Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
File: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft (raw, json)
Hash identifier: 5TwcsYGBz9orznwtvEUUAUKRjp2pL1KQgZFBYV2X1D4=
Subject key identifier: B6:E2:68:61:3A:4A:31:99:01:46:CB:32:A9:3E:8A:A4:C5:59:B5:16
Authority key identifier: 24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
Certificate issuer: /CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Certificate serial: 019A4E18776B6F942A4AC342B5134EDA662B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
Manifest number: 050B
Signing time: Tue 04 Nov 2025 09:00:17 +0000
Manifest this update: Tue 04 Nov 2025 09:00:17 +0000
Manifest next update: Wed 05 Nov 2025 09:00:17 +0000
Files and hashes: 1: JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl (hash: j9t5sWqYYkKceCtk9LCHYgnvUR23o1C3qQY9W95NVnA=)
2: Q9WbsU5WLEBh2f38P2PGkPWP_HU.roa (hash: WTO6N136wAT9bdE+8AHFBftVkmxQHl/oBzZ0du4NvZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:77:6b:6f:94:2a:4a:c3:42:b5:13:4e:da:66:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e1c5110e0e90302e47012ff5c82303a4661ade
Validity
Not Before: Nov 4 09:00:17 2025 GMT
Not After : Nov 5 09:00:17 2025 GMT
Subject: CN=b6e268613a4a31990146cb32a93e8aa4c559b516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a9:a1:71:cd:6d:54:63:cc:30:7f:1b:10:13:
0f:b1:e8:e4:bb:13:91:50:d9:15:17:cd:7d:45:37:
36:2d:d9:5e:93:a5:6c:96:ea:45:39:ba:26:75:49:
9b:9b:91:1b:91:89:ab:ab:c0:ad:ac:15:7e:b1:f9:
12:39:d8:88:85:fc:3c:1e:0a:71:9f:5c:e6:9e:3e:
3e:ee:76:ee:97:20:ab:bc:e5:5d:3d:ff:e0:1b:a8:
01:55:20:79:d2:08:33:13:7f:57:e8:83:0c:26:8d:
5c:17:5b:74:20:60:6f:15:b0:79:90:df:77:64:93:
aa:dd:ee:42:cf:8e:21:09:26:54:11:80:7b:08:75:
36:f5:47:10:e1:7a:6c:f9:66:db:8a:2f:9d:b4:71:
db:59:33:21:b1:a1:99:8e:d5:93:8f:de:a0:e9:86:
ed:62:e0:a4:e2:a6:d2:32:d5:42:6d:33:94:3b:a7:
dd:9d:0a:a4:0e:6b:b5:d2:fc:30:43:c1:7c:c5:68:
fa:75:9f:d4:b6:48:f1:2d:7a:89:34:1c:ee:94:b3:
f1:a2:ad:bf:58:1f:0a:17:62:e2:69:e8:65:e0:d4:
1d:53:08:45:3d:9a:28:95:ad:ba:d9:50:d5:0b:f4:
a7:99:84:ed:68:54:50:d2:af:65:d6:9a:2e:c7:7c:
d8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E2:68:61:3A:4A:31:99:01:46:CB:32:A9:3E:8A:A4:C5:59:B5:16
X509v3 Authority Key Identifier:
keyid:24:E1:C5:11:0E:0E:90:30:2E:47:01:2F:F5:C8:23:03:A4:66:1A:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b3bc70-5db0-47b9-b696-67da5409116f/1/JOHFEQ4OkDAuRwEv9cgjA6RmGt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a2:80:27:4c:5a:7c:c0:e3:5e:cd:5f:85:f5:cd:66:97:9b:
02:44:0c:70:b8:03:11:20:3c:66:95:95:d4:e8:6e:93:ea:b3:
06:3a:f9:e8:4d:f3:ba:b3:e0:42:38:55:88:dc:c6:49:cf:28:
92:4c:0e:a2:41:98:25:1d:0d:00:a5:fc:cd:f2:b5:56:20:a8:
47:51:6e:d6:b8:10:b2:fb:50:8a:4c:27:09:5e:e9:d6:20:cb:
30:5c:29:0c:77:90:0e:78:67:c3:fe:06:5f:8b:51:f6:16:a3:
6d:e6:4e:3d:84:23:97:f8:56:b1:f7:2a:b7:af:07:5f:93:a1:
21:af:a3:c3:a4:92:40:38:32:b6:9e:61:da:92:3c:52:69:90:
32:5f:c4:13:88:fb:81:a7:7c:93:b5:e6:be:e9:0a:02:d2:78:
2b:26:6c:0c:fd:a9:fc:b9:da:40:4b:7b:af:74:90:20:e2:97:
c6:d9:98:73:08:97:c0:f7:4b:a1:b6:6f:41:a3:a6:0f:77:72:
43:c0:54:2c:c4:41:1d:28:f9:0d:7e:e2:02:0f:d4:df:65:42:
f3:a0:89:3a:87:a8:f8:3a:18:e6:df:26:d5:1b:00:bd:56:dc:
13:54:b9:8f:b2:aa:32:51:93:bb:c5:82:ca:1f:57:47:a8:0b:
18:01:a6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:23:43 2025 by rpki-client