Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
File: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft (raw, json)
Hash identifier: b6peQOsuJisdZN4cWdl75kr37UmP0qCq/C1SECfqZ1A=
Subject key identifier: AC:E1:63:F1:15:38:49:EC:F1:E1:48:A1:30:B3:4F:2E:62:87:AD:25
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 019A54C0EB533F3581ACC81BC533ABCEF8FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
Manifest number: 099B
Signing time: Wed 05 Nov 2025 16:02:00 +0000
Manifest this update: Wed 05 Nov 2025 16:02:00 +0000
Manifest next update: Thu 06 Nov 2025 16:02:00 +0000
Files and hashes: 1: JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl (hash: FFja1RDkuLEIrJ7VDpWMzepCzqVSfXMPgtYZ8yD9rDc=)
2: P7b5zmQiLmwTefl5liI-KoZJpcY.roa (hash: VJKcy+JlG04cLK8U6Txf4TogJYWS6O9qHAuZFHI6UVY=)
3: fkZMJf--qW7MT6bXdyPn8Rz0kGM.roa (hash: FGOPoxO9vvC4y9ljtcZplGO40KLgXf+OUCl+F6C8Bmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:eb:53:3f:35:81:ac:c8:1b:c5:33:ab:ce:f8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Nov 5 16:02:00 2025 GMT
Not After : Nov 6 16:02:00 2025 GMT
Subject: CN=ace163f1153849ecf1e148a130b34f2e6287ad25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:75:8d:7c:28:be:b6:99:3b:1d:db:08:6a:
f4:23:89:a1:d0:46:ef:50:24:24:dd:71:c4:bd:5b:
f8:96:1b:4c:f3:a0:ed:b9:1c:b1:4c:46:d4:31:20:
d5:07:cb:d9:7d:da:94:37:d4:74:8b:4a:5a:e3:4c:
6b:40:ff:dc:e1:f6:f4:41:98:89:52:13:54:15:92:
3e:8b:31:80:34:f0:30:19:f2:6b:33:a9:f9:79:64:
6f:9b:0d:70:4d:73:c8:62:fb:bb:94:98:cf:cc:82:
79:82:51:74:e3:a7:66:cc:55:3c:04:ff:8a:47:bf:
1e:03:8a:7e:a2:59:04:3e:55:8b:c0:c1:68:1b:a2:
a9:78:28:fb:9a:0d:4e:05:19:09:1b:b6:5c:ae:4b:
f7:81:e5:74:75:48:cd:50:c1:54:fb:bd:c8:ac:9d:
a3:a7:c1:40:77:e6:bf:79:11:d7:f4:17:d4:dd:5b:
13:a9:c2:6a:f6:82:14:a0:3d:3c:1c:41:d9:b9:f6:
e5:bd:5d:10:5e:89:09:0f:6f:db:5a:3c:f9:9c:59:
9c:3a:40:d9:81:6a:34:c3:bb:11:69:f3:9d:02:8c:
bd:b8:51:e9:71:06:a0:20:1f:4e:a9:8c:0a:cb:61:
c1:4c:c2:0e:fa:0f:fd:5c:27:a9:43:62:56:b5:43:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E1:63:F1:15:38:49:EC:F1:E1:48:A1:30:B3:4F:2E:62:87:AD:25
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:5e:2b:35:c4:1c:a1:d8:17:fb:0f:c3:6a:e0:87:4f:1b:99:
a7:b2:88:34:ea:a4:28:3a:53:4b:11:63:2f:dc:31:0c:c3:3a:
93:12:ec:95:b6:f3:f2:ea:6c:2a:51:e6:d6:54:29:fc:c3:ec:
3c:42:27:cb:bb:11:53:a6:93:af:16:a0:c6:a3:69:93:70:7e:
8a:59:58:ac:31:8d:0f:09:e9:1f:96:b4:97:25:1b:28:f4:79:
85:4f:2d:42:99:aa:8a:63:b6:82:04:dd:a5:f6:5c:a0:ff:d4:
f7:ce:ee:ee:82:c1:52:cf:64:e2:e6:5d:bb:98:d4:79:22:67:
e3:74:0e:f9:aa:26:bb:21:3e:e9:d0:f1:19:3d:90:11:cf:88:
c7:d6:98:dc:3e:e6:5d:22:0c:e3:80:2e:77:d8:0b:24:0d:c3:
76:f7:73:71:55:b7:2e:bb:37:00:64:a5:4c:40:93:a5:88:52:
8b:13:ef:c3:27:ad:f4:54:08:b7:66:46:32:29:09:45:07:b0:
b4:01:19:12:a2:c9:8b:d4:12:70:03:5d:6e:39:6f:9a:37:57:
16:9a:28:1d:f9:7d:30:0e:f6:0e:ab:b4:65:7e:63:d0:2e:37:
de:16:45:9b:3c:ee:d9:05:ee:7a:06:4d:82:b5:ff:b9:37:91:
06:b7:85:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:47:34 2025 by rpki-client