Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: 6jaPIcgBT4kjiFKBH6mRwPxeOCkuIA2bnp3oKZ3BuXA=
Subject key identifier: A5:4F:03:69:CC:B0:C4:1C:BB:FA:0F:11:D9:AD:4F:23:21:F1:47:F2
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 019A526315087230FEE69B043968A3DF2D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 0E05
Signing time: Wed 05 Nov 2025 05:00:16 +0000
Manifest this update: Wed 05 Nov 2025 05:00:16 +0000
Manifest next update: Thu 06 Nov 2025 05:00:16 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: JUGndOlnCTDIKEzA2WIk0oQYw7kFMcAJ76Ikbkycogc=)
2: VJR7Lo1LB0pD40S4fO2jLPEbihA.roa (hash: RbHjGHvWg7AGicrPJns6EGHLTa9+BO6JRpxrZNUyWo8=)
3: gX6AqUyGzqBuxo0ZWofHdJPozGo.roa (hash: tMyCIpNNOmtDo0tCmm/IacKiCjkSIun6I2dTk3wHLFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:15:08:72:30:fe:e6:9b:04:39:68:a3:df:2d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Nov 5 05:00:16 2025 GMT
Not After : Nov 6 05:00:16 2025 GMT
Subject: CN=a54f0369ccb0c41cbbfa0f11d9ad4f2321f147f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:17:9c:64:69:d8:99:8b:55:fc:a5:79:44:13:
f6:59:64:35:55:a5:d1:dd:ea:1e:eb:a2:1c:b0:29:
2d:1b:53:2a:cf:83:43:e6:95:e8:1f:33:5e:67:b6:
d7:39:01:df:33:c9:30:69:33:1d:dd:d7:8f:b0:dd:
57:e0:cb:b0:a0:8e:f0:36:69:12:18:80:27:0d:4d:
13:c6:f8:e2:43:be:4a:1c:3e:a6:3b:85:df:9a:91:
a6:d5:29:30:cc:73:a7:c6:4a:d0:72:60:59:53:37:
b7:b1:be:50:d6:64:8a:98:37:e3:e9:69:3b:6e:c0:
34:c0:1a:2d:2d:26:9d:41:fa:fa:52:de:c1:8e:ab:
ae:5d:d2:45:aa:d1:48:3f:08:bf:bb:2c:5f:ce:9d:
49:28:c9:0c:02:b2:71:98:fe:6e:95:0d:cf:f7:92:
86:a5:e8:50:e0:26:9d:a8:a2:fa:3d:57:bc:2a:75:
73:37:37:9a:91:47:01:79:f3:cd:c9:fb:46:a4:02:
5e:86:78:42:3c:e7:d4:83:db:1b:24:3a:58:f6:67:
dc:74:00:07:1b:81:e3:0a:57:e7:83:b8:73:b5:2b:
4e:b9:c3:6d:cf:04:b1:b9:e9:01:58:c0:09:e0:7c:
77:21:0b:9a:64:0b:71:bc:68:6a:00:43:ca:68:71:
6b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4F:03:69:CC:B0:C4:1C:BB:FA:0F:11:D9:AD:4F:23:21:F1:47:F2
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:38:2e:4a:0d:de:6d:5e:16:7b:85:6c:e7:36:4e:d3:9a:78:
fd:a7:b2:aa:e8:ca:55:d3:fe:ef:ad:2e:1c:dc:c0:81:ff:eb:
62:4c:5d:19:1b:26:0f:41:ad:20:08:8b:b8:b5:db:07:5a:e0:
95:2a:0e:df:8b:cc:e4:2b:d6:d1:88:9a:5a:fb:4f:6d:b9:30:
55:64:0c:03:b9:c8:98:c3:0e:70:86:5e:67:1f:a6:25:2d:d1:
87:1d:3e:b0:5e:39:09:22:40:ec:87:e8:a4:65:77:98:b3:e3:
1f:b4:05:dc:82:2b:76:d3:b7:9f:14:99:2b:96:2a:94:2d:8f:
f3:8f:bb:1b:db:a8:d1:4b:4b:ad:59:cd:f1:d3:1e:ed:fd:8a:
f8:a3:15:70:cf:6d:34:e4:1e:a7:9e:1f:5b:21:ab:79:80:93:
6b:d0:7d:ef:c2:28:04:0d:07:34:ed:6b:6b:f8:7c:c0:92:c0:
4e:14:9f:43:ca:fb:01:f8:66:a6:b3:68:9a:c5:07:44:6f:09:
8d:a1:39:9a:24:af:82:8b:22:f1:dc:18:a7:46:06:92:fc:98:
a3:a4:fc:c1:5f:d9:db:35:33:15:e3:1b:c2:6e:9d:4c:30:12:
fd:2e:56:f2:71:2a:10:e2:cd:bb:34:b9:21:d2:83:90:7f:bc:
0b:69:59:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:36:12 2025 by rpki-client