Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
File: JbvtC_9__qtn8wK0EaAHAYVKbDA.mft (raw, json)
Hash identifier: P3ylUHbX8+njAmHwIrT4vIPw/eNk8GWqBCqifstg6Ys=
Subject key identifier: AB:68:1A:C2:A6:26:1A:91:53:EC:FE:B9:34:6F:84:A4:0A:89:3F:A3
Authority key identifier: 25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
Certificate issuer: /CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Certificate serial: 019A4F6238734A941EB01166F42A69265963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
Manifest number: 0D61
Signing time: Tue 04 Nov 2025 15:00:28 +0000
Manifest this update: Tue 04 Nov 2025 15:00:28 +0000
Manifest next update: Wed 05 Nov 2025 15:00:28 +0000
Files and hashes: 1: JbvtC_9__qtn8wK0EaAHAYVKbDA.crl (hash: ZIjh0D0fBcw0NxQ77aMvWNHDlkz9nQ92eQlRBKSPB3w=)
2: THD6dCAcQylh5j9TRPuNEYk_EF0.roa (hash: RLY2fSTdx8vREbBUWYofmuTLlTO7pJB3RnHvsPQUpgw=)
3: poXwpvkvRg633LYFGk-iWzlj3Rk.roa (hash: W5a6ZZcfOFTcK7kPUq/ojL8WGj2xf0i5VWR/Jf3A3hg=)
4: zi7h7UJYxNeBfgAfyuuPI1OuoNk.roa (hash: FGz1x4BgJx0vMr4BEPiY/HKABSWRvFlGzY+wA/fT1Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:38:73:4a:94:1e:b0:11:66:f4:2a:69:26:59:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25bbed0bff7ffeab67f302b411a00701854a6c30
Validity
Not Before: Nov 4 15:00:28 2025 GMT
Not After : Nov 5 15:00:28 2025 GMT
Subject: CN=ab681ac2a6261a9153ecfeb9346f84a40a893fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:8f:9a:e8:24:fc:b5:48:67:06:49:6b:8e:
59:9b:87:9c:5e:95:e2:53:4b:d2:55:74:8c:e9:43:
77:62:c6:e0:b0:3b:22:47:61:9e:1a:69:4d:b8:8b:
3a:49:ff:fb:98:ad:ed:d3:46:de:df:e0:24:fd:2d:
b3:65:3d:d8:e5:7d:44:63:54:4f:a9:9a:80:fd:3c:
11:b3:1c:a1:b8:b4:22:6b:9d:70:cf:7f:9f:2f:7f:
e1:a5:75:1e:24:d8:b2:50:4e:d6:22:ee:5e:1b:14:
07:14:a7:33:9d:ae:50:31:1f:d3:98:7f:b9:a5:87:
60:50:3e:22:9c:5a:c3:87:d9:3e:de:7c:ac:6b:c2:
98:15:08:d3:56:1a:d5:8a:b7:0f:6d:eb:be:71:df:
c7:41:77:1e:03:e3:3e:75:78:ec:38:11:3a:e5:de:
b3:26:b0:d1:5f:f2:ee:77:47:58:15:6a:83:7c:06:
d8:3a:dd:ad:6c:28:77:7f:5a:ff:97:70:01:e3:6a:
ba:4e:4a:a0:74:30:41:18:7f:18:6c:9a:0c:42:0b:
8c:07:32:f4:23:38:46:7a:27:f4:3a:a1:3f:08:55:
b2:fd:eb:b9:7c:93:e0:86:24:d1:75:ee:00:c5:63:
80:6c:7a:ad:70:a3:a3:bc:9b:76:7c:dc:6f:84:57:
a7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:68:1A:C2:A6:26:1A:91:53:EC:FE:B9:34:6F:84:A4:0A:89:3F:A3
X509v3 Authority Key Identifier:
keyid:25:BB:ED:0B:FF:7F:FE:AB:67:F3:02:B4:11:A0:07:01:85:4A:6C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JbvtC_9__qtn8wK0EaAHAYVKbDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3b9aff-f00d-4187-af94-5717b4544237/1/JbvtC_9__qtn8wK0EaAHAYVKbDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:82:3d:da:31:cd:e3:1c:87:2e:a4:26:15:72:9f:0d:2b:f4:
ee:4e:d2:75:a5:27:cd:ca:74:25:d7:6b:93:19:e6:4e:26:1f:
7c:a4:51:c0:09:1f:61:1a:ca:a2:8a:dd:d5:a6:60:23:33:18:
a6:87:d4:2d:17:59:38:2e:07:1c:80:53:ab:65:86:f3:70:18:
41:8c:01:46:df:76:91:76:f0:a9:9a:e5:7a:9f:d9:ab:b8:43:
35:41:19:b3:87:58:31:63:93:cf:43:dc:4a:f3:12:52:4e:4b:
9f:93:3a:0f:0b:80:19:1c:d1:51:b1:eb:66:c5:2e:2b:6a:bb:
79:cb:a3:bc:f0:4a:3e:d0:01:ea:0a:43:6c:5f:85:4c:1a:97:
4f:73:6d:b7:ef:1c:2e:e2:a2:20:f2:80:71:f1:d8:58:2c:39:
d0:68:e2:3f:a2:eb:34:11:6b:eb:45:a7:e3:b4:5b:c7:e3:33:
7d:29:c3:0e:59:f2:f7:3f:e4:ae:1c:ce:93:95:41:ce:e7:9f:
ec:41:2c:56:a9:00:85:01:cf:ea:8c:a7:72:49:1a:84:66:fa:
f7:fe:d9:ab:dd:e4:e8:ab:32:4c:82:58:cc:a6:98:e3:92:74:
fd:22:c5:25:56:69:bc:cc:5b:08:77:c2:10:04:ca:96:a7:17:
31:56:a0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:44:45 2025 by rpki-client