Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
File: jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft (raw, json)
Hash identifier: Uco+fL/wM+3iPaHw+rrLk0KvwVx71tHAKpXLO/caWzs=
Subject key identifier: 64:02:2E:67:D6:DA:8F:E2:EF:1B:AF:25:5C:7F:37:2A:F7:A4:5C:55
Authority key identifier: 8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
Certificate issuer: /CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Certificate serial: 019A4E4FFE0354798EDDD9CA2F72B492D7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 10:00:56 +0000
Manifest this update: Tue 04 Nov 2025 10:00:56 +0000
Manifest next update: Wed 05 Nov 2025 10:00:56 +0000
Files and hashes: 1: jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl (hash: 02sY0dyN9fxadYjgbIcPlIwzTEsZsFJ8DVJiws/VFq8=)
2: zomoxdAdOPcJkTkRQBtLj8THS7E.roa (hash: HywlERnXGDkjWEHTc4UIBFSfO9/yrJ9UtEQjc3ctIXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:fe:03:54:79:8e:dd:d9:ca:2f:72:b4:92:d7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Validity
Not Before: Nov 4 10:00:56 2025 GMT
Not After : Nov 5 10:00:56 2025 GMT
Subject: CN=64022e67d6da8fe2ef1baf255c7f372af7a45c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d7:73:01:a7:6d:ed:06:97:b1:73:37:f2:08:
ab:80:c7:43:47:7a:f7:3c:13:40:81:db:74:6f:41:
a4:83:3b:05:fd:aa:2b:9a:0d:40:34:3b:c1:85:d7:
44:7b:0d:11:a0:41:94:db:f1:9a:58:5a:bd:36:8c:
5b:fe:3b:94:08:f1:b3:0b:79:38:3c:a5:f1:db:05:
e1:e1:b3:a0:50:fb:58:31:c1:d7:67:20:0c:18:f5:
fc:be:7b:10:d8:0e:e8:c4:aa:37:07:bf:df:0e:db:
c9:66:36:fe:b7:e2:6c:ba:55:83:4e:92:d8:f9:09:
0e:c5:d7:ee:0e:16:be:19:e7:0b:b8:9b:99:9a:b1:
5d:25:15:5c:d4:4a:2e:6a:7c:59:c2:c4:7d:e5:a4:
a0:71:49:c8:02:0b:76:2d:69:fd:fe:e2:ec:13:9a:
c9:1c:d7:c4:8e:7c:f9:ec:91:ae:10:2a:32:6b:c0:
97:fd:5c:55:a0:2c:0b:e9:67:e1:1f:68:b2:9e:96:
2b:0b:77:92:6d:84:6f:28:a5:40:6f:5b:38:41:3e:
f7:a1:0c:88:a2:1f:6c:57:a7:b7:04:3a:ab:3b:48:
3c:1f:f7:a8:b6:8e:1a:80:62:76:a7:d3:c2:ff:f1:
ee:2f:f1:ab:a8:d3:73:c8:c7:4a:41:3e:24:fb:80:
b8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:02:2E:67:D6:DA:8F:E2:EF:1B:AF:25:5C:7F:37:2A:F7:A4:5C:55
X509v3 Authority Key Identifier:
keyid:8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2b:8d:8e:7d:06:f5:48:c0:02:79:06:2f:9b:13:f6:0e:4b:
af:bf:cd:38:f4:eb:63:24:b8:bb:3c:6c:57:8f:18:50:7f:63:
fe:6f:e3:d7:b7:87:55:8c:2f:c9:0f:bd:ef:ae:c9:f2:55:83:
5c:60:0c:31:53:60:a2:ef:b4:c4:70:bc:45:48:53:fb:07:e3:
65:a0:83:86:43:fc:06:eb:36:7c:95:e7:b6:3c:9e:fc:50:b9:
ec:4c:51:97:e2:f3:49:15:93:16:82:65:e4:99:70:a2:34:2b:
23:46:2c:8e:ac:06:20:6d:aa:3a:9e:65:a2:8a:0b:fa:f2:28:
ba:b5:7e:1f:7c:87:d6:de:8d:32:35:b9:76:8d:9e:65:dc:da:
4f:15:72:b8:7f:0a:81:d4:fe:0b:fd:75:f8:96:bc:09:da:29:
ba:15:75:0b:6f:f2:87:55:4c:bc:62:29:e3:b1:84:3b:81:56:
1b:f2:0d:41:72:58:6e:e1:fe:1b:28:e7:e9:82:bf:0c:8d:34:
d4:fb:39:a9:5c:04:66:5d:b9:6a:df:47:33:47:cd:46:3f:22:
a1:d7:c5:c0:2c:15:d3:82:48:cb:87:f1:88:ee:04:c4:32:44:
4c:c0:60:db:c9:ea:75:29:a2:b7:15:f0:a5:4e:a9:45:2e:5c:
a7:e8:1f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:50:57 2025 by rpki-client