Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
File: JTNYNY66UbU00_rppsuHHeY34AA.mft (raw, json)
Hash identifier: IRCDGML/rmG072TzZeCHUIE3hvM04S6timqHZ4AZhxo=
Subject key identifier: 48:08:F5:95:88:CF:C5:0A:14:84:1C:26:96:7B:6F:1B:5E:C3:D2:B1
Authority key identifier: 25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
Certificate issuer: /CN=253358358eba51b534d3fae9a6cb871de637e000
Certificate serial: 019A4EF57491864CB9D1CC9FD4CF3DF5951F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
Manifest number: 0AAB
Signing time: Tue 04 Nov 2025 13:01:40 +0000
Manifest this update: Tue 04 Nov 2025 13:01:40 +0000
Manifest next update: Wed 05 Nov 2025 13:01:40 +0000
Files and hashes: 1: AznASXPtSsVB0QJTrOLEwvRqJvg.roa (hash: AIlADlzguhRYCJM9H8PKNEWx4IayFm+wVXpreNrn5jI=)
2: JTNYNY66UbU00_rppsuHHeY34AA.crl (hash: 5lpkzGH0rwcdeAFZPgJ5f8qn94rAMml4kFEpTsoMNak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:74:91:86:4c:b9:d1:cc:9f:d4:cf:3d:f5:95:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253358358eba51b534d3fae9a6cb871de637e000
Validity
Not Before: Nov 4 13:01:40 2025 GMT
Not After : Nov 5 13:01:40 2025 GMT
Subject: CN=4808f59588cfc50a14841c26967b6f1b5ec3d2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:7e:1e:9e:f5:8c:0f:ec:41:14:a4:2d:9a:06:
88:cd:46:60:66:b1:15:8a:88:69:91:af:85:56:49:
22:71:c7:63:71:02:c2:f2:50:21:7d:28:e1:83:c5:
70:b6:50:13:f2:12:01:e2:9b:90:a8:24:43:f5:8e:
10:c2:38:ea:ed:3c:23:a9:15:34:3b:05:18:56:c1:
75:3d:6e:55:10:c9:68:6b:d7:b4:17:44:84:8e:65:
60:f1:7a:85:96:86:0d:03:62:c7:18:d5:77:6f:3e:
ad:02:18:57:2f:8d:18:ea:dd:16:de:00:b8:5c:73:
35:01:3a:30:3a:d0:a4:dd:e0:75:4e:6f:f4:79:c3:
82:48:20:85:c2:4d:5b:19:67:ae:6e:4a:bf:a4:8f:
a7:59:22:48:a5:03:01:9d:3b:07:77:9d:fa:fa:b0:
29:a5:52:ea:02:c7:7f:3b:57:ce:41:5f:0f:37:e8:
f4:95:d9:94:f7:5b:7a:02:6a:e7:8e:73:f7:e1:e7:
80:b7:d2:dc:ee:fc:45:cb:29:ee:5e:d6:f3:c0:4c:
5c:b6:22:da:c4:12:15:10:91:a4:c2:3b:52:0c:66:
2f:d4:cf:48:51:66:1c:ef:eb:04:c4:74:6e:cc:a3:
9e:b3:c0:24:86:da:1d:3a:aa:ae:64:22:26:2b:d6:
80:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:08:F5:95:88:CF:C5:0A:14:84:1C:26:96:7B:6F:1B:5E:C3:D2:B1
X509v3 Authority Key Identifier:
keyid:25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:95:b1:69:38:85:7d:99:7a:fb:37:48:8a:21:fc:b3:30:73:
e2:47:8e:e0:51:8c:9c:54:7d:4a:11:88:cf:b1:73:d0:40:ec:
bc:25:7a:58:60:d3:3a:d3:b2:0f:61:d1:fc:dd:3d:a6:c4:40:
76:59:f3:b5:30:74:c2:1e:4e:e8:ec:ff:fd:d3:8f:cc:e1:c6:
55:52:6e:e7:c4:01:92:13:b0:42:8b:e6:d9:c7:6f:0f:c9:29:
7f:74:19:77:53:48:34:55:3f:6c:ea:30:1d:e3:d2:cc:2e:ad:
7d:75:cd:c5:df:60:c7:2b:83:89:cd:77:00:cc:01:d7:80:c3:
d4:16:e0:74:76:0d:23:5d:10:e0:62:95:ca:b2:bc:78:94:b6:
e5:e7:db:c5:7b:a7:86:1e:5c:f7:33:06:86:e7:16:f4:b4:06:
bc:b9:49:d9:fa:d0:c7:28:ce:bb:b7:2a:dc:76:ef:8e:ce:50:
9d:3e:f6:f6:4a:1b:65:0e:9c:8c:2a:f3:be:f7:2c:57:c0:d6:
6d:92:99:3f:d2:d1:9d:b6:f9:b9:16:74:7f:84:f0:e1:d6:47:
6f:56:e3:a6:ef:51:f3:03:b0:b3:73:58:8e:2a:20:48:20:c5:
b4:5c:6b:11:9d:f9:ca:65:29:9b:b8:92:13:9f:aa:8f:ab:63:
83:f6:aa:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:18 2025 by rpki-client