Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
File: JPS59IVkIInzaxdNlkLcSDf_TSQ.mft (raw, json)
Hash identifier: kbQPja4E6tBHBGMRIfk4a91/oibDscwWwyV3xMi1Fgs=
Subject key identifier: 67:39:70:EB:A8:CE:81:CD:82:F6:EA:10:63:1E:14:50:F7:38:A2:82
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Certificate issuer: /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial: 019A4F624E20CB5C441E9E5E5BF7366AD817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
Manifest number: 0494
Signing time: Tue 04 Nov 2025 15:00:33 +0000
Manifest this update: Tue 04 Nov 2025 15:00:33 +0000
Manifest next update: Wed 05 Nov 2025 15:00:33 +0000
Files and hashes: 1: 2-HRD6bwoabjO9Qn710S3v32VoI.roa (hash: kexWRD+OmA3dG4m2fY8icqYNslO76EO40+SSv1pEbyw=)
2: JPS59IVkIInzaxdNlkLcSDf_TSQ.crl (hash: ciTr+0EA146pS9RobsMiewW6XYTLIRXC/+8NiEjv21k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:4e:20:cb:5c:44:1e:9e:5e:5b:f7:36:6a:d8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Validity
Not Before: Nov 4 15:00:33 2025 GMT
Not After : Nov 5 15:00:33 2025 GMT
Subject: CN=673970eba8ce81cd82f6ea10631e1450f738a282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4d:4a:b5:41:61:a6:f7:d6:42:b8:9b:c0:b0:
48:2c:73:90:ce:56:8a:d8:79:2d:65:9a:c4:5f:26:
6f:ce:d9:51:46:92:83:1a:f2:84:7a:69:2c:68:2f:
d2:3f:36:6a:1a:6e:d0:33:94:a0:4f:71:f4:00:45:
32:69:31:e9:ab:9f:a3:32:80:c0:0a:5a:98:de:e4:
94:0c:f6:d9:0c:45:25:54:8c:39:9a:d8:8f:ad:13:
ab:e7:d8:8c:1e:52:3f:b9:63:ac:8b:e4:a0:ab:e4:
44:f4:4f:20:e6:7d:50:d3:93:59:d7:f1:d1:9c:cf:
74:1b:b9:98:66:47:a5:a4:e1:07:a5:ca:1b:34:2f:
56:6c:9f:f9:75:c2:8d:f7:d7:a7:b0:56:2c:7e:15:
83:3d:6f:c7:85:cd:b9:1b:f0:d8:26:18:62:68:90:
13:c2:8b:6f:e5:67:8c:1c:65:dc:74:51:9d:f6:f3:
68:c6:4d:ca:ca:26:3e:37:d9:ca:68:d6:1f:4b:2b:
ab:f0:eb:09:39:0c:e8:4a:67:78:af:54:5c:80:51:
9e:3d:76:1e:7e:47:ca:53:20:6f:a0:2d:3f:d2:09:
5a:8b:56:1a:ed:87:b4:e8:55:7d:ed:8b:f0:a6:1d:
9c:62:36:68:95:ba:00:1e:d8:cb:a7:db:87:60:38:
f0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:39:70:EB:A8:CE:81:CD:82:F6:EA:10:63:1E:14:50:F7:38:A2:82
X509v3 Authority Key Identifier:
keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:46:ee:9b:bb:08:41:d4:43:91:7a:4e:42:31:62:66:33:d6:
a1:32:04:87:e1:00:87:8c:3c:f3:28:fe:f0:25:d2:ca:c9:36:
44:77:c2:2f:95:cc:df:c4:2f:aa:d0:7a:7a:66:94:0a:a0:7a:
bb:de:9b:ba:32:f9:ab:b1:f8:61:e9:8e:c2:15:bc:61:8f:70:
30:76:48:81:fd:e1:57:d2:39:f3:a0:70:8a:9b:46:e8:81:0c:
43:af:b8:e1:17:1c:0e:9b:3d:b4:dd:a2:da:d7:05:12:b8:ac:
5f:98:59:59:f8:e1:ed:9b:f5:5f:14:a2:24:71:ef:e6:14:ca:
b7:2a:99:44:78:cf:fd:f7:fd:53:d4:a5:0e:ad:f3:c0:50:a5:
1a:86:be:61:8d:c9:b2:8c:55:ee:d4:2a:30:34:6c:cd:3f:d9:
04:00:0c:d3:eb:19:2a:36:cc:66:06:8b:20:3b:4e:65:1e:56:
ee:35:c1:88:cd:7d:79:c5:92:de:e3:ee:5e:9f:10:39:9d:82:
27:c2:a9:52:eb:25:18:47:7c:8b:aa:2f:09:47:8b:b1:10:c8:
79:d1:d8:6b:bc:18:8c:89:3e:89:06:48:ba:53:ae:a4:85:35:
ed:56:25:c6:02:d3:90:79:14:ea:79:51:d2:01:71:3b:b3:d3:
bb:9b:64:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:21:51 2025 by rpki-client