Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
File: JKMLYNI9dOgia81eFdxb93CtMH4.mft (raw, json)
Hash identifier: gPdHJzhQ00oXwiKhMm5xlmiE/S7lV/KjMhwaBGsTui0=
Subject key identifier: 55:78:C0:49:94:45:04:9F:FF:C8:03:D7:F3:DB:F1:DD:7D:82:50:6E
Authority key identifier: 24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
Certificate issuer: /CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Certificate serial: 019A4EF4421E95639DC5C36E4B53C586B150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:21 +0000
Manifest this update: Tue 04 Nov 2025 13:00:21 +0000
Manifest next update: Wed 05 Nov 2025 13:00:21 +0000
Files and hashes: 1: Cz3faV4D4mPRJzrOkBuxrQDfxkU.roa (hash: kLJ19pvLEfn+3aegz32dVtHoMMSBCouRhdwvdRrL0So=)
2: JKMLYNI9dOgia81eFdxb93CtMH4.crl (hash: Tzqf/dgvm/nCIsXSNGkwC4j6GEJ1+3gS1TJeIq2I6dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:42:1e:95:63:9d:c5:c3:6e:4b:53:c5:86:b1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a30b60d23d74e8226bcd5e15dc5bf770ad307e
Validity
Not Before: Nov 4 13:00:21 2025 GMT
Not After : Nov 5 13:00:21 2025 GMT
Subject: CN=5578c0499445049fffc803d7f3dbf1dd7d82506e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:5b:0d:35:b5:30:b3:5f:b7:ae:09:fd:c0:
78:df:3b:b6:19:98:1f:cd:d3:05:ca:81:dc:06:a4:
03:29:d9:b0:92:75:07:a9:cd:6d:15:0d:c9:ab:f4:
aa:3b:71:4d:01:73:87:f0:ae:c7:61:62:0d:4e:ae:
32:93:c4:8a:b8:43:63:99:c9:06:a3:c1:e4:bf:54:
2e:29:03:64:52:05:da:d7:c9:90:2a:f2:61:be:f9:
5a:f5:94:eb:d9:dd:4c:13:91:de:bf:a1:9d:88:10:
65:45:00:82:2d:b0:19:0f:19:ca:52:56:b9:19:be:
0e:b9:28:44:2e:7a:6b:e1:97:1d:a8:4e:9c:32:e4:
67:1b:1d:3b:78:cc:84:bf:8a:78:52:b8:79:da:38:
ea:6a:84:5b:68:75:cd:61:68:9b:85:0c:0a:d7:ff:
76:b2:c6:2c:be:63:38:e9:3b:78:9d:b2:1b:68:f6:
23:e1:8f:44:63:f8:19:ab:82:55:7f:91:d1:9d:0c:
c4:67:a9:e8:a8:e0:8e:c1:cb:da:a6:b1:03:b9:02:
e4:35:ec:23:56:43:35:1a:a2:5e:87:18:b6:30:ee:
0c:44:59:25:fc:41:68:87:d0:fa:26:93:1e:39:60:
93:b7:5b:83:67:a1:f0:e8:b8:2a:24:cc:a3:dc:db:
5f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:78:C0:49:94:45:04:9F:FF:C8:03:D7:F3:DB:F1:DD:7D:82:50:6E
X509v3 Authority Key Identifier:
keyid:24:A3:0B:60:D2:3D:74:E8:22:6B:CD:5E:15:DC:5B:F7:70:AD:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKMLYNI9dOgia81eFdxb93CtMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6a3d3e-25fd-42ff-a5fb-8b3bf8bf98eb/1/JKMLYNI9dOgia81eFdxb93CtMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:7b:f5:d4:fe:49:20:1d:ff:5b:52:e9:e9:a9:46:4f:62:3d:
2b:5b:8d:0a:82:8a:26:9c:0c:87:8c:ac:86:8b:76:31:1a:92:
fa:10:30:25:91:66:ee:39:1f:2b:66:a5:4d:06:5c:6e:09:6c:
cd:7b:ab:d6:ad:76:b6:58:2a:b3:a5:f5:29:a6:4e:ce:71:bf:
6f:2a:5c:6b:ea:97:5c:83:01:dc:32:cf:af:58:f4:cc:30:a0:
26:c5:25:0e:e6:44:e1:ae:fd:4a:63:83:2d:48:a3:b5:26:d2:
56:57:22:a3:cb:d0:32:d2:71:84:96:98:1c:b7:d5:68:35:30:
f7:50:32:e3:ca:af:67:26:92:57:73:4f:62:8a:fa:b5:37:35:
37:dc:40:50:27:93:da:ab:cd:00:55:39:46:b1:9d:3c:fa:f4:
f3:c2:0e:b8:4f:52:7c:80:c1:52:2e:e0:51:0c:06:16:75:7d:
24:a6:39:4a:f7:c4:a7:b8:c9:66:48:c5:49:1c:e8:5c:4c:00:
b7:b9:7e:32:0c:32:c8:24:54:34:c1:68:4e:b3:f7:3a:9c:c8:
cc:b2:04:c7:9a:4d:20:b0:a8:c8:a1:5f:42:9c:d7:99:7f:ea:
33:90:01:df:25:da:f0:77:88:ec:03:88:d3:a3:44:69:15:46:
b0:3d:c3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:26:22 2025 by rpki-client