Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
File: JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft (raw, json)
Hash identifier: mH6x7c2040C+WQTWUIyBTuvR2p52x5/IMsXZbrYC5Lw=
Subject key identifier: 05:D3:CC:4D:5E:90:14:97:2E:0C:56:AD:26:62:20:71:F2:56:10:7A
Authority key identifier: 25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
Certificate issuer: /CN=255633182ddd558b41ba16c519ee461450ddddd9
Certificate serial: 019A5150405A8EF049D410688962995A41F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
Manifest number: 0139
Signing time: Wed 05 Nov 2025 00:00:04 +0000
Manifest this update: Wed 05 Nov 2025 00:00:04 +0000
Manifest next update: Thu 06 Nov 2025 00:00:04 +0000
Files and hashes: 1: JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl (hash: 8/hKrBqoMgF72GHV85VS5/sO3U65e0FKw1dMyKZsTyU=)
2: rsJr37lWx4RTfR8Cvpu056B6Wz4.roa (hash: /l5appIPEWouSbZYMspTa7m6sRTfOtnp/hleC+S0sOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:40:5a:8e:f0:49:d4:10:68:89:62:99:5a:41:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255633182ddd558b41ba16c519ee461450ddddd9
Validity
Not Before: Nov 5 00:00:04 2025 GMT
Not After : Nov 6 00:00:04 2025 GMT
Subject: CN=05d3cc4d5e9014972e0c56ad26622071f256107a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:13:ab:45:b5:28:97:cb:99:86:9f:53:b9:
73:ec:ed:ec:99:51:eb:65:34:07:2c:33:b5:2d:42:
6d:80:ab:fa:52:45:53:30:25:f9:90:5b:69:26:c8:
f7:22:98:aa:7f:cf:7e:50:ae:02:cf:fa:f6:8b:f5:
d3:1b:06:9e:2c:8e:2b:f1:95:47:73:e2:6f:73:83:
ba:e8:1e:6f:a8:8c:68:f1:14:18:1b:76:8c:40:ec:
7b:eb:76:2a:06:2b:c3:9c:61:d0:4a:11:8f:30:21:
6d:08:cd:9d:68:85:59:c0:e5:fe:54:7c:51:54:32:
be:ca:de:64:9c:08:0d:73:ce:d3:98:db:b9:2b:81:
6f:18:35:41:e8:be:ff:43:1f:67:53:d9:8c:2c:ff:
5d:95:53:63:bf:a0:12:69:5c:92:7f:c6:f8:56:1d:
d2:6c:fc:19:11:b6:a6:53:16:09:9a:91:3c:70:2d:
50:c3:02:60:cd:73:42:2c:ce:ed:bd:1f:69:82:d3:
1d:4b:48:24:10:45:f8:69:05:f2:f3:8f:af:8e:3f:
2d:7f:25:96:9c:21:ad:56:59:62:71:b5:e9:20:5b:
01:50:23:f1:d9:c8:fa:b6:7a:77:ee:48:ed:52:f7:
82:5c:19:a9:a5:9d:2a:44:48:b7:61:a0:82:e5:9f:
40:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D3:CC:4D:5E:90:14:97:2E:0C:56:AD:26:62:20:71:F2:56:10:7A
X509v3 Authority Key Identifier:
keyid:25:56:33:18:2D:DD:55:8B:41:BA:16:C5:19:EE:46:14:50:DD:DD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVYzGC3dVYtBuhbFGe5GFFDd3dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/efeb1a-29b5-44a6-92ea-5b541f34732e/1/JVYzGC3dVYtBuhbFGe5GFFDd3dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:50:43:de:98:a8:ed:14:ab:8c:35:3a:87:66:04:30:47:e4:
0d:c6:19:a1:b6:6e:9b:73:d7:7f:ef:72:39:6f:47:07:51:6f:
73:ad:8b:ba:9a:5f:a9:e7:ae:16:f5:53:8e:a2:25:dc:49:9a:
31:15:6b:8b:38:c3:51:52:28:3b:e9:18:7e:0d:f3:1e:1c:6a:
50:b8:91:ba:6d:76:5e:1e:89:d7:31:42:5a:cd:16:f1:be:85:
d1:b1:61:2f:cb:40:75:40:a7:ff:a4:56:4e:69:35:a7:cb:a7:
a1:ef:47:c8:40:ec:e4:f5:d2:61:6a:34:19:eb:ac:3e:51:c9:
3c:0d:90:d4:cd:f3:3e:68:e8:59:36:5d:84:80:27:3e:3d:66:
61:81:87:5c:4b:d9:af:c7:d7:b5:17:73:42:00:be:a6:e6:36:
ba:14:bb:fc:79:45:83:a3:a0:56:32:52:13:fa:69:f8:68:b9:
b8:dc:d0:58:5c:6a:21:6b:d6:1d:17:9d:a9:29:19:93:c3:62:
6b:2c:c2:a5:4c:18:bd:14:01:b0:8e:e5:e1:73:a0:1c:8b:2d:
2f:5e:47:34:90:02:3d:e4:2a:a8:83:bf:76:0a:da:39:60:8f:
9f:0c:16:11:4b:4f:c3:73:fd:2b:b3:d8:4e:bb:c8:c2:e6:8e:
48:ee:54:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:32:25 2025 by rpki-client