Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: m9wi72SzAp5z7BweMlS7+WMLVKXxbrmgCs535x+nzOQ=
Subject key identifier: A6:09:EE:66:3A:94:68:B7:7D:0A:AB:E8:BB:3F:BB:64:98:2B:2A:E2
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 019A5187E1F897A16AC6013DB3C58B24C0C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 169F
Signing time: Wed 05 Nov 2025 01:00:50 +0000
Manifest this update: Wed 05 Nov 2025 01:00:50 +0000
Manifest next update: Thu 06 Nov 2025 01:00:50 +0000
Files and hashes: 1: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: f1YKBq1cM4KW/vEJpdoZRwdx0Zl0zNpp8NtbFebXyb4=)
2: LkSjEtNw7y8FvIXezhAzO7bql6w.roa (hash: XWnh2LDRuVnV3zQSeTuxulNsHgB6C0TJ9AfUsOOpruk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:e1:f8:97:a1:6a:c6:01:3d:b3:c5:8b:24:c0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: Nov 5 01:00:50 2025 GMT
Not After : Nov 6 01:00:50 2025 GMT
Subject: CN=a609ee663a9468b77d0aabe8bb3fbb64982b2ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:50:2d:cf:2b:c5:65:e3:94:fe:f9:15:95:d5:
b0:67:4a:b9:db:7e:cb:fe:77:04:b4:42:e3:47:62:
b5:af:f5:fe:a9:5e:20:56:66:e1:1f:dc:98:ba:85:
18:90:eb:5f:2f:da:57:b7:2b:b7:3a:56:d5:17:0c:
ee:f4:b1:36:35:84:c4:01:d0:f1:75:66:1a:3c:44:
88:33:12:1d:1c:bb:e9:e9:6a:a3:b5:e9:e2:b6:1f:
ed:a4:30:9f:07:cb:12:c6:25:ef:33:32:5b:7d:dc:
9d:10:b2:4d:e0:8c:c6:ba:e8:0c:b9:f2:9e:c5:ec:
b1:5b:a2:01:24:e7:4f:20:34:92:3e:1c:5c:86:71:
97:d9:27:e3:36:20:ec:e4:35:6a:82:a2:29:94:7f:
44:b8:90:b7:25:13:72:4d:74:2f:f7:46:bd:ad:f3:
00:1a:9b:9a:27:dc:41:64:bc:9f:b7:d4:7d:70:44:
32:a3:ae:66:8e:09:17:58:31:53:3b:fb:d8:53:62:
d0:b3:ef:82:40:15:57:82:45:14:8c:1a:43:34:33:
7f:8b:dd:2c:fa:ff:96:c1:42:75:59:c5:f8:94:3c:
94:fd:81:e2:57:4c:cb:bc:f9:38:94:74:e2:9d:04:
e3:50:09:5b:85:78:a4:03:6b:fd:cc:0d:7d:66:ad:
c6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:09:EE:66:3A:94:68:B7:7D:0A:AB:E8:BB:3F:BB:64:98:2B:2A:E2
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:8b:09:b3:2d:5d:41:cc:a1:30:26:1f:c5:19:11:4e:7d:23:
24:c4:59:61:dd:73:98:60:ef:34:4b:95:f1:1c:86:c3:ab:27:
58:7a:e0:8e:b1:d2:0c:45:59:6f:14:a8:64:39:5a:b8:ae:05:
1f:a2:a4:44:5d:9f:71:14:2d:5e:34:af:ec:51:83:2a:86:db:
4b:d2:b9:b4:e1:c1:bf:71:f4:fa:51:31:a3:49:3f:78:43:a0:
eb:02:c1:10:1d:86:ce:8c:a3:e1:95:30:9e:1a:21:2c:1c:49:
59:92:a1:72:13:e4:1d:a3:36:74:a5:e6:c1:93:b9:9c:55:2b:
39:28:2e:21:e0:f5:49:5a:a3:8b:4d:90:41:6c:81:8f:10:b1:
8e:11:c3:b4:6e:6b:5e:fb:fe:43:b6:9c:7f:79:9f:12:8d:8f:
9e:8c:2f:f6:91:0c:39:6f:f7:d8:32:45:46:8b:5a:a6:f6:29:
29:ff:9b:54:e6:94:0f:fe:e4:53:95:e1:b1:60:06:f7:16:05:
3d:32:e1:04:9f:62:8a:d7:22:3e:48:55:c5:8f:61:85:17:53:
35:96:0b:bd:6a:e0:d5:4e:1a:1c:6a:67:25:57:7c:4b:3e:45:
69:08:7b:00:72:4d:74:c2:19:46:be:19:cd:8f:de:7b:48:c4:
19:67:9f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:11:58 2025 by rpki-client