Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
File: JvFwsZuX7hfecyobaK4iuo5fVuQ.mft (raw, json)
Hash identifier: b9eiv2oM4pH5PsS+qUuA0BY++/B/VNPTnU96545Yd5g=
Subject key identifier: A2:7E:2E:87:E2:D4:40:80:E2:18:07:51:36:36:6C:AD:72:A8:CE:34
Authority key identifier: 26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
Certificate issuer: /CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Certificate serial: 019A4E4F6BDBF084970B26A58365BCD3F92C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
Manifest number: 09EC
Signing time: Tue 04 Nov 2025 10:00:19 +0000
Manifest this update: Tue 04 Nov 2025 10:00:19 +0000
Manifest next update: Wed 05 Nov 2025 10:00:19 +0000
Files and hashes: 1: JvFwsZuX7hfecyobaK4iuo5fVuQ.crl (hash: dpbZsSilTt4/fVDclNMwfRpuJn55gZpNrVKtLqv7mh4=)
2: RWXc7pnERNYQOvO9AHteTOA-BLs.roa (hash: whYuVMgGb8/hVbcAtfyqAHTJ95yBC0XXSwdfBmwhSDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:6b:db:f0:84:97:0b:26:a5:83:65:bc:d3:f9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f170b19b97ee17de732a1b68ae22ba8e5f56e4
Validity
Not Before: Nov 4 10:00:19 2025 GMT
Not After : Nov 5 10:00:19 2025 GMT
Subject: CN=a27e2e87e2d44080e218075136366cad72a8ce34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:96:23:0d:4b:d2:e9:77:ea:eb:e2:d0:a9:
09:6a:19:45:72:dc:ac:a0:16:71:b0:44:53:ff:87:
63:91:8d:90:59:82:bc:5e:ab:2f:dc:78:77:f5:d4:
1e:47:8f:d7:4e:4e:b0:c6:87:de:9e:39:c7:fb:d1:
45:a1:4a:08:85:71:3a:8b:56:88:21:11:bb:1f:b7:
a6:ae:4f:75:d3:68:ba:df:73:2f:58:74:11:97:b8:
cc:bd:7a:4d:4c:ea:88:11:3e:08:d0:83:a3:45:21:
2a:e5:eb:b6:9b:a6:b2:42:52:59:2b:9b:0d:12:30:
88:78:1b:01:39:ff:9c:6d:86:1e:35:c8:b2:56:d8:
32:d0:db:52:1f:2b:56:f6:ca:50:f0:03:5d:c2:26:
c7:b4:83:9c:e1:6e:dd:fd:87:72:ff:ed:58:ad:77:
eb:04:75:1d:a0:64:db:a2:1d:c2:d2:b0:d4:26:77:
f7:47:30:26:a2:a2:ca:8c:6c:e7:12:1d:74:a1:93:
9a:d9:c4:87:b3:96:75:c5:15:e0:64:3c:8f:36:e2:
0d:73:c5:73:76:c2:cd:dc:94:e1:7d:84:c5:8c:eb:
5b:00:45:05:65:8f:37:53:b1:a6:1d:39:f8:16:b2:
33:c3:ec:c4:3a:69:d8:7a:c1:9d:88:97:16:b8:ac:
58:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7E:2E:87:E2:D4:40:80:E2:18:07:51:36:36:6C:AD:72:A8:CE:34
X509v3 Authority Key Identifier:
keyid:26:F1:70:B1:9B:97:EE:17:DE:73:2A:1B:68:AE:22:BA:8E:5F:56:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvFwsZuX7hfecyobaK4iuo5fVuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2c67ed-8d41-4f9f-aded-06676be138fa/1/JvFwsZuX7hfecyobaK4iuo5fVuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3c:b8:4d:36:e6:76:62:dc:50:44:db:1f:ef:f4:89:50:f8:
b7:8e:1c:f8:33:76:10:ea:3d:af:cf:fc:52:04:95:77:59:32:
a9:0e:c8:24:80:e0:b6:d4:bf:03:41:b7:c1:37:43:1e:99:57:
ec:65:fd:f1:9e:42:32:29:4f:a1:0a:37:27:e0:41:af:3e:e8:
d8:54:12:a6:70:6c:3f:c9:af:b6:63:ff:0e:1f:48:6b:95:a1:
df:97:aa:b4:ae:c8:8b:7c:50:9d:47:20:32:cc:06:a1:86:06:
57:23:b4:b3:dc:2b:56:6b:31:53:8e:ab:a3:b1:86:56:32:36:
4d:2b:f4:11:6f:27:36:c1:7d:94:bf:16:95:28:1d:cc:f4:06:
2c:9f:e8:4e:c2:97:b6:8b:76:6d:29:9b:bd:f2:88:e8:7b:66:
4f:c3:34:1f:77:a7:43:f3:fe:91:02:b2:9e:03:04:e9:1f:0c:
6d:0d:a4:df:67:d6:34:81:a5:1a:03:4e:c5:a3:a8:10:e4:a2:
6f:0f:1b:38:11:ee:24:6a:ad:80:fd:b6:93:ac:7f:77:64:64:
d1:63:2c:5e:45:cf:ca:5b:86:ec:aa:18:9b:5b:1d:2c:39:47:
40:81:c5:0f:e7:63:ad:0c:02:87:f9:15:89:91:db:24:10:ef:
65:04:9d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:45:07 2025 by rpki-client