Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
File: JaVTeUIj5rTGMnebUTcdxOfXBwU.mft (raw, json)
Hash identifier: +eRFd3gnQjMIvzp7Pu97lsfEYgAAtg1hFymhSPFMGng=
Subject key identifier: E9:6B:62:AE:9E:F7:27:00:B2:85:5C:D3:6C:20:85:CF:D2:82:31:8C
Authority key identifier: 25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
Certificate issuer: /CN=25a553794223e6b4c632779b51371dc4e7d70705
Certificate serial: 019A4EF4CF3F01B736C278B96D74848CC40E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
Manifest number: 13C3
Signing time: Tue 04 Nov 2025 13:00:57 +0000
Manifest this update: Tue 04 Nov 2025 13:00:57 +0000
Manifest next update: Wed 05 Nov 2025 13:00:57 +0000
Files and hashes: 1: AamKKecGtsamRu5tPrCvb4wPCCg.roa (hash: R/0dKm7RYIaO6gMOFzcg/w47GHlEc3dvGlaSi8cjRio=)
2: JaVTeUIj5rTGMnebUTcdxOfXBwU.crl (hash: 184WWv3JY5G0Ms/MOWT2nrHGhiwL7Fisc0R/yD2xvUE=)
3: hK2MvsUGX-en-QRS8wt3Wf_U0nw.roa (hash: TPzEJ4PR056FgBQncfoR2MgdCQdkMjaLd6UC5c1/V+U=)
4: sZzOId0-MCcpYuzen4Nr9pbpCWM.roa (hash: uaC6M8HkP81VbJLKmwQxRrL5lIIVQEkwETGYd2tWcYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:cf:3f:01:b7:36:c2:78:b9:6d:74:84:8c:c4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a553794223e6b4c632779b51371dc4e7d70705
Validity
Not Before: Nov 4 13:00:57 2025 GMT
Not After : Nov 5 13:00:57 2025 GMT
Subject: CN=e96b62ae9ef72700b2855cd36c2085cfd282318c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:5d:02:c9:4b:53:45:a9:75:46:d7:c4:00:
77:f3:31:a5:49:d8:c3:a2:fa:00:fe:bc:57:51:0a:
dc:97:e1:f8:b5:67:2d:8f:d8:ce:9d:e8:b0:dc:8a:
e0:67:a4:c8:ba:b4:16:6e:f3:7b:73:92:55:da:21:
47:46:1f:d8:6f:bb:63:c0:f5:11:50:51:1b:ee:14:
8f:7c:74:36:c9:75:94:9a:74:00:e9:e0:91:de:3f:
42:94:71:f8:ad:ab:c7:bf:15:41:c7:61:58:88:3e:
33:87:f4:36:9f:23:7e:5c:3a:fc:7f:3e:dc:e0:62:
e2:0a:4c:06:e7:31:8b:95:a5:e0:42:2b:cb:12:75:
bf:db:4e:33:d7:d6:59:df:51:27:e0:2a:9f:ae:6d:
8e:33:64:44:fc:2f:a7:33:1e:81:b7:5d:1d:1c:07:
61:ff:19:71:3b:74:37:c3:4c:bd:34:36:e7:6f:60:
7b:89:f6:f6:0a:cc:a3:64:b4:66:7c:47:b1:d3:e4:
a6:ec:b5:39:3f:73:69:fb:6c:4d:4c:a3:2e:95:d6:
d5:0a:9a:59:f7:9c:c7:43:2c:0b:6f:4a:ab:78:1b:
f1:71:8c:4a:92:fe:9a:55:0b:31:70:0d:a5:10:b6:
d9:67:d5:b2:fa:31:93:c1:48:5f:12:c0:8c:24:62:
5c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6B:62:AE:9E:F7:27:00:B2:85:5C:D3:6C:20:85:CF:D2:82:31:8C
X509v3 Authority Key Identifier:
keyid:25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9d:81:14:35:44:67:be:a7:e8:fd:9f:1d:c5:29:9d:f0:75:
ad:ca:f0:b3:4b:97:54:33:db:ba:78:5c:70:09:7d:99:6c:00:
86:9d:57:bd:0d:a4:df:6b:ad:62:54:66:55:d0:25:8b:97:0b:
40:20:7d:f9:dd:28:94:52:b3:50:d8:d3:0f:ac:c9:23:66:06:
d6:1a:ec:8d:ee:16:51:24:5d:1c:42:29:07:7c:16:dc:3d:19:
25:52:b1:53:0d:21:be:f2:c4:73:8b:59:e7:b0:ad:8e:b2:65:
21:72:a6:87:78:fc:c6:90:e7:91:c2:ee:9f:f9:f3:4e:d8:25:
3e:26:3b:a1:99:b9:de:17:50:aa:3e:b5:d5:fa:81:40:1f:e7:
ba:d5:a5:1e:09:9f:bb:af:e0:ed:8b:11:01:23:df:32:1e:fe:
0a:a8:d8:6c:55:fe:21:d5:25:67:06:60:27:3c:da:ee:02:df:
d5:d5:4c:5a:b2:c6:a5:8f:45:31:fc:94:9d:70:f4:d7:da:8e:
c8:a6:ea:30:d9:e8:0f:97:a0:53:4c:dd:4e:85:a8:36:29:67:
db:85:9a:5e:13:38:eb:fb:13:aa:1f:b1:5f:55:68:90:39:b3:
aa:2c:b5:14:7a:e8:b7:49:f8:c6:b0:97:25:f6:a2:5d:39:32:
4f:47:e2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:11 2025 by rpki-client