Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
File: JlZJaRWR5VKhSIlDnP9w3lbAjak.mft (raw, json)
Hash identifier: IP1cCi17zeXyokHuCZ2uEwFjqevLerulbL5KdAEG+4M=
Subject key identifier: 63:DC:0A:D9:61:B8:7E:67:9B:1F:91:2C:A3:FF:1A:F3:B5:CE:76:9D
Authority key identifier: 26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
Certificate issuer: /CN=265649691591e552a14889439cff70de56c08da9
Certificate serial: 019A5BD4D03AA4AD78F64C2213AB2EFE5B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
Manifest number: 013F
Signing time: Fri 07 Nov 2025 01:01:04 +0000
Manifest this update: Fri 07 Nov 2025 01:01:04 +0000
Manifest next update: Sat 08 Nov 2025 01:01:04 +0000
Files and hashes: 1: JlZJaRWR5VKhSIlDnP9w3lbAjak.crl (hash: 2FqHAPNBdKnvQwQ+Z9sc+rTyQKva9Aozd1hKzSeM7OU=)
2: pZiY96ECGZ3enErASsqWJWksnRo.roa (hash: MEeiZ1S6byAdXpmL3x1KNRz/NrRtbh43pA6SZ1saEAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5b:d4:d0:3a:a4:ad:78:f6:4c:22:13:ab:2e:fe:5b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265649691591e552a14889439cff70de56c08da9
Validity
Not Before: Nov 7 01:01:04 2025 GMT
Not After : Nov 8 01:01:04 2025 GMT
Subject: CN=63dc0ad961b87e679b1f912ca3ff1af3b5ce769d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:6d:73:03:d3:02:7f:55:5a:41:bb:0a:b9:
25:19:e2:90:13:08:e1:41:09:ed:45:b1:b7:66:eb:
03:2e:07:09:16:8b:cf:3f:cb:27:a4:1e:c4:c8:bd:
17:e1:3a:2b:96:d2:d5:ee:e5:e4:b5:64:ed:a4:ba:
0c:bb:63:d5:98:c2:a9:e1:aa:89:86:25:e8:bd:53:
33:43:9d:f0:cb:59:ce:f2:fa:ab:ff:83:53:fb:1e:
57:0d:e1:f3:3b:fc:45:a1:be:2a:a5:1e:6c:fd:bb:
94:b1:45:ee:af:af:9b:5d:b0:69:93:60:4b:51:6a:
7f:c1:57:54:68:fc:7c:d6:07:c4:a4:f1:5a:0b:a6:
9f:1e:a0:d2:c3:08:93:ec:7c:8a:45:04:af:e8:82:
4a:2c:f1:87:23:a1:bc:a1:77:45:63:d8:75:0f:c8:
83:36:20:ae:7b:59:18:30:4a:62:2a:bb:7e:24:8e:
a8:9d:32:36:49:9b:d8:38:50:67:de:04:0f:81:33:
b4:92:6d:62:39:93:00:81:6a:7b:19:95:d1:23:a2:
da:d4:22:ed:58:d8:b2:1e:41:a6:9d:5e:d6:7b:dc:
e1:0e:cd:df:a1:d9:43:00:18:b8:82:f7:ca:b4:7f:
41:30:2d:ea:4e:1d:e3:5f:0c:22:81:64:8b:5d:23:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DC:0A:D9:61:B8:7E:67:9B:1F:91:2C:A3:FF:1A:F3:B5:CE:76:9D
X509v3 Authority Key Identifier:
keyid:26:56:49:69:15:91:E5:52:A1:48:89:43:9C:FF:70:DE:56:C0:8D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlZJaRWR5VKhSIlDnP9w3lbAjak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/831c79-a88d-41e6-b0a7-1210094a48a3/1/JlZJaRWR5VKhSIlDnP9w3lbAjak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:21:73:3e:29:80:cb:58:78:df:ad:dc:86:2c:8f:f8:2c:7f:
69:e2:56:50:71:40:e0:bd:49:88:37:59:e6:f8:c3:2c:65:b6:
c5:6b:42:a6:ae:5e:53:e3:f6:dd:f8:37:ba:d2:94:13:b3:b3:
0e:85:0d:10:1f:e5:e2:85:fc:cd:45:2e:cf:1e:cb:c4:0a:60:
57:5d:02:72:6e:91:8d:0c:fd:b6:22:78:62:63:b8:e4:de:18:
0b:bf:c2:d4:05:b9:39:85:78:65:19:92:b9:5a:99:7a:63:4f:
23:35:29:39:86:9b:11:78:bb:5d:b6:be:c7:2a:23:cd:71:a1:
6c:dd:02:bf:26:bc:fc:bf:55:66:3b:e4:21:e2:13:8b:b9:0d:
53:8c:c2:22:9a:e6:4d:d0:32:b1:2a:4f:7b:ab:dc:c7:78:11:
5e:96:1d:d0:04:80:2b:14:c9:7b:45:e0:1d:ca:c7:c3:0e:c3:
50:b9:10:fb:71:a3:c5:73:02:b1:d5:ef:b7:fd:20:78:c0:04:
64:d1:39:0d:85:f2:28:a7:6f:8b:64:8f:19:db:27:33:3d:2c:
06:d3:2f:30:2b:21:ae:7e:f6:95:2a:ab:44:05:03:44:85:cb:
7d:58:62:a9:f0:7f:e9:3d:5b:e1:26:cd:1b:d3:8a:75:e3:cf:
7f:59:04:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:23:04 2025 by rpki-client