Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
File: JqmLYSX1JD4-2DUBWWfN25cUjfE.mft (raw, json)
Hash identifier: XCFXglPbG3aVYD7iW5fI5VFuPBy6PQGiiL6aqKVQz44=
Subject key identifier: 08:7F:04:FC:8E:93:E2:BD:CB:64:2C:59:D0:40:D1:0A:9B:98:9D:8F
Authority key identifier: 26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
Certificate issuer: /CN=26a98b6125f5243e3ed835015967cddb97148df1
Certificate serial: 019A578974436E6B3F0FE05F43D4F11CCBBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
Manifest number: 12CC
Signing time: Thu 06 Nov 2025 05:00:17 +0000
Manifest this update: Thu 06 Nov 2025 05:00:17 +0000
Manifest next update: Fri 07 Nov 2025 05:00:17 +0000
Files and hashes: 1: 1HlDDcU_awP0Jg600b5QOV5zFyw.roa (hash: DII6lgfGgmt/XXzdShUFtsjKk90R+1ZgqPhGOseU9bY=)
2: JqmLYSX1JD4-2DUBWWfN25cUjfE.crl (hash: a0HfoqyVFWPdc2OW2iLx1tgDbM5BUSD1DpjnKoqsw/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:89:74:43:6e:6b:3f:0f:e0:5f:43:d4:f1:1c:cb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a98b6125f5243e3ed835015967cddb97148df1
Validity
Not Before: Nov 6 05:00:17 2025 GMT
Not After : Nov 7 05:00:17 2025 GMT
Subject: CN=087f04fc8e93e2bdcb642c59d040d10a9b989d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ab:b6:70:ba:56:b9:7c:66:6c:81:32:16:08:
9e:ce:35:e4:94:69:5d:d6:19:5b:cc:62:f6:12:c8:
59:df:b2:ee:db:02:3d:7b:1a:ab:6e:08:6d:d3:0f:
cd:4c:fb:9c:f1:40:0b:8a:6b:38:f6:54:7b:a5:82:
db:86:58:66:d3:bd:0a:6d:dd:e8:71:4b:a0:4c:f0:
f6:a1:a4:73:3d:21:9d:66:d5:48:54:1e:cf:56:59:
11:2b:1d:8b:28:fe:fe:42:af:58:91:a8:23:24:a6:
b4:58:4c:d6:ec:bc:2a:ca:4d:e3:26:e3:b0:f5:4d:
ec:13:1c:e0:1a:a2:51:df:df:69:1c:a1:55:5e:fc:
91:7f:06:bc:9f:80:eb:ee:5e:07:89:13:9e:4a:28:
8a:05:96:5f:0b:84:ab:a8:8e:0f:f0:fc:55:88:c1:
82:68:38:be:10:7c:0a:b1:01:fa:17:84:ff:d4:58:
a3:40:e4:83:db:36:1a:4f:67:1e:2b:e6:87:e1:f1:
e6:fb:a8:85:5b:a5:75:70:76:34:34:89:f7:76:7f:
f0:76:74:d2:c6:73:a7:14:ab:83:70:71:d4:b2:b8:
da:02:95:c7:ff:ca:50:37:79:ef:54:ca:54:fa:8a:
f5:df:51:a5:c3:be:90:02:75:03:15:0b:2d:5e:cf:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7F:04:FC:8E:93:E2:BD:CB:64:2C:59:D0:40:D1:0A:9B:98:9D:8F
X509v3 Authority Key Identifier:
keyid:26:A9:8B:61:25:F5:24:3E:3E:D8:35:01:59:67:CD:DB:97:14:8D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqmLYSX1JD4-2DUBWWfN25cUjfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bdbfb0-f914-40d3-b2e2-b913e596707e/1/JqmLYSX1JD4-2DUBWWfN25cUjfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ed:b5:53:3a:78:d0:89:77:b6:f2:18:66:c4:61:e7:e2:a5:
25:1b:74:75:6e:42:a0:2a:02:7f:c0:0d:5c:7d:8f:2c:74:f6:
4e:72:17:b1:1d:c5:c3:43:c9:17:55:a6:46:4d:ba:63:3b:55:
c4:71:89:05:74:f0:02:a3:7a:0b:c9:5f:8a:95:b4:72:9d:20:
f0:c0:56:e0:14:01:3a:37:65:d6:9d:1d:d1:9a:80:38:d3:f8:
5a:37:5f:7a:e9:81:4a:d3:5c:7d:02:f5:7d:db:b9:de:b6:44:
5d:40:9a:2a:41:98:66:4e:1b:69:a3:60:5d:2b:a6:99:6f:5a:
d1:fa:26:cc:25:26:17:fc:fd:24:03:75:90:77:42:3a:d1:9d:
0f:4a:5f:57:01:ec:73:1f:b3:58:0d:d8:b3:a5:47:bd:b6:ad:
c8:d7:49:f5:c8:99:ba:5e:62:f1:8b:67:c6:4e:ca:69:4c:04:
d6:67:e7:5b:3d:5f:bc:d1:09:db:be:58:66:3d:2e:04:e4:95:
54:a6:83:c3:67:07:50:a5:4a:1e:46:1f:35:32:a2:d7:ac:7a:
a7:d0:08:b4:2c:e2:70:23:a1:b6:3b:ce:ce:22:a4:86:98:0d:
73:f0:13:da:de:de:98:df:65:06:23:53:18:0c:45:f0:dd:fa:
43:6b:50:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 09:40:33 2025 by rpki-client