Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
File: JOmh8SqE1TJSY3_4XW646xY2OT4.mft (raw, json)
Hash identifier: dzQVk7KHUxpmg+yyhMQCv9O08TSNSOqBuOd0vmiYIYg=
Subject key identifier: 4C:E0:DD:7B:F2:D0:C1:A7:55:48:5D:03:BA:CF:09:A4:62:BB:B8:F1
Authority key identifier: 24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
Certificate issuer: /CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Certificate serial: 019A552D14D4FDB7B4CF161D04F7BEE35802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
Manifest number: 170D
Signing time: Wed 05 Nov 2025 18:00:09 +0000
Manifest this update: Wed 05 Nov 2025 18:00:09 +0000
Manifest next update: Thu 06 Nov 2025 18:00:09 +0000
Files and hashes: 1: JOmh8SqE1TJSY3_4XW646xY2OT4.crl (hash: vj/84h6HBPVxVuS7VpM1+IeSxmOURJPkKvikIHhIndo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:14:d4:fd:b7:b4:cf:16:1d:04:f7:be:e3:58:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e9a1f12a84d53252637ff85d6eb8eb1636393e
Validity
Not Before: Nov 5 18:00:09 2025 GMT
Not After : Nov 6 18:00:09 2025 GMT
Subject: CN=4ce0dd7bf2d0c1a755485d03bacf09a462bbb8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c6:d0:a9:b4:36:da:ea:fb:3e:cd:05:44:7a:
40:37:33:31:ea:55:ce:11:3a:de:c9:a9:aa:f4:13:
74:bc:09:0c:c6:ff:09:a7:45:60:1b:58:5e:d5:47:
64:48:df:16:ce:36:5b:30:69:4c:a1:3b:f5:7a:a2:
c4:7f:6b:7e:19:ce:e8:3f:66:20:fa:54:40:d4:3f:
5c:22:ec:cd:bc:02:de:86:64:cd:74:3a:db:9b:47:
c6:32:3b:c3:e4:c4:17:55:a2:64:59:53:87:f9:df:
9d:f3:2c:d5:c3:82:2a:1f:ea:dd:a1:21:e0:de:7e:
cb:fa:6c:0f:53:75:5a:c5:61:ef:a0:96:87:03:a0:
54:03:7e:10:38:f5:17:e5:87:eb:d6:98:e1:85:35:
cb:e2:9c:55:c2:82:f7:90:6c:40:d5:5f:f0:c7:19:
5c:95:1c:c7:f3:e9:8d:11:42:93:c3:52:66:7b:b5:
c6:f6:67:3d:6e:73:87:21:9e:82:72:f4:d9:d2:66:
58:25:29:0d:19:ff:72:c5:23:dd:03:fb:ee:18:b2:
5f:88:21:29:ed:41:1a:0d:e5:2d:d4:1e:49:d9:fa:
d8:71:18:88:49:dc:70:72:4f:af:b7:73:59:b2:7c:
a7:2d:72:34:ed:48:b8:a1:e3:2a:7e:29:b8:24:0f:
ea:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E0:DD:7B:F2:D0:C1:A7:55:48:5D:03:BA:CF:09:A4:62:BB:B8:F1
X509v3 Authority Key Identifier:
keyid:24:E9:A1:F1:2A:84:D5:32:52:63:7F:F8:5D:6E:B8:EB:16:36:39:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOmh8SqE1TJSY3_4XW646xY2OT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/b495b5-fbfa-4118-862f-c2c916e43925/1/JOmh8SqE1TJSY3_4XW646xY2OT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a9:76:6f:b9:42:ed:68:a5:d0:11:b5:6a:62:f0:3a:56:76:
4d:6a:d1:41:f4:bb:f1:95:c9:82:a8:6e:2a:12:33:34:5f:7d:
47:ee:1d:80:0d:9c:62:12:1a:d0:f7:88:ef:35:91:b2:bf:d7:
9f:09:58:ba:f7:af:21:78:44:0d:c3:e3:66:26:e6:a4:2b:61:
8f:aa:55:bc:02:34:e0:62:03:09:d6:91:95:38:5a:a1:07:cc:
79:58:ed:2f:e5:12:2d:14:db:ad:09:92:09:ed:7d:6d:4f:20:
6f:fd:e8:ac:94:8c:c7:b7:b4:8c:42:d9:7b:79:4b:d6:49:5d:
f6:84:45:5f:4c:96:17:90:27:0e:d5:aa:75:ed:12:0f:c5:a5:
15:d7:4c:81:63:bb:a7:c8:54:71:ba:4b:c4:a5:8b:08:78:9b:
ba:6f:68:8b:15:06:5a:df:2e:c4:27:26:c3:17:bd:8a:7e:e2:
94:01:e5:f0:9d:74:22:b6:cc:1d:fd:c5:22:df:91:4c:92:78:
f3:d0:2e:8e:43:d3:99:15:2f:6e:6a:a3:af:f5:6e:88:54:97:
ee:cf:6a:96:cc:83:8e:f1:cd:18:ec:e4:ac:6a:1c:e0:19:19:
7f:d0:6c:9d:06:f0:1b:10:b1:47:01:c5:f9:d7:4c:ac:f9:bc:
23:ef:f6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:46:02 2025 by rpki-client