Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
File: JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft (raw, json)
Hash identifier: 4a/3KszQha10hnvZ5B/5PwlKdC1P5wCW5K6MWRD22DM=
Subject key identifier: C4:6F:24:94:A3:A3:95:26:EA:43:41:C8:D1:18:86:F2:17:8C:C4:2D
Authority key identifier: 25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7
Certificate issuer: /CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
Certificate serial: 019A5263210BEA309A96114CB511AF6372C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
Manifest number: 1242
Signing time: Wed 05 Nov 2025 05:00:19 +0000
Manifest this update: Wed 05 Nov 2025 05:00:19 +0000
Manifest next update: Thu 06 Nov 2025 05:00:19 +0000
Files and hashes: 1: BQcLEt_fhF3T8cK9G4llL9qzCF4.roa (hash: HsXDiNZ/6cIaXPnh2ptBxpxCA2P5yT/9b+aknpD6TWU=)
2: JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl (hash: kzXO1eACXgfFrpoh1wWTQjaRsbQOfL5tSUevpFB6Ngs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:21:0b:ea:30:9a:96:11:4c:b5:11:af:63:72:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
Validity
Not Before: Nov 5 05:00:19 2025 GMT
Not After : Nov 6 05:00:19 2025 GMT
Subject: CN=c46f2494a3a39526ea4341c8d11886f2178cc42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:f7:9c:f9:0e:ee:ad:79:47:00:5d:4b:30:
cb:ca:e1:74:02:2a:9e:bb:fc:5b:f1:5d:20:21:fe:
b6:72:15:95:96:77:1c:fe:7a:d0:d8:c7:3f:22:de:
81:0d:0a:43:2c:55:61:0d:25:a2:36:f1:52:42:0e:
b3:7d:c4:1c:cd:43:25:5f:ed:b0:28:22:01:39:a1:
20:41:d2:2e:c1:78:92:38:b0:7f:9e:71:65:ab:9a:
78:2c:1d:74:9a:f2:48:92:03:f2:4d:af:54:fe:00:
b6:51:7d:7a:c3:0d:ee:9c:b0:c4:dc:c7:c4:fd:27:
73:85:f3:54:f6:fd:67:5b:88:bf:5b:85:5a:18:b8:
2f:86:61:42:5c:7e:00:bc:ff:fd:ec:c9:6b:92:af:
c1:e8:24:ed:53:bc:3e:ec:4c:98:e5:73:ab:b5:ce:
e1:6c:f7:db:a3:55:ed:83:be:2a:c3:94:59:81:d2:
a5:08:dc:dc:c9:e8:5a:8f:3a:ef:8a:d0:ff:d9:07:
2d:9e:92:e3:34:8b:91:b0:63:99:d2:52:be:99:94:
c3:86:6a:56:bc:e4:b9:55:4c:a1:5f:98:95:51:fd:
49:bd:f1:22:f6:ad:80:0f:e0:96:e4:d8:57:1f:e1:
b1:41:6c:ea:0f:99:df:89:ac:e8:4a:ba:90:4d:84:
28:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6F:24:94:A3:A3:95:26:EA:43:41:C8:D1:18:86:F2:17:8C:C4:2D
X509v3 Authority Key Identifier:
keyid:25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8f:93:d0:87:9e:6d:22:1b:cb:28:2d:93:e9:2d:71:37:37:
e8:41:87:18:47:80:7f:fa:97:63:f8:72:ed:c9:91:a3:eb:e7:
19:68:40:72:a0:9c:c9:3b:7e:0b:4f:dc:c5:19:cf:c3:73:ed:
f5:ad:a3:34:fb:ae:0c:80:32:32:a1:4e:47:ed:1e:af:61:d1:
e4:17:f7:cc:80:4f:93:d6:60:29:f8:5d:67:24:95:2e:b7:ea:
cd:43:2a:b4:39:2f:41:79:b5:1b:12:3d:d5:ec:c4:cb:b7:92:
d1:f5:7a:b2:85:fa:12:61:84:11:d9:06:c8:88:7f:0e:84:e0:
50:f4:d8:94:8f:36:9d:40:0c:aa:03:f8:5a:b5:d4:1b:e1:3c:
8c:e0:f4:e0:96:0b:99:c5:94:93:77:43:b9:0e:53:19:f7:15:
74:2d:94:05:a7:ca:76:9a:d2:a4:0f:e1:af:04:71:f3:1d:54:
22:49:8c:e6:d0:de:16:5d:df:a6:a2:4f:64:96:8f:93:55:35:
90:40:6e:11:2a:42:34:05:81:d1:54:cc:27:e2:e0:ac:2e:21:
1d:15:70:f3:12:15:e2:c4:86:fd:d5:2a:3b:9d:08:8c:86:7c:
11:5f:28:c6:f1:3c:13:60:17:aa:4b:02:54:51:bd:f5:a2:c4:
fe:b2:12:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:59:22 2025 by rpki-client