Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
File: Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft (raw, json)
Hash identifier: EEWrX0JThSDhuXa3izj1DS2zIDIxu6B0/0x1uK/TIoQ=
Subject key identifier: 39:D0:7B:23:AE:2C:42:25:88:14:2A:C5:BB:89:7B:EC:07:64:B2:AD
Authority key identifier: 26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
Certificate issuer: /CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Certificate serial: 019A51F5DA8B276E6ECD7660325F9D7CCA2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
Manifest number: 0E73
Signing time: Wed 05 Nov 2025 03:00:57 +0000
Manifest this update: Wed 05 Nov 2025 03:00:57 +0000
Manifest next update: Thu 06 Nov 2025 03:00:57 +0000
Files and hashes: 1: 5dtg3LCI8AxcnAadUkHS3_C52GM.roa (hash: Vn0K1zYewV4QvEpEk/45tt1gNO9Z9NhkFkfGztTyMls=)
2: Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl (hash: aJqb0ww4AqZl4+8hsKPgfUE1q4bSaheiTmm9LCYWVc8=)
3: iHyMz7WaIpGFj9IV33M_hAhVH-k.roa (hash: LGMsJh4DFo99zD3c9hWW4b1EKTfexLADtFi5DHUXz6A=)
4: qcTZ9F_MrFUBfQXGS6Pdrvtd3hM.roa (hash: 6Y3o3xfek4OtHUqQEh7Mq+AHRFEDKhceMAsEbUlDjDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:da:8b:27:6e:6e:cd:76:60:32:5f:9d:7c:ca:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26bd5ffbce6bf8707fa3e5967e0d38b455d9d4e1
Validity
Not Before: Nov 5 03:00:57 2025 GMT
Not After : Nov 6 03:00:57 2025 GMT
Subject: CN=39d07b23ae2c422588142ac5bb897bec0764b2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:a7:c5:a2:ec:c0:80:03:c0:48:e7:48:69:
3d:62:5c:9a:f5:07:6d:3f:91:77:a4:55:6d:0b:46:
9f:e9:3f:b5:05:9a:54:4d:1a:6a:cc:1c:97:3a:8d:
aa:8f:99:ad:d0:29:a3:53:90:db:98:9f:4d:bf:f1:
d3:9b:09:65:2f:fd:88:13:b9:00:82:03:e2:8c:21:
7a:a1:91:33:bb:1d:7f:5d:76:87:df:dc:44:82:e1:
a9:79:6f:98:b1:fa:0a:4f:2a:18:83:8d:82:ec:e2:
b3:38:0c:78:41:d9:34:47:40:c9:e1:32:9b:a6:55:
bf:d5:d7:ed:ae:32:ce:06:b4:03:11:c6:39:37:0a:
a7:71:e0:69:c2:4e:d6:f7:ab:a9:8f:5f:9b:21:7f:
6b:12:08:75:aa:de:bf:4d:f4:69:1b:d3:52:89:8c:
ea:34:0a:c0:4b:5e:32:eb:6f:94:2e:31:d8:2a:e3:
9f:ca:57:00:14:bd:50:93:4b:c0:48:17:89:35:99:
c9:8d:31:74:77:4c:bf:55:e8:99:e7:c4:a0:39:b0:
ae:ff:5d:61:5f:4b:f3:a1:5d:ea:53:44:8e:0e:ba:
fc:93:09:b8:1b:46:26:bd:7d:26:df:cd:06:d3:b9:
3b:26:ba:07:c5:c6:c3:e7:ee:00:84:b9:03:06:a0:
33:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D0:7B:23:AE:2C:42:25:88:14:2A:C5:BB:89:7B:EC:07:64:B2:AD
X509v3 Authority Key Identifier:
keyid:26:BD:5F:FB:CE:6B:F8:70:7F:A3:E5:96:7E:0D:38:B4:55:D9:D4:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jr1f-85r-HB_o-WWfg04tFXZ1OE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f498a2-d86d-4c75-bfd3-e8c559c71d66/1/Jr1f-85r-HB_o-WWfg04tFXZ1OE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:52:c2:c1:e3:ca:dc:7e:e0:4f:c5:c6:6e:61:62:7c:94:a6:
20:36:1a:9a:04:7b:fd:0e:f5:9a:63:8f:4c:f5:ce:5d:7a:0c:
1f:90:43:42:f5:72:fd:c6:06:8c:9b:30:a5:38:2d:52:2a:93:
bd:1c:2b:cf:28:57:9d:d1:ac:6d:0f:e3:f0:12:16:d1:61:aa:
8c:02:90:78:1b:8d:d2:33:d5:fb:62:c7:93:b5:70:28:38:37:
7b:49:62:89:c0:d5:d6:55:5d:93:6d:df:4c:fd:bd:d8:4e:ec:
99:a3:d3:b9:4b:ad:3c:fa:85:13:59:fe:5f:31:4d:09:1f:78:
c7:9d:ed:3d:86:c4:b9:86:69:6c:c1:b6:03:f6:e2:27:ce:df:
07:1e:4d:14:af:f2:2e:ac:bc:c0:7d:27:37:78:20:26:90:2d:
9a:60:fa:c7:32:3d:c5:eb:53:90:92:d6:22:10:90:57:10:d5:
aa:d7:29:dd:fa:4f:94:ae:9f:15:79:ce:73:b2:28:20:e2:e3:
5a:11:ce:bf:ed:90:f1:76:52:7c:df:1b:a7:37:5c:96:14:95:
57:b5:b6:15:86:f2:f1:55:2c:ba:2e:01:e8:e1:33:62:0e:8c:
32:1d:6e:39:ca:cb:41:cc:8e:19:15:bb:87:ee:8e:7c:e7:da:
b6:b6:6c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:41 2025 by rpki-client