Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
File: JdgP5rl_Uihnw3qMU_CljncJ-8M.mft (raw, json)
Hash identifier: G2/FSpO2RwO7v3C4D1tIH6UaEPKb+Ds2eonxAaDNBKE=
Subject key identifier: D9:09:AD:B4:4D:00:ED:6A:B9:31:4F:9F:EC:FD:2D:2C:B0:FB:84:B2
Authority key identifier: 25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
Certificate issuer: /CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Certificate serial: 019A4EF4B9BD87BC746786C07EE66484D197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
Manifest number: 0FAB
Signing time: Tue 04 Nov 2025 13:00:52 +0000
Manifest this update: Tue 04 Nov 2025 13:00:52 +0000
Manifest next update: Wed 05 Nov 2025 13:00:52 +0000
Files and hashes: 1: JdgP5rl_Uihnw3qMU_CljncJ-8M.crl (hash: 4JWDXfL/qeHew1hLS7NEWMNHqh6AyyTBFc6En43djW8=)
2: h-jm1BLS9IvvXFUt65doG6SmjKs.roa (hash: SPX4w9cc6FxiyrggBKn+FUAfxJuZhXsTTQy+RHHDQmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:b9:bd:87:bc:74:67:86:c0:7e:e6:64:84:d1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d80fe6b97f522867c37a8c53f0a58e7709fbc3
Validity
Not Before: Nov 4 13:00:52 2025 GMT
Not After : Nov 5 13:00:52 2025 GMT
Subject: CN=d909adb44d00ed6ab9314f9fecfd2d2cb0fb84b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:3e:f9:70:96:2b:f4:db:51:58:26:1e:59:
fd:8b:8b:9f:eb:44:a6:b8:e7:ee:6a:c3:b9:a5:6e:
04:d3:00:fe:26:7f:2e:00:b0:a8:01:1a:5a:25:3f:
7b:75:76:b0:43:f4:fb:73:18:40:64:df:82:61:3b:
fd:e7:b6:d3:37:1e:45:c0:25:f5:7a:d6:c1:34:ea:
af:71:d5:e5:78:55:5f:43:c2:63:ef:65:9a:23:c0:
a8:36:92:44:cb:64:7f:5a:5b:3e:cd:58:6c:39:83:
a9:88:23:90:c3:a2:5d:65:af:fb:a5:d2:1e:75:70:
84:1f:77:11:22:cb:3c:f7:3c:46:e8:c9:1b:ac:6a:
98:b0:39:db:2b:0a:1b:79:57:38:b2:3e:b7:3c:ee:
56:9a:42:be:c2:24:56:e8:aa:a3:b9:db:e3:1d:1b:
3d:9c:15:e8:ef:64:9b:88:3a:97:f0:86:7a:41:03:
29:5d:ae:56:8c:0d:33:14:60:5d:54:c7:17:b9:48:
e3:21:b4:65:b9:0e:37:c0:cf:fc:ec:7d:8e:89:58:
28:19:99:2c:99:94:8f:16:cd:78:df:e9:a7:0f:97:
78:b4:26:d2:bd:89:e1:6a:83:8b:a6:c6:b0:10:89:
b4:d9:9d:a1:35:74:75:01:a0:83:9e:a4:e7:54:d2:
26:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:09:AD:B4:4D:00:ED:6A:B9:31:4F:9F:EC:FD:2D:2C:B0:FB:84:B2
X509v3 Authority Key Identifier:
keyid:25:D8:0F:E6:B9:7F:52:28:67:C3:7A:8C:53:F0:A5:8E:77:09:FB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdgP5rl_Uihnw3qMU_CljncJ-8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d1285b-f3e6-4bce-9bfc-83ad31aa45bf/1/JdgP5rl_Uihnw3qMU_CljncJ-8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:37:8d:c5:61:ed:51:3e:08:ef:ba:0e:85:4c:67:a6:0e:af:
47:f1:c1:90:24:31:6a:32:0d:65:63:1c:9d:c2:60:cf:17:26:
95:79:1e:84:e2:d1:c7:97:1b:0a:42:9f:b6:be:61:19:7d:24:
db:38:fe:e2:79:e2:02:0c:dc:34:3f:cf:9a:9b:e1:c6:ce:a2:
5a:ce:18:8b:98:b9:fd:4d:fd:36:b0:30:ab:0f:59:4b:61:94:
41:55:6f:32:58:2b:0b:bc:df:0d:3e:94:bd:97:91:6d:2e:09:
69:71:33:01:a8:52:39:dd:58:9b:79:4d:83:b2:88:c7:35:63:
ce:d3:c2:9f:55:7f:59:7f:63:0d:38:6f:e8:5f:7f:65:d1:9e:
ec:d5:9c:37:c2:11:00:cb:40:c2:e8:28:1d:e3:00:2e:24:01:
5d:e5:2f:2c:c3:d1:1d:8a:e6:4e:f9:d7:b4:0f:8b:5e:7f:73:
d2:3c:1e:a9:24:65:4d:8e:df:25:14:04:a2:2d:96:e3:41:da:
93:7a:9b:b5:cf:78:e6:11:d1:61:01:0a:7a:22:93:7b:05:09:
8b:88:4f:50:11:6e:78:0a:cc:43:dd:53:c4:2f:6a:ae:35:d3:
c7:9d:ba:24:6e:6e:74:df:e9:f9:14:b6:82:2b:3c:3d:09:e6:
91:3b:00:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:54 2025 by rpki-client