:14:cb:f2:7e:33:51:38:98:16:5b:
a6:9f:67:76:90:c2:44:e1:ca:4a:4b:b3:d1:b6:bb:0c:47:44:
87:b4:9d:7f:23:26:c7:b6:e4:a9:af:46:d1:de:af:99:4e:91:
7a:0b:cf:45:0f:b7:db:49:65:8c:85:ac:30:00:7b:45:f3:db:
a0:04:e2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:06:03 2025 by rpki-client