Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
File: JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft (raw, json)
Hash identifier: fafAJlW8k8juHZxIyjzYSsoxiFirkDo5w+C++M8pcKA=
Subject key identifier: 54:DA:DA:53:8A:D4:42:3A:67:9A:73:76:75:16:AA:AA:DC:DC:D6:82
Authority key identifier: 24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
Certificate issuer: /CN=24504c74c7127090a4cff85001f443149e128e60
Certificate serial: 019A4EF5E48385B967CE9B403757BD388652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
Manifest number: 11E7
Signing time: Tue 04 Nov 2025 13:02:08 +0000
Manifest this update: Tue 04 Nov 2025 13:02:08 +0000
Manifest next update: Wed 05 Nov 2025 13:02:08 +0000
Files and hashes: 1: 1-V7nSIEtwZacmx3O8jjsbs2FG9w.roa (hash: t9K5j+LYk94wZJxNHETLVLM4vmuOedOVZgo6948wOQE=)
2: 6ejovNND0TNxbK3PtvEHJ_oMrqQ.roa (hash: 0+kxBlBGWXGCy6bDB1j1fXR0+RthnFxgyw3Nt6xjMyc=)
3: JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl (hash: XLQGCU4Lriqn1xCLYIiRbYk58EJT4sOaVVAQKm+T/m8=)
4: RVYbt4pshmH8DSV6d_7jrqY3hkM.roa (hash: DtwQM6qpi2v7cPG8SNPN6jhojOkJB16k6kT3gTy5/Gk=)
5: ZO3wZfLo3YsxIFjpYF3lEe1GVy4.roa (hash: jTLR78RCT3rEVEu8hiMRg4UU1kUzybwIrt+GTClc9gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e4:83:85:b9:67:ce:9b:40:37:57:bd:38:86:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24504c74c7127090a4cff85001f443149e128e60
Validity
Not Before: Nov 4 13:02:08 2025 GMT
Not After : Nov 5 13:02:08 2025 GMT
Subject: CN=54dada538ad4423a679a73767516aaaadcdcd682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4c:cd:61:c2:75:58:b8:52:63:33:2f:68:4f:
0f:d3:f7:b8:b7:df:68:a0:7f:09:93:7c:16:12:bc:
56:b5:17:6e:82:ef:75:ac:85:ad:5c:ba:b2:cd:8d:
e5:bd:4f:f2:7c:f7:c4:a5:7b:27:db:d2:38:d7:b6:
70:c8:47:36:6e:d4:75:24:d9:df:89:97:4d:e2:bb:
41:ca:45:33:cc:1b:18:22:54:ee:90:e6:85:bb:15:
50:6e:a8:ef:9d:cc:6a:b4:95:5a:7c:a2:ca:19:12:
f0:3f:ec:4f:f7:0a:0e:11:32:42:7d:a9:2c:35:a8:
35:68:55:f7:3c:19:07:2e:89:27:90:5f:c2:df:0e:
fa:5d:18:28:96:c6:5c:8f:a4:99:1a:14:1c:98:99:
af:85:eb:11:ae:27:b0:5c:ae:d0:fc:d7:b3:1d:33:
ee:b0:19:ca:1a:36:8b:07:63:3b:ac:e6:b4:57:99:
ce:cd:34:9e:3d:97:f4:5b:e5:c9:eb:47:b6:f8:18:
cb:46:f0:96:7f:4b:b7:98:ed:de:bf:ee:0c:90:5c:
5e:b9:55:e3:ee:87:c6:a4:d5:42:65:cb:f0:f2:a4:
82:4d:d6:d5:fd:05:a1:5f:f6:0a:b4:b1:da:26:bc:
59:5f:7b:10:1b:c3:64:b9:93:9a:56:fa:10:7f:28:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DA:DA:53:8A:D4:42:3A:67:9A:73:76:75:16:AA:AA:DC:DC:D6:82
X509v3 Authority Key Identifier:
keyid:24:50:4C:74:C7:12:70:90:A4:CF:F8:50:01:F4:43:14:9E:12:8E:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFBMdMcScJCkz_hQAfRDFJ4SjmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/396e8b-71d3-46bf-a244-d0622c4cd48d/1/JFBMdMcScJCkz_hQAfRDFJ4SjmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:44:43:47:61:8d:fd:6b:5f:1d:14:b7:f0:41:04:78:36:ec:
52:d9:69:4a:6d:1b:fa:0b:71:b4:9f:6d:be:2d:16:d3:6c:f2:
41:2b:30:a9:c0:64:d7:54:50:78:09:53:7b:cc:72:95:d5:ab:
ca:b0:59:2b:80:7a:0a:01:9f:23:88:25:af:cf:71:14:5a:0b:
b8:3a:1c:d9:1e:2e:3d:78:dc:82:98:61:46:fa:97:e6:db:76:
c1:03:b0:a3:5e:74:6b:14:f1:2c:60:b4:f8:12:37:de:a4:2e:
6d:ba:65:94:ee:42:8f:56:f6:56:76:02:50:f2:8c:79:fb:49:
a7:0c:02:53:b2:73:39:b4:6d:3a:5b:5d:6b:d9:72:e9:a6:4b:
80:91:d3:2e:67:e7:79:31:3b:45:6f:79:ea:b5:cd:92:b3:09:
e0:5d:c9:6c:3a:86:57:6b:b2:e2:a4:01:88:48:e2:5b:3f:48:
ec:d2:e2:67:4c:73:20:6c:8f:ec:af:25:04:65:c3:09:7f:50:
ea:b4:a7:46:8b:f2:8a:cd:20:bc:69:8a:6f:e0:e1:0b:60:1e:
56:f7:9d:17:40:3d:a0:12:96:ff:0c:aa:8e:2e:4e:33:e1:16:
03:3d:99:71:c3:ae:79:a9:94:64:e3:aa:97:1b:68:a9:fd:15:
13:88:24:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:57:27 2025 by rpki-client