Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
File: JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft (raw, json)
Hash identifier: zawtYfRTrO3sfs6tvXkK7qex+AjuPAucF80r7DlvcKs=
Subject key identifier: A0:BA:4E:69:F1:6A:02:35:E4:BF:F4:8F:0E:04:EA:C9:76:DB:90:27
Authority key identifier: 24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
Certificate issuer: /CN=24d906b90c1d856673e414f39805be583d230ba7
Certificate serial: 019A4E4F453D031D89F769437F95C21A7F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
Manifest number: 08C7
Signing time: Tue 04 Nov 2025 10:00:09 +0000
Manifest this update: Tue 04 Nov 2025 10:00:09 +0000
Manifest next update: Wed 05 Nov 2025 10:00:09 +0000
Files and hashes: 1: JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl (hash: Gs3s8lFsdRx30KOT6Ir2lq+cX2CdQeIkSs3kNr/1CX4=)
2: tH5X1sIrBGaWrxtJcDhQJ2X9uHg.roa (hash: DV2Ywdf2IF4IJkXNNJ6gs2p5s2GMK9q52zFH8lpr0iI=)
3: wpydopt6VUah6RQMZrzjsU6WoPc.roa (hash: cp20Yibn6t1V4VomO6+maPrzeM92DrtR/BD0ISnTpAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:45:3d:03:1d:89:f7:69:43:7f:95:c2:1a:7f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d906b90c1d856673e414f39805be583d230ba7
Validity
Not Before: Nov 4 10:00:09 2025 GMT
Not After : Nov 5 10:00:09 2025 GMT
Subject: CN=a0ba4e69f16a0235e4bff48f0e04eac976db9027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:eb:1c:06:b7:ca:ca:c5:68:09:65:0a:4c:ba:
ed:ee:63:02:54:9c:44:d0:d5:92:76:44:49:f6:38:
ed:5d:94:eb:72:cd:d6:d0:07:95:7c:bb:93:9e:4d:
cf:91:f6:27:9b:31:58:67:d1:7a:8a:a3:28:13:61:
52:e4:a2:77:e6:2c:48:85:fb:65:94:f5:ed:02:11:
bc:49:2c:34:b0:6e:ec:4b:63:da:28:e7:0f:1c:92:
db:af:18:8a:bd:2a:68:5a:56:d4:c7:dc:28:54:d1:
9f:c7:93:ba:4a:ac:7b:e6:43:13:bb:00:19:db:06:
c7:64:75:77:f4:74:79:a3:5b:96:42:9a:6d:33:64:
9f:82:14:3e:58:f4:76:7f:98:07:58:2f:c7:a1:07:
a5:3b:b5:fe:00:ba:ba:98:2c:be:8e:44:25:02:b0:
9c:57:88:83:19:29:f8:00:6f:ae:78:9a:eb:01:c8:
0d:b8:8a:b0:0b:ab:3b:20:04:5e:9b:64:f1:1f:33:
a4:dd:fe:ce:2b:b8:e3:8e:2d:51:22:0f:3c:d4:f2:
66:5a:12:c5:5a:3f:65:c0:00:e9:7b:39:90:fa:e1:
28:4f:67:b4:38:ba:6b:8f:79:b0:7b:82:5b:db:39:
35:a2:66:9d:80:12:b8:65:df:5e:2c:88:32:09:30:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BA:4E:69:F1:6A:02:35:E4:BF:F4:8F:0E:04:EA:C9:76:DB:90:27
X509v3 Authority Key Identifier:
keyid:24:D9:06:B9:0C:1D:85:66:73:E4:14:F3:98:05:BE:58:3D:23:0B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNkGuQwdhWZz5BTzmAW-WD0jC6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b53db1-1e0e-44d0-a131-4fc28e5098c7/1/JNkGuQwdhWZz5BTzmAW-WD0jC6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:78:ac:58:d5:bc:cf:ea:76:42:b2:fa:89:2a:c0:fc:e4:01:
69:25:0a:2f:f9:6a:62:4c:e6:55:28:bf:2b:b7:fe:0c:17:08:
13:47:36:8d:f1:7d:9a:99:d4:ca:84:12:e4:28:5e:36:7a:a9:
32:20:47:9f:b3:df:fd:b4:24:26:80:10:7a:81:29:17:c1:d7:
bd:b1:e0:f4:2f:ce:13:12:5c:72:47:1c:0b:26:d8:ca:1a:60:
41:6f:94:55:cb:eb:73:85:c2:5d:6a:f6:7e:01:07:02:60:e0:
89:81:b2:69:e0:cc:31:72:41:9b:c2:b6:58:28:00:1b:a6:c9:
d9:ce:d1:70:83:5d:ab:d6:7f:81:21:5d:b1:44:a6:0d:cc:2d:
a3:e0:8d:70:14:c5:91:83:ec:f0:b1:8e:44:0a:dc:64:29:99:
b0:2e:82:ee:08:7d:2c:8f:9c:37:89:f0:a2:d7:3a:49:cf:b3:
44:8c:5c:93:36:29:05:5a:46:b4:52:12:46:4d:d5:b3:c1:95:
e0:28:4d:c3:07:31:9d:77:0b:c0:6d:ab:2b:23:bd:48:d0:7b:
06:b5:05:1a:62:6c:8e:53:1d:64:b1:7c:47:38:69:4a:42:55:
3f:63:10:ac:6c:30:d7:f2:09:01:41:86:ae:bf:52:f0:f4:c7:
fc:74:68:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:23 2025 by rpki-client