Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
File: JGDLdNAZgkw0siOu1McJqFeyxgY.mft (raw, json)
Hash identifier: xJFkV0KKcqipBhOI49/lhTKJ76mtw8GosZS7iyliV/o=
Subject key identifier: BD:AB:68:6E:04:41:11:C9:4E:A6:99:83:11:7E:3E:0E:C0:58:FF:2C
Authority key identifier: 24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
Certificate issuer: /CN=2460cb74d019824c34b223aed4c709a857b2c606
Certificate serial: 019A4E1908DB58D08CB1FA24006D9A2876F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
Manifest number: 058A
Signing time: Tue 04 Nov 2025 09:00:54 +0000
Manifest this update: Tue 04 Nov 2025 09:00:54 +0000
Manifest next update: Wed 05 Nov 2025 09:00:54 +0000
Files and hashes: 1: JGDLdNAZgkw0siOu1McJqFeyxgY.crl (hash: OKXhNkdXOqcUrd4R5e8cZ7U7O6MFlxjV4KWeRqSbTGU=)
2: Po9Kd95ItrzwaoslHVQ8GkKDEsg.roa (hash: TRai4O+tEgZgd6yxFrk6Ul1AehRTWxDzlup3pEvU2bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:08:db:58:d0:8c:b1:fa:24:00:6d:9a:28:76:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2460cb74d019824c34b223aed4c709a857b2c606
Validity
Not Before: Nov 4 09:00:54 2025 GMT
Not After : Nov 5 09:00:54 2025 GMT
Subject: CN=bdab686e044111c94ea69983117e3e0ec058ff2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:36:1b:a2:f6:4c:af:d3:95:d0:7a:a7:b6:
49:e8:c7:a2:91:9c:12:a4:e6:92:e7:ea:41:a1:15:
d0:f4:34:99:6f:52:f1:11:fc:9f:ad:52:70:81:66:
ec:84:2e:31:6e:d1:b9:64:eb:1c:f4:5c:8a:b1:89:
24:b3:14:c5:db:4d:58:73:7f:0b:c9:69:94:05:7e:
d6:af:22:4d:e0:c9:76:2e:ca:07:b3:82:79:c8:ad:
89:e6:0b:cb:a3:91:0e:a0:db:5b:1b:70:e6:3d:a3:
d2:b6:7a:49:65:a5:4b:5b:30:64:dd:46:71:10:c3:
8b:25:73:f4:dc:67:6a:20:13:3c:51:97:67:1a:71:
3f:3d:62:d4:f7:2a:3d:9a:11:1b:0f:40:7c:dd:96:
12:a2:1e:0e:55:87:3c:5a:6c:bf:61:27:e2:8f:ce:
fe:ac:b0:d1:ce:5b:65:5f:e0:a6:1c:33:36:48:c6:
16:6a:f8:fc:f2:24:e5:3e:4b:36:c2:59:c6:d6:ed:
86:d3:00:98:d2:f3:a0:e4:cf:da:12:ba:ec:ca:c0:
f4:eb:77:a5:42:35:36:21:d9:a8:30:d3:b8:4d:d7:
69:0b:7b:35:3a:9a:87:2b:4b:9b:b5:8d:eb:f9:77:
fd:16:28:7c:d5:7f:2c:b5:80:47:c1:85:c1:e6:fc:
b1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AB:68:6E:04:41:11:C9:4E:A6:99:83:11:7E:3E:0E:C0:58:FF:2C
X509v3 Authority Key Identifier:
keyid:24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:64:fa:1d:38:39:6e:a8:73:48:46:d5:ca:a4:29:7c:3b:b4:
87:53:6c:e6:92:c6:a7:85:65:d2:57:13:1c:45:fe:17:ac:70:
ca:de:72:b0:3c:d3:72:50:e6:c9:ca:98:17:45:1e:67:6e:50:
6e:3c:2c:53:63:d4:0b:e0:8c:27:a6:29:22:68:cb:c8:3a:06:
15:62:64:b0:15:7e:d7:e1:01:91:40:14:bd:34:3c:d6:05:b1:
f9:89:04:36:72:ed:a4:e7:b2:d9:fc:fd:cf:4c:34:5b:6c:25:
f1:d0:08:b5:95:ab:27:b5:9a:fb:d4:af:63:7c:ac:2c:48:48:
cb:94:7c:26:6e:59:e5:9b:a2:db:ad:c3:93:39:02:6d:5a:31:
23:a9:2f:27:ed:32:68:ee:09:17:7e:29:80:a9:02:03:19:79:
29:da:09:d1:25:67:13:09:9b:19:ca:a8:5f:bd:bd:51:7f:31:
b6:d6:eb:98:87:cb:ec:50:f2:16:d7:be:81:49:65:fd:5d:18:
67:e9:e3:29:f8:dd:84:b3:f1:54:35:6d:7e:1e:79:27:f2:38:
60:2e:20:40:7b:16:66:0c:a8:dd:0a:f4:0b:9a:1a:3e:a0:11:
e7:86:16:0a:f4:b5:83:6b:63:6a:30:05:76:1b:b6:2e:f4:5d:
75:42:bc:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:32 2025 by rpki-client