Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
File: jlo2o46eViR2rnC5FQKOMBhxKRk.mft (raw, json)
Hash identifier: 0+6xFtMgdiFcp4HR8X9bqTmPLXb01zAeV/tcOQl/N0k=
Subject key identifier: 0F:37:FE:4D:3E:9C:D7:EA:7C:9C:0F:26:2A:95:B8:8B:09:5E:50:F5
Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
Certificate issuer: /CN=8e5a36a38e9e562476ae70b915028e3018712919
Certificate serial: 019A4FD007731DE637EAD2F7CFF6D4F12F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
Manifest number: 0AAE
Signing time: Tue 04 Nov 2025 17:00:24 +0000
Manifest this update: Tue 04 Nov 2025 17:00:24 +0000
Manifest next update: Wed 05 Nov 2025 17:00:24 +0000
Files and hashes: 1: jlo2o46eViR2rnC5FQKOMBhxKRk.crl (hash: YKpK/0MBQfzZk7Jg0ixV+LYz4i7S0+cNqjamdF8UuZM=)
2: lCFWlcHQXl8OCfG8VkJf_ovcDUY.roa (hash: SWucWn1D4Fv0B4+THeJJxTuUCPWrkWrGEDFRw9TIy8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:07:73:1d:e6:37:ea:d2:f7:cf:f6:d4:f1:2f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919
Validity
Not Before: Nov 4 17:00:24 2025 GMT
Not After : Nov 5 17:00:24 2025 GMT
Subject: CN=0f37fe4d3e9cd7ea7c9c0f262a95b88b095e50f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:41:5e:94:ac:b5:f4:13:6e:ba:67:ab:91:
a2:74:41:27:3d:08:e5:4d:97:7f:92:78:53:2d:23:
d1:72:86:8b:ec:e3:55:7d:49:39:dc:4d:9e:c6:75:
90:b1:88:0d:b6:a9:5a:c7:9d:48:03:28:16:52:3e:
86:32:fd:c3:9a:70:ac:6d:be:d5:f0:88:e2:6f:dc:
23:d8:51:3c:44:a9:5c:b1:e1:25:77:09:44:01:1a:
89:9c:dc:00:3f:0c:7c:8f:d4:7d:2d:c7:42:85:4e:
e3:5d:9f:0a:d7:14:25:15:19:d9:6d:44:5b:af:f7:
a3:88:98:95:f3:4e:3d:cb:5d:a3:df:c4:6a:c1:3a:
25:39:4d:fa:f7:51:19:0e:d6:fa:a3:ce:bb:26:2f:
10:4c:83:9d:07:fe:a6:e9:f0:9a:18:56:cf:08:2a:
60:35:53:9c:84:e0:e9:81:83:66:69:10:97:2d:92:
29:24:e1:0a:00:da:3e:2f:73:6e:a2:32:42:dd:c6:
cb:84:5b:52:7f:5d:76:4e:7e:bc:d9:ca:bb:24:a9:
2f:75:f1:14:f3:8c:cb:35:96:91:8e:9a:97:54:b3:
11:53:33:8a:7f:71:6c:20:a6:01:75:51:7a:b8:20:
d3:b0:96:5f:6f:08:fc:83:e7:b7:7b:32:04:51:6f:
81:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:37:FE:4D:3E:9C:D7:EA:7C:9C:0F:26:2A:95:B8:8B:09:5E:50:F5
X509v3 Authority Key Identifier:
keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:84:cd:4e:b2:b2:f0:6e:4c:0e:bf:3f:34:80:b4:f3:c9:57:
59:16:18:05:96:43:2f:9e:37:77:7e:5b:ba:0b:31:22:45:7e:
fe:ff:92:59:bd:51:b8:e9:cc:38:3b:6f:a6:cb:bf:eb:82:b9:
98:36:be:77:2f:3a:77:bb:f7:5c:48:3c:52:03:4b:ec:f8:84:
d1:6f:0c:e1:a8:17:07:d3:1e:88:ab:e0:33:0d:cf:ac:46:d7:
66:ed:ca:a1:b9:0a:10:26:4e:cd:b9:54:66:a9:23:e8:de:40:
e6:be:b1:45:e4:0f:b3:80:6a:51:cd:c9:51:6d:b4:4a:90:ce:
21:15:1f:8c:1f:6b:b9:5d:fc:51:6e:c2:9f:92:c4:55:dd:af:
f2:6c:c4:30:25:bc:60:f9:d7:70:04:6c:bb:b0:15:c4:bd:73:
30:af:92:35:5c:16:fb:34:20:3c:83:34:c2:a0:c2:58:b6:2e:
6e:0b:df:0d:76:af:3a:a3:14:43:28:97:6c:d2:66:7e:37:3d:
57:ca:50:02:cc:f0:d1:9c:df:33:47:1b:19:b5:3a:5d:f4:91:
89:b3:98:64:db:af:f2:db:ac:15:ec:73:04:84:6b:af:b1:87:
3b:7a:8a:3d:74:10:ee:94:2f:98:48:67:8b:97:37:ab:b1:a8:
56:14:92:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:57:21 2025 by rpki-client