Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
File: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft (raw, json)
Hash identifier: RXvjkdsH7CbZ3+jtMwJ1MGLu2fKe31atdqDA3OlC3R8=
Subject key identifier: 06:C3:D8:67:6A:91:D2:E1:BE:11:FE:01:4A:C7:09:EA:87:BE:6B:22
Authority key identifier: 26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
Certificate issuer: /CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Certificate serial: 019A4E864836CD6C5C224572DC411D64CDA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
Manifest number: 0F37
Signing time: Tue 04 Nov 2025 11:00:14 +0000
Manifest this update: Tue 04 Nov 2025 11:00:14 +0000
Manifest next update: Wed 05 Nov 2025 11:00:14 +0000
Files and hashes: 1: JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl (hash: v/oc45tbMGIcSESFGsRv/r02R/0viPVuIuU60pUxdjI=)
2: zZ4Hlb2x-3mX0RpLcIDR2DBRVWM.roa (hash: rtcchc9xlTzl7W167gpB0l7rHLuWsqswJuQgbOgsw/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:48:36:cd:6c:5c:22:45:72:dc:41:1d:64:cd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=269b8a3748440c9d5c2c508bd03b46d7273eee56
Validity
Not Before: Nov 4 11:00:14 2025 GMT
Not After : Nov 5 11:00:14 2025 GMT
Subject: CN=06c3d8676a91d2e1be11fe014ac709ea87be6b22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ac:cb:b3:91:4d:06:68:86:42:24:43:32:7c:
90:69:d8:98:fb:3c:84:5b:b5:3b:cc:e0:ea:c0:46:
c3:71:10:9d:e2:c7:81:52:1f:c7:1b:6b:91:14:31:
42:92:1c:0b:fb:61:42:07:4e:3d:69:7b:ba:38:a3:
36:3e:7e:f0:88:da:fc:55:c3:58:fa:c2:71:77:77:
74:23:7c:c1:d9:f4:bb:3b:b9:fa:c7:93:c7:bd:cd:
20:c9:90:f1:16:bc:9c:df:b6:53:d2:e9:56:b9:f2:
6f:33:bd:d7:a1:aa:00:5a:28:a6:d0:41:df:db:59:
4b:80:02:11:51:ab:34:fe:d6:13:08:d9:9c:93:fe:
7b:a0:e6:9b:d7:06:ac:3c:2f:fd:6b:0a:9c:c6:50:
95:4e:4e:78:53:0c:66:12:d2:9a:eb:d2:05:f0:29:
15:77:1e:51:48:dc:90:19:09:4e:21:fe:fb:f6:c2:
c0:95:d2:39:8e:fa:5f:c9:b8:cc:e9:a0:4b:a9:df:
ce:95:07:c9:d5:d1:f6:a9:16:99:cf:97:29:c0:97:
22:a1:d2:ea:a3:30:78:a1:46:70:50:6d:cf:6d:93:
db:fb:8c:4d:13:38:84:8e:6a:00:54:f4:8d:81:90:
a5:1c:e7:c2:08:42:44:25:c4:0a:65:d9:b5:eb:b8:
11:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C3:D8:67:6A:91:D2:E1:BE:11:FE:01:4A:C7:09:EA:87:BE:6B:22
X509v3 Authority Key Identifier:
keyid:26:9B:8A:37:48:44:0C:9D:5C:2C:50:8B:D0:3B:46:D7:27:3E:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/94aae4-771c-429a-a7cd-f87bc173d2aa/1/JpuKN0hEDJ1cLFCL0DtG1yc-7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:01:71:27:6a:82:b0:13:fe:c4:97:ef:49:09:0b:04:a4:e9:
2d:ef:4a:f5:de:05:87:a1:9c:b7:b0:cf:8a:64:73:1c:4e:00:
92:ab:d1:0f:68:7c:63:cd:a4:64:1d:c6:1f:6f:ce:a1:64:44:
8d:4d:3f:d1:69:ee:1c:97:8a:b4:51:9b:d4:f1:dc:3a:9f:79:
8f:b9:d5:f5:05:06:0e:38:19:56:ed:9a:80:4f:9d:ec:f3:1e:
ae:a0:75:12:7a:9a:63:8c:d1:93:c0:12:82:ce:7e:67:e4:1e:
bb:5e:82:8d:fe:29:eb:64:70:a3:0d:17:df:58:1c:b6:50:32:
86:f8:39:f9:ae:ec:74:b6:f2:16:46:28:81:49:a5:f6:f1:4c:
9d:e9:c4:0f:c9:c2:19:2d:d2:e9:4e:08:a3:cb:a8:45:a9:3e:
44:85:a7:78:d2:e0:cd:fd:04:18:3f:51:a0:4e:ec:8c:d5:67:
71:06:e6:81:bb:b8:ee:85:f0:5a:b8:25:8a:da:2e:eb:e5:1e:
ef:46:71:13:2b:26:d5:90:24:64:e4:e0:0a:67:ec:4b:fb:bc:
83:fe:3b:15:3a:2e:ce:cf:29:58:3f:e7:ca:30:f1:5a:67:09:
e2:85:c2:99:8b:85:ff:17:e5:15:d8:de:bd:90:35:68:8e:67:
1d:b7:5f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:51 2025 by rpki-client