Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier: vGhQD4o+Jd6Ym5ey+HbGdN2SU/LKGUUO6w19DZbhFwA=
Subject key identifier: 59:E7:DE:2F:99:D6:58:36:8F:AF:B8:B1:8A:F8:C5:90:1C:26:B5:28
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 019A4EF3FA0FEE86E5A6EA07621643A01AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number: 0DF4
Signing time: Tue 04 Nov 2025 13:00:03 +0000
Manifest this update: Tue 04 Nov 2025 13:00:03 +0000
Manifest next update: Wed 05 Nov 2025 13:00:03 +0000
Files and hashes: 1: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: VfIiROePn7hEnNPFi/c/WvGtQO33ERzeqR8QdsYZUZs=)
2: yo4e6Dd_pcrThs4Ucnd01TxRwfY.roa (hash: zRJvfuooLD1ukObnKFMb0zFwDQ9keCDuprZkYYzC4qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f3:fa:0f:ee:86:e5:a6:ea:07:62:16:43:a0:1a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: Nov 4 13:00:03 2025 GMT
Not After : Nov 5 13:00:03 2025 GMT
Subject: CN=59e7de2f99d658368fafb8b18af8c5901c26b528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:d9:4e:ad:2a:c9:ee:ff:58:dc:3e:14:89:
a6:e5:50:8d:df:d3:a7:3e:62:81:37:5d:90:b9:b4:
36:77:b2:71:dd:ea:9c:bd:46:be:95:72:ef:f5:e1:
33:6f:6b:62:68:15:f6:76:21:91:68:aa:59:e3:8a:
1e:85:7e:60:9f:84:26:86:44:ef:be:34:93:43:6e:
cb:d5:1a:40:ec:62:7b:5f:62:4f:af:82:e1:62:ae:
11:6e:51:13:0c:1a:82:8b:9f:f6:90:e4:bb:33:fc:
f7:b7:85:c3:55:17:24:fb:f6:96:21:cc:0b:84:41:
2f:27:ac:07:5e:7f:85:72:3d:0d:4c:ea:fb:28:5b:
8d:85:21:d5:51:09:44:b9:23:a1:f8:aa:94:4e:49:
b8:a1:d1:2e:67:5f:f8:5e:f2:49:b8:63:44:1e:d5:
f9:7d:6e:cb:99:3b:14:bc:f4:c8:5b:fd:c4:fe:5c:
27:36:fd:01:1d:74:f5:df:4d:c0:c3:1d:54:e8:01:
f1:37:58:c3:7e:7f:e3:90:27:f4:03:a1:cb:c2:ad:
4b:61:14:af:ef:0c:68:1a:10:aa:ea:08:80:c1:cd:
8b:f1:de:f1:cf:da:71:d6:86:4b:2f:67:5e:40:e9:
ee:61:56:81:c7:04:83:e3:49:eb:1b:e8:bb:ec:a1:
bb:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E7:DE:2F:99:D6:58:36:8F:AF:B8:B1:8A:F8:C5:90:1C:26:B5:28
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:26:42:f3:ee:8c:7d:a6:9a:b1:a0:39:11:e1:e2:03:29:f0:
ab:8b:94:13:5e:cc:10:89:3e:ca:64:1f:5c:7f:7e:b0:16:00:
2e:cf:9d:c9:92:50:44:67:ba:98:97:4e:88:19:bf:54:66:3d:
1e:79:71:8a:52:ca:ec:4a:dc:3b:17:87:f4:91:54:ad:dd:df:
66:aa:73:9a:f9:92:61:e3:7f:8c:62:79:06:71:b6:31:b4:23:
05:9f:7f:26:6a:50:61:63:1e:c6:04:45:c7:24:cd:0a:80:d2:
24:55:48:3c:9a:c0:09:33:04:8c:43:14:53:55:db:f4:d3:9f:
65:fb:30:0b:6d:9c:25:09:25:9d:67:74:65:de:f0:a1:35:72:
6d:e8:97:ee:6a:98:fa:ce:7d:2c:16:5e:8c:97:f0:35:92:f4:
a9:84:79:00:0b:15:b6:52:1e:75:06:06:e1:59:dc:24:fb:63:
e3:3b:8a:53:a5:f4:0e:80:c5:2a:fd:bc:13:7f:25:fa:5d:12:
ee:f4:12:ff:50:07:ef:9a:e8:26:e8:85:69:0c:f5:a9:73:6c:
35:13:f6:53:4a:53:14:b4:c4:9d:ea:ce:7d:d4:b9:a0:ec:ac:
7a:f7:48:49:72:3d:92:26:c6:7c:bb:99:f6:a3:d8:2f:32:ae:
c5:04:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:38:11 2025 by rpki-client