Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
File: JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json)
Hash identifier: vRFRJKZiFsgBUXLxS4A8qv8X02AUnpQlBRubkxli/lw=
Subject key identifier: 29:19:3D:78:AA:4C:5B:3C:96:1F:6D:4E:87:FD:2B:68:F7:6F:51:19
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Certificate issuer: /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial: 019A4D73AF29FE6C9C5E5384B6E33727A197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
Manifest number: 043B
Signing time: Tue 04 Nov 2025 06:00:18 +0000
Manifest this update: Tue 04 Nov 2025 06:00:18 +0000
Manifest next update: Wed 05 Nov 2025 06:00:18 +0000
Files and hashes: 1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: IOD8VfsUG7I4mGk99tVGuKRBNl9hTvXOGBzTlqdw5ms=)
2: jH1x7tCRtg5jN4v24LJl9VjwMwY.roa (hash: iZNUbQPKf2tKNiMhgRNv7TxXA4h1WHG9l0RsCftRNIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:af:29:fe:6c:9c:5e:53:84:b6:e3:37:27:a1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Validity
Not Before: Nov 4 06:00:18 2025 GMT
Not After : Nov 5 06:00:18 2025 GMT
Subject: CN=29193d78aa4c5b3c961f6d4e87fd2b68f76f5119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:e4:e7:d3:d9:d5:c3:41:7a:1c:86:e5:9a:
74:6f:1d:8f:08:4a:a8:63:c8:23:ac:d5:ce:3c:f6:
4f:a8:b2:13:16:6e:c7:87:7f:4a:21:79:66:0d:70:
39:6e:82:42:01:c4:f3:52:a3:e2:6c:d0:81:2d:60:
87:ce:fb:5a:35:46:71:c8:66:83:26:72:2a:78:a8:
b7:3a:46:cb:05:dd:73:21:8f:77:b4:0d:6d:1a:36:
2a:c6:b4:5e:4c:11:1d:f1:55:8b:e8:73:b0:11:9c:
b2:cc:55:5a:19:ed:77:71:36:84:d7:ca:ab:88:b2:
03:c6:68:6f:63:d4:68:76:29:01:65:22:20:7a:72:
c8:c1:09:75:a4:92:03:ba:89:a8:9a:75:64:91:6d:
1c:e4:1b:02:21:70:3a:cc:f6:c0:c8:bc:9c:57:c7:
d3:81:ed:6e:c2:76:89:1d:a8:a2:09:55:3a:75:1e:
71:7d:1d:76:01:c2:94:0a:7d:82:de:d7:4e:76:ee:
f4:3c:b0:f4:90:63:05:0d:65:bc:52:f0:a4:3c:44:
68:5b:21:c6:18:d1:25:00:9f:6f:2d:66:b7:f5:b0:
f5:3c:06:ae:74:b2:81:d3:93:ff:77:5b:9f:42:3c:
5f:e9:49:11:b3:6f:51:c0:9f:3f:39:cb:52:63:cb:
99:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:19:3D:78:AA:4C:5B:3C:96:1F:6D:4E:87:FD:2B:68:F7:6F:51:19
X509v3 Authority Key Identifier:
keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:c7:4f:e1:72:4e:da:f0:49:c2:5b:d1:31:a8:68:49:6b:07:
04:e2:b3:ab:2e:21:55:56:25:62:7e:2f:b4:96:c5:38:31:58:
9e:8a:1f:fd:ca:8d:93:d2:72:b6:c9:a9:f5:b0:51:42:a2:8e:
b5:3f:03:84:06:0c:e4:ff:92:2c:bb:b8:12:49:ed:5f:43:ee:
db:e4:93:7c:45:19:f8:97:b7:7d:d7:b7:78:72:3a:44:0f:05:
f3:dc:52:44:37:77:85:17:0a:03:88:20:51:01:8b:c9:2a:f3:
be:a1:b8:03:ae:f1:98:ab:66:10:e6:dc:d6:1a:95:e7:a4:f9:
7b:d7:35:55:02:6b:47:9d:bb:aa:c4:b6:51:d4:22:c6:7a:a0:
f7:84:ff:1b:b0:92:b8:49:89:1d:9e:0b:60:f4:f4:b8:16:c1:
92:8c:f1:ef:46:3b:eb:82:a1:19:a2:2c:14:f1:67:48:b2:6a:
e7:b3:bc:68:10:73:f1:fe:50:ae:a2:49:56:f3:a0:12:37:b2:
0b:41:ce:57:3b:95:e0:e4:37:7b:b7:11:e1:48:15:f5:5d:d2:
52:7e:f8:7b:2d:41:51:71:bf:ee:4c:05:6b:0f:e9:a8:c5:70:
91:79:e8:b8:80:8f:64:ed:a5:e2:36:31:9a:ae:82:dd:ef:44:
19:a0:21:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:10 2025 by rpki-client