Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
File: Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft (raw, json)
Hash identifier: H50HSMkVFpjuCZoqbs6nf121bDTBzxP3wq4j/lWGQYI=
Subject key identifier: 42:C9:7F:77:F0:3C:8B:40:74:2D:EB:C1:28:3E:0E:6B:B2:8D:8C:48
Authority key identifier: 26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
Certificate issuer: /CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Certificate serial: 019A4FD08316F476103836BF3CF0EC86FC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
Manifest number: 093E
Signing time: Tue 04 Nov 2025 17:00:56 +0000
Manifest this update: Tue 04 Nov 2025 17:00:56 +0000
Manifest next update: Wed 05 Nov 2025 17:00:56 +0000
Files and hashes: 1: Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl (hash: uvr6GWrcXnmWeeqXrhu5dombP8hYuIbD5E0FYMxg/NE=)
2: ajGVT2wMT_DA-qwpbPbVP8c_jy0.roa (hash: GrnSfoc+sA7GUobf1ORT86tQoZJGPO6xDsTsTxwitnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:83:16:f4:76:10:38:36:bf:3c:f0:ec:86:fc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Validity
Not Before: Nov 4 17:00:56 2025 GMT
Not After : Nov 5 17:00:56 2025 GMT
Subject: CN=42c97f77f03c8b40742debc1283e0e6bb28d8c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:38:9a:47:68:dd:df:9c:bd:b7:a8:0b:fa:
3f:61:ba:ca:fd:86:40:f5:c2:73:ee:db:e5:84:78:
0d:65:57:4d:ea:0c:67:f2:53:cd:aa:12:9d:1c:66:
ce:06:9a:66:54:0f:c8:ad:6d:a1:ab:3e:31:3e:67:
74:09:82:43:bc:c1:0f:70:75:4c:ca:58:73:ea:5a:
8d:71:ab:8d:0f:b0:5c:c2:79:24:12:6b:be:c2:29:
9f:33:bd:de:cc:37:8a:e6:53:74:c1:61:a8:71:ef:
c3:1d:f1:2e:18:54:50:4f:1e:42:6d:99:61:9a:04:
64:ad:e4:47:3e:db:1f:78:87:f6:ca:af:e2:bd:70:
8d:a8:ed:a9:db:91:43:3e:d5:48:c2:57:65:84:72:
72:7c:69:cc:1f:eb:de:48:be:b8:1c:06:a7:70:1d:
86:de:4f:60:b3:df:b9:3e:cf:a8:0a:3f:13:b2:85:
30:fb:43:01:be:a0:83:5a:cf:c3:05:2f:0d:83:7b:
30:2a:82:24:dd:a2:af:32:d1:9b:2e:f4:83:d0:da:
c4:a7:2a:23:91:4a:77:ec:c9:0c:d3:d0:a1:18:f5:
14:59:2d:4b:a6:78:59:90:54:6c:7a:41:98:f2:cf:
cc:22:9f:6f:c7:3c:99:ed:ec:ae:ce:98:fa:55:c0:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C9:7F:77:F0:3C:8B:40:74:2D:EB:C1:28:3E:0E:6B:B2:8D:8C:48
X509v3 Authority Key Identifier:
keyid:26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:90:a9:dd:44:64:74:7f:ba:da:90:fb:a5:94:ce:8c:12:3c:
22:44:5e:dc:8e:44:9f:56:75:1b:d1:dc:24:87:c2:e4:a0:76:
ed:11:29:2e:c1:68:30:69:0d:b3:30:fe:05:92:ca:df:fb:c8:
74:47:e8:44:58:e1:55:7a:99:b5:00:8e:c2:69:38:62:ec:ac:
fa:c3:97:60:f6:8d:ec:99:53:8b:33:ca:88:70:05:50:29:a7:
dd:43:9a:9c:bf:f9:75:2c:3a:6f:c6:b5:52:a1:b2:cb:54:e3:
84:e9:7a:c9:c3:aa:1f:fc:86:f2:fd:0d:aa:0e:7d:52:4b:dc:
0b:dc:da:f9:03:cb:66:26:39:81:3a:e8:d9:86:77:e3:cd:7f:
ac:d3:a6:dd:28:ef:89:a4:fb:c2:6a:5c:b5:35:ce:f9:78:90:
62:69:17:02:96:05:dc:e8:b9:69:04:e7:83:8c:44:52:fc:0a:
8c:ba:f1:e0:88:e6:f1:cd:42:28:9f:02:79:2e:86:79:ba:65:
73:c8:b5:e5:9b:19:23:68:89:9b:28:3e:8a:cf:d6:f4:c6:14:
06:d6:af:9e:ec:06:ab:16:7e:2c:80:3f:2c:4a:a1:d7:68:be:
14:ac:b7:e2:6d:1e:e7:22:05:d7:e8:4a:ee:52:0f:92:50:e8:
29:91:3c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:06:05 2025 by rpki-client