Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
File: JTKlzyuhjHU-3JXuILZmKT3wLVs.mft (raw, json)
Hash identifier: /5QXmUtqYB/YdDCI4Z+o3wuS2SgMwq0YP+YdLlOWF8A=
Subject key identifier: 92:C4:AB:DE:3F:4B:1B:A5:16:61:CD:38:1F:D4:1E:91:6D:42:15:95
Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Certificate serial: 019A4DE19763D8E81CE6B75F8398B74FE0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
Manifest number: 11EE
Signing time: Tue 04 Nov 2025 08:00:21 +0000
Manifest this update: Tue 04 Nov 2025 08:00:21 +0000
Manifest next update: Wed 05 Nov 2025 08:00:21 +0000
Files and hashes: 1: JTKlzyuhjHU-3JXuILZmKT3wLVs.crl (hash: H3ix/SV2725mbqC06Yuc5Zv/5+3u5crkaewxpj0xms0=)
2: oBH_u1PqllstMg1clbDeim1fyyE.roa (hash: L3SOkvuxnMh5EHKE9/YilBcdLKJMaucr/0ncA4MIDhw=)
3: zHs9cFuQEsCg45LnMiCsOF3kF4Q.roa (hash: C6+fwUFGNJ/F4sEfe/qDP+eEAltXpbDsycsJBFRmzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:97:63:d8:e8:1c:e6:b7:5f:83:98:b7:4f:e0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Validity
Not Before: Nov 4 08:00:21 2025 GMT
Not After : Nov 5 08:00:21 2025 GMT
Subject: CN=92c4abde3f4b1ba51661cd381fd41e916d421595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:a8:00:8a:2c:88:28:0f:8d:94:e6:64:1e:
3d:8a:27:a1:3e:41:32:e4:2c:47:92:a6:ec:44:27:
7c:56:01:49:cb:fa:62:47:36:ce:fd:3a:53:ad:ca:
0b:ed:4b:ca:28:e6:b9:51:0a:99:d1:ce:d3:05:4e:
67:5f:4a:09:99:86:6a:85:98:ae:10:01:74:5c:ab:
2b:53:ea:3a:fc:1a:ad:a8:d2:9d:0c:79:b4:3f:5c:
5c:42:fd:e0:e5:7c:83:ad:16:a4:fc:69:a7:18:bc:
76:f2:6e:8d:ec:e2:47:44:39:60:9b:85:29:4b:c5:
fd:e3:80:7d:94:25:12:0a:4f:f6:c6:2f:2b:a7:0d:
5b:09:c3:4b:1e:f7:e0:94:d6:4d:38:c2:8c:41:40:
67:f1:c9:45:72:d5:03:10:f2:35:7e:4f:8f:23:7f:
81:69:14:31:b1:8f:98:d3:49:81:81:dc:38:3c:41:
8a:35:2b:30:64:80:26:1a:db:e9:6e:3b:07:e6:dc:
a6:a3:d1:db:90:3d:d5:89:17:16:ed:7f:49:d7:13:
34:38:e9:2a:0d:dc:dd:9d:1f:18:31:c1:e1:1a:ac:
f6:3e:e9:4a:7d:27:f5:99:ac:1d:cd:79:9d:e2:9b:
6a:00:38:06:d8:2c:ba:0a:c8:a4:7e:2a:c8:0e:4e:
2b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C4:AB:DE:3F:4B:1B:A5:16:61:CD:38:1F:D4:1E:91:6D:42:15:95
X509v3 Authority Key Identifier:
keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a0:28:59:ac:21:6e:28:52:d8:49:51:e8:86:86:a8:e8:7e:
42:f2:3c:a9:7c:a3:13:8e:ca:40:8d:ae:ae:48:43:1e:a8:ff:
16:8e:e4:9d:45:82:c2:1e:7a:dd:93:f6:d8:b3:8c:4a:8a:90:
7a:35:35:0c:43:91:aa:a9:eb:a7:08:62:07:f1:2f:d5:ee:84:
b3:b9:4e:6e:16:43:e9:a5:35:8b:f8:7b:3e:17:e1:d1:4b:a1:
7e:8c:4c:dd:b6:ec:e5:13:11:21:e5:10:81:8a:af:d6:ea:02:
3f:a5:75:3c:39:e0:5b:41:70:7a:ca:4f:a6:53:ae:03:d5:34:
64:d5:58:e3:4b:f8:0c:41:12:39:b3:8f:73:69:20:fe:5d:7a:
a9:5a:91:84:ef:1d:ca:73:c7:85:0c:5d:1b:0b:ad:0d:e6:11:
e4:f4:d6:3b:77:41:ab:4b:cf:33:8d:ed:53:a1:6b:fc:1e:20:
8f:29:23:dd:f8:0f:c1:f8:11:a9:94:3a:4c:be:cd:34:ed:be:
cd:a9:7f:03:e3:4a:84:83:27:49:ec:69:d1:3e:d2:d7:e1:3e:
03:5c:66:1e:94:38:d1:c0:3f:08:47:b2:f5:1b:a4:32:4b:22:
71:67:52:44:b1:cd:c8:b3:de:40:20:9c:65:b7:a3:d1:ae:ad:
fc:2e:d3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:07 2025 by rpki-client