Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: 3+LeYT3+tjelpjEQv3Ptld/roEv75V6QNZ0IQ69Ft3I=
Subject key identifier: FC:6D:92:41:A6:1E:63:A0:50:8F:25:A2:9E:31:1F:F1:3B:27:17:63
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 019A4F2B1471EA49BC9E214294225AC32003
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 14:00:14 +0000
Manifest this update: Tue 04 Nov 2025 14:00:14 +0000
Manifest next update: Wed 05 Nov 2025 14:00:14 +0000
Files and hashes: 1: 1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa (hash: Nhhuv6DdC39yd8/4en2lPPTqam7XI+LxbkaMlQc4uqc=)
2: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: bZyWywMTNstkZEZJwL8ds14OSTdFifR8KevYLRN+p80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:14:71:ea:49:bc:9e:21:42:94:22:5a:c3:20:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Nov 4 14:00:14 2025 GMT
Not After : Nov 5 14:00:14 2025 GMT
Subject: CN=fc6d9241a61e63a0508f25a29e311ff13b271763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9c:ff:fd:53:67:4d:d7:9b:3d:36:ab:07:49:
13:dd:20:3d:75:6a:d5:44:36:45:12:3c:d2:28:24:
4e:f9:97:28:a0:21:9f:7d:a5:75:62:d7:b4:f2:4a:
4c:37:cd:76:61:60:69:9e:ad:a8:63:83:0a:7b:c5:
75:59:f2:4e:54:64:37:1b:dc:80:c6:8b:04:95:5b:
ec:2e:49:6c:f2:af:5d:70:db:49:77:7b:db:ae:95:
0d:bd:03:3f:4a:9e:63:87:a1:75:de:d8:3a:4e:d4:
68:5d:e0:c4:e4:0f:18:e6:63:c2:08:6c:17:00:7b:
f1:c4:8b:8e:54:39:73:f4:ac:fc:28:af:b2:4a:e1:
6e:40:e3:70:25:f2:90:eb:08:6d:39:fc:82:89:fd:
db:82:b1:a4:ae:88:7d:3f:a8:ce:a7:84:e2:84:63:
e1:4b:54:64:bc:4a:ed:56:fb:84:5e:10:98:52:5d:
8e:e3:36:af:9e:d3:7a:01:1a:83:90:eb:4d:c9:2b:
2c:50:8f:fc:36:d9:33:c0:9e:14:2a:18:99:bf:90:
f9:41:00:ad:53:6f:ed:f1:ea:b5:1b:25:68:1f:c2:
eb:91:ac:14:48:0a:f6:c3:22:e1:5d:9f:6f:70:5f:
1c:f8:53:77:43:28:21:80:3c:91:11:2d:ee:47:d4:
42:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6D:92:41:A6:1E:63:A0:50:8F:25:A2:9E:31:1F:F1:3B:27:17:63
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ac:27:b4:58:23:71:9a:72:1f:60:65:21:2a:5c:0a:28:ec:
02:13:2b:35:04:3d:7e:d4:16:2a:24:8b:ea:23:df:07:3e:92:
ee:0a:cb:fe:7a:3c:94:d7:19:91:82:5e:c4:e3:23:5e:d8:dd:
15:9c:5c:f5:99:0d:cb:78:e4:3d:e3:91:61:c8:a0:a6:69:53:
70:ab:9b:02:e9:49:2a:c3:69:f1:a8:58:25:96:cd:ad:a0:9f:
d9:ad:c1:14:0b:31:80:02:d6:64:5a:d9:76:05:5c:f7:98:98:
7c:16:47:38:35:98:76:50:b5:89:09:f0:b2:62:23:62:9b:65:
37:cc:d2:d8:7e:0a:3a:23:91:58:41:97:5d:89:e9:6d:27:a8:
23:16:ab:d2:f2:17:1a:8b:bb:eb:ed:51:4f:b0:0e:99:b3:73:
b2:23:ac:ac:02:91:ae:f7:04:54:59:6f:0d:19:db:1a:40:eb:
cb:67:1c:8e:61:45:8a:d3:71:e9:d2:fe:04:9e:4c:36:42:b5:
68:0b:c9:09:f9:b3:fc:46:0e:03:9b:cf:2e:5d:1c:5e:f8:1a:
c5:cc:8d:7e:41:60:c5:99:16:e3:78:e9:43:80:7b:00:d2:20:
bd:81:a9:27:a5:fc:6c:ba:be:65:1c:a1:d5:8b:ba:db:5d:69:
b5:38:63:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:43 2025 by rpki-client