Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
File: JpfuW-qVtvypLXyABbJTHQ1RBGg.mft (raw, json)
Hash identifier: m4c/vcJHptMCk2raBcu192CuoSkK4sWU7M1j23L/5P0=
Subject key identifier: 0A:89:3A:E0:88:C4:74:12:CE:46:B5:7C:48:DD:89:3E:E3:84:76:E9
Authority key identifier: 26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
Certificate issuer: /CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Certificate serial: 019A53ACD9F342C94535E1073716BB1660F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
Manifest number: 1455
Signing time: Wed 05 Nov 2025 11:00:28 +0000
Manifest this update: Wed 05 Nov 2025 11:00:28 +0000
Manifest next update: Thu 06 Nov 2025 11:00:28 +0000
Files and hashes: 1: JpfuW-qVtvypLXyABbJTHQ1RBGg.crl (hash: PNMcKKJ+KFlPQe77QYtv2m9bC4GAMZUwFMzWV5fBjpA=)
2: t0m5CFRk2ANTwdf9JIt0BYvGNEI.roa (hash: 69oTBNrBltjFmdUcFgtVLvMtoZ+YCjNcAmHmn7C7UBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:d9:f3:42:c9:45:35:e1:07:37:16:bb:16:60:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2697ee5bea95b6fca92d7c8005b2531d0d510468
Validity
Not Before: Nov 5 11:00:28 2025 GMT
Not After : Nov 6 11:00:28 2025 GMT
Subject: CN=0a893ae088c47412ce46b57c48dd893ee38476e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:35:c1:db:be:de:43:ae:13:88:bb:04:e1:
60:2d:b4:f7:d4:c4:2a:dd:73:3f:f4:2a:3d:2d:c3:
1f:b6:e5:b6:8e:63:4f:ca:a0:ad:e0:ad:92:91:ba:
7b:20:71:3a:47:84:06:17:ac:35:0d:4e:bf:45:0b:
8c:08:47:76:c5:c4:25:2e:89:08:30:4e:63:97:21:
97:90:ae:d3:24:12:91:a7:b4:e3:7d:89:0d:d9:ca:
29:8f:a2:da:dc:50:64:92:c9:53:c6:87:a6:03:15:
77:c6:41:76:c1:4d:57:c3:c3:ca:d5:86:5c:c0:0c:
cc:bd:69:1c:ee:11:34:8b:73:d7:23:9e:9b:d1:11:
3a:0e:35:99:e5:ed:3b:27:99:2c:1a:82:45:53:de:
0d:86:5c:26:c6:bf:97:ee:58:9a:4f:8e:3f:c5:aa:
d8:58:09:fd:68:a6:a5:23:05:b8:52:6f:d9:43:07:
33:ed:1e:ec:aa:ce:ec:f8:24:32:07:06:74:6d:8d:
ac:80:c5:09:6e:ab:38:9e:27:21:22:5b:67:1e:c0:
72:1d:4b:d7:2e:13:ba:3e:20:2e:ff:c5:6c:40:02:
ca:35:66:b3:65:6c:77:81:f1:8d:53:0a:d0:2f:ff:
e5:65:7e:99:e0:41:e5:18:69:a9:4e:9d:ad:87:e4:
0e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:89:3A:E0:88:C4:74:12:CE:46:B5:7C:48:DD:89:3E:E3:84:76:E9
X509v3 Authority Key Identifier:
keyid:26:97:EE:5B:EA:95:B6:FC:A9:2D:7C:80:05:B2:53:1D:0D:51:04:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpfuW-qVtvypLXyABbJTHQ1RBGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/JpfuW-qVtvypLXyABbJTHQ1RBGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:43:c6:7f:08:b5:a4:f9:b2:95:dc:8d:49:ee:29:9e:c2:46:
7d:52:9b:59:fb:81:c8:e0:ad:01:b2:66:4e:96:2c:e8:cf:c8:
3a:8d:b0:9b:66:0d:b0:86:27:f0:d3:03:d4:24:4f:9a:a9:de:
58:b1:13:7c:25:64:36:5a:70:03:0a:73:81:49:5e:d6:fc:a4:
1c:c3:61:cd:b6:9b:94:8b:bc:af:15:8d:e1:73:b1:8e:8f:ba:
16:ce:04:4b:7c:6d:54:e7:1e:07:d3:b3:8a:22:c5:28:4d:da:
4a:05:b5:f4:03:76:a4:ff:ec:f1:d9:f9:59:10:8f:55:ba:ac:
c6:3f:6b:3a:82:0e:05:9f:ac:f1:d4:de:c6:b0:32:c6:87:01:
7b:cc:ae:f5:41:43:05:1d:68:e1:4b:c8:b3:e3:84:1f:7d:c3:
ec:e1:0c:83:ee:64:c1:39:7e:ad:b8:72:64:59:36:44:3b:ed:
92:b0:04:9b:7c:1c:65:7a:99:b2:55:54:ad:03:77:9a:8f:96:
e4:5f:cb:83:ad:ce:b3:13:b4:53:cf:2d:9a:02:ae:7c:38:53:
c3:4f:7f:e2:42:2e:64:58:32:24:4a:91:cf:36:5a:e8:ee:37:
4c:ae:81:91:62:5c:2f:e0:39:ac:14:70:71:16:9d:a5:b6:97:
a6:e2:26:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:40:01 2025 by rpki-client