Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
File: JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft (raw, json)
Hash identifier: 5gNBT5iTUH9x5EB+Sa6lXFUavLU7SXdlGjf0K9Nqd+o=
Subject key identifier: E0:9B:9C:8A:6D:D2:0A:20:E2:8F:E8:A0:6B:C7:F0:C7:3C:D1:EC:56
Authority key identifier: 24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
Certificate issuer: /CN=24d26a5146996d220461081072c76396582fca84
Certificate serial: 019A51876B6704B12C4D0CC355F83CE5833D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
Manifest number: 091E
Signing time: Wed 05 Nov 2025 01:00:20 +0000
Manifest this update: Wed 05 Nov 2025 01:00:20 +0000
Manifest next update: Thu 06 Nov 2025 01:00:20 +0000
Files and hashes: 1: JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl (hash: qgSBrdbPK0xKra+0GqVMd03le1hCWBoMHD0M0UesWOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:6b:67:04:b1:2c:4d:0c:c3:55:f8:3c:e5:83:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d26a5146996d220461081072c76396582fca84
Validity
Not Before: Nov 5 01:00:20 2025 GMT
Not After : Nov 6 01:00:20 2025 GMT
Subject: CN=e09b9c8a6dd20a20e28fe8a06bc7f0c73cd1ec56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:29:a4:d5:53:3d:11:64:29:78:b1:ed:f1:
8d:f6:eb:1e:30:b0:2e:b2:f5:4c:ba:93:96:89:c2:
08:b3:1b:ae:76:18:e4:98:ce:f7:83:6b:7c:0c:f7:
91:03:c5:0b:5a:91:70:1a:6a:42:31:2a:49:7e:45:
24:68:a2:a0:4c:a8:95:cd:24:ed:e9:39:18:ae:8b:
d8:de:d4:ef:31:df:ef:c8:8c:98:b8:e3:b2:e8:11:
68:07:09:eb:dd:bc:ae:39:25:ab:b6:8a:a9:5d:e7:
0a:60:3e:50:58:8f:56:34:fe:ad:ed:99:a6:86:15:
c3:a7:9e:98:d7:68:88:d4:d4:9f:99:61:af:18:8b:
ff:ba:9c:a6:80:fd:90:ef:40:ed:fd:06:03:7d:4d:
a8:44:5a:36:c6:e1:5c:b9:2d:88:e5:60:fc:8b:4d:
b0:f9:2c:f3:38:b1:d0:de:9e:df:e2:0a:fa:73:56:
c5:fb:d1:53:8e:2e:40:ef:1c:c7:b8:63:10:ec:95:
69:18:97:71:ea:ac:3b:ab:38:d9:02:49:13:a5:a0:
84:5c:88:94:7d:62:b9:75:26:7a:34:1a:bd:fa:d7:
b9:a7:35:8f:e1:35:0d:38:06:37:f5:8b:3c:87:33:
0c:b6:1e:91:8e:e4:d7:02:b0:a6:36:1a:06:26:72:
64:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9B:9C:8A:6D:D2:0A:20:E2:8F:E8:A0:6B:C7:F0:C7:3C:D1:EC:56
X509v3 Authority Key Identifier:
keyid:24:D2:6A:51:46:99:6D:22:04:61:08:10:72:C7:63:96:58:2F:CA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNJqUUaZbSIEYQgQcsdjllgvyoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/33d248-2341-4c8a-9ffa-5b9896273789/1/JNJqUUaZbSIEYQgQcsdjllgvyoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6b:bc:12:61:a0:5c:77:54:53:51:49:47:94:2c:a7:06:6b:
8d:8a:a1:f7:68:04:70:20:8c:c2:ac:1e:6c:3b:fa:b0:16:f2:
10:3f:e1:03:ee:86:ff:de:0e:03:1a:65:c7:f6:b3:96:09:bd:
ce:d8:ea:04:bb:62:04:9d:95:fd:c6:28:c8:19:90:27:fd:2b:
2e:ca:2f:9f:cb:11:b7:38:e0:24:af:ad:e8:b7:98:7d:6a:e6:
df:f9:a3:2b:b0:fd:81:38:2f:13:16:6d:0a:61:6f:66:09:16:
ef:ac:62:39:aa:b9:07:a9:5a:25:b2:ba:1a:40:90:96:9f:5b:
f0:eb:14:43:1a:69:19:33:b6:e2:af:ec:7c:79:8e:9c:03:e4:
4a:bf:8f:be:dc:d1:4d:86:80:f5:86:ac:60:97:83:19:9a:2b:
00:cf:b3:47:09:0d:71:22:97:58:c0:06:a0:1c:24:cd:dc:c6:
1f:b9:55:c4:36:e8:7a:d3:1a:15:51:9e:0c:79:e4:5a:4e:11:
c7:db:a9:af:ed:4b:d6:89:f8:57:9e:a2:b2:c6:32:4b:39:2b:
48:98:82:d6:75:39:8f:36:08:23:01:b6:ed:54:35:47:e5:73:
e5:e6:5c:8d:bc:fe:0b:44:d5:73:60:df:b6:44:4c:7c:c9:c0:
ae:fd:fa:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh2tnBLEsTQzDVfg85YM9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0ZDI2YTUxNDY5OTZkMjIwNDYxMDgxMDcyYzc2Mzk2NTgy
ZmNhODQwHhcNMjUxMTA1MDEwMDIwWhcNMjUxMTA2MDEwMDIwWjAzMTEwLwYDVQQD
EyhlMDliOWM4YTZkZDIwYTIwZTI4ZmU4YTA2YmM3ZjBjNzNjZDFlYzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwogppNVTPRFkKXix7fGN9useMLAu
svVMupOWicIIsxuudhjkmM73g2t8DPeRA8ULWpFwGmpCMSpJfkUkaKKgTKiVzSTt
6TkYrovY3tTvMd/vyIyYuOOy6BFoBwnr3byuOSWrtoqpXecKYD5QWI9WNP6t7Zmm
hhXDp56Y12iI1NSfmWGvGIv/upymgP2Q70Dt/QYDfU2oRFo2xuFcuS2I5WD8i02w
+SzzOLHQ3p7f4gr6c1bF+9FTji5A7xzHuGMQ7JVpGJdx6qw7qzjZAkkTpaCEXIiU
fWK5dSZ6NBq9+te5pzWP4TUNOAY39Ys8hzMMth6RjuTXArCmNhoGJnJkMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOCbnIpt0gog4o/ooGvH8Mc80exWMB8GA1UdIwQY
MBaAFCTSalFGmW0iBGEIEHLHY5ZYL8qEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zM2QyNDgtMjM0MS00YzhhLTlmZmEt
NWI5ODk2MjczNzg5LzEvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8zM2QyNDgtMjM0MS00YzhhLTlmZmEtNWI5ODk2MjczNzg5
LzEvSk5KcVVVYVpiU0lFWVFnUWNzZGpsbGd2eW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWu8EmGg
XHdUU1FJR5QspwZrjYqh92gEcCCMwqwebDv6sBbyED/hA+6G/94OAxplx/azlgm9
ztjqBLtiBJ2V/cYoyBmQJ/0rLsovn8sRtzjgJK+t6LeYfWrm3/mjK7D9gTgvExZt
CmFvZgkW76xiOaq5B6laJbK6GkCQlp9b8OsUQxppGTO24q/sfHmOnAPkSr+PvtzR
TYaA9YasYJeDGZorAM+zRwkNcSKXWMAGoBwkzdzGH7lVxDboetMaFVGeDHnkWk4R
x9upr+1L1on4V56issYySzkrSJiC1nU5jzYIIwG27VQ1R+Vz5eZcjbz+C0TVc2Df
tkRMfMnArv36+w==
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:39 2025 by rpki-client