Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
File: JiditzviJrFxmZQSYlrMcnAkQ0M.mft (raw, json)
Hash identifier: Ab7FA1rovKKO2kojeyshYFLrzWkShe1FmNgEvg8oqbM=
Subject key identifier: DF:D4:B5:61:7D:AF:D4:47:50:DC:7E:77:F9:52:28:78:34:EE:18:91
Authority key identifier: 26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43
Certificate issuer: /CN=262762b73be226b171999412625acc7270244343
Certificate serial: 019A5074D90668F27A943BC7B0B190CF17DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
Manifest number: 035C
Signing time: Tue 04 Nov 2025 20:00:26 +0000
Manifest this update: Tue 04 Nov 2025 20:00:26 +0000
Manifest next update: Wed 05 Nov 2025 20:00:26 +0000
Files and hashes: 1: JiditzviJrFxmZQSYlrMcnAkQ0M.crl (hash: U+/qvtBEqyIqouMT+k4uGzJVdLJOAQ4ciMz5j3WsKns=)
2: SW0NmgN1MfeImMBLkTet_og-k3A.roa (hash: NuBlZaeVdzU+Qx3vpR2cHPvzMF2hd3qV04JT0+dx0Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:d9:06:68:f2:7a:94:3b:c7:b0:b1:90:cf:17:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262762b73be226b171999412625acc7270244343
Validity
Not Before: Nov 4 20:00:26 2025 GMT
Not After : Nov 5 20:00:26 2025 GMT
Subject: CN=dfd4b5617dafd44750dc7e77f952287834ee1891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:33:44:bb:ca:1e:d7:76:2b:c9:6a:e7:1d:96:
e7:4b:7a:a6:b5:7a:f3:c8:f5:f1:e9:fd:f8:14:e8:
1c:9d:c7:ec:cf:12:ba:5a:b3:2c:15:eb:a1:07:83:
60:88:c8:a6:d2:ee:84:6d:51:be:0b:12:95:0d:2f:
54:42:b2:6b:87:8b:65:7a:39:af:8e:90:40:10:2a:
e1:27:58:18:98:00:94:3c:46:3b:33:b8:3b:5f:f5:
e1:d6:49:9a:2b:31:75:a7:80:f7:de:07:8b:b7:da:
1d:80:c3:af:d6:ec:5a:95:95:66:a7:d7:36:91:ec:
20:98:d3:76:5a:af:2d:4e:4e:5f:12:a3:43:7f:1e:
42:76:2c:57:06:5c:86:e1:e0:1b:90:8e:61:56:66:
79:f5:e2:a7:5c:f3:0a:f7:d9:13:77:62:bc:00:d0:
39:71:6c:de:c6:e3:45:a3:d3:55:6c:6c:3d:3b:b5:
02:04:84:1e:ee:fd:8b:4a:35:23:01:5c:46:70:97:
cd:5d:a7:08:d4:f3:28:00:28:8f:02:f8:6f:cc:5c:
35:14:bb:05:ae:63:3f:0a:ef:c8:2b:a7:fb:ea:0a:
0a:e9:a0:00:89:05:44:3a:96:18:b3:3e:c7:b9:b2:
04:7a:b7:07:c1:a3:d8:7e:f3:d3:ba:06:a9:b2:65:
e3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D4:B5:61:7D:AF:D4:47:50:DC:7E:77:F9:52:28:78:34:EE:18:91
X509v3 Authority Key Identifier:
keyid:26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d3:bb:2c:0e:c8:ee:a5:91:02:b2:33:81:d8:42:80:f4:5f:
67:3c:73:0d:97:af:8a:c5:ed:f3:65:7f:5b:c5:15:d9:8d:ba:
b4:7a:c9:a1:14:c5:9b:5e:48:ba:40:b7:a6:dd:d1:32:49:c7:
eb:b4:35:3d:29:f8:98:c2:07:b6:e2:56:c5:57:99:ef:fb:c9:
b7:7e:84:8e:88:ed:34:c6:e0:e4:6a:78:98:52:f1:13:3d:67:
a1:21:b8:0f:93:bc:03:21:f3:89:e4:07:0a:54:46:6f:64:5a:
58:1a:e6:61:81:6c:70:15:26:14:d5:f1:15:32:96:2d:1a:b7:
b6:5b:46:15:e6:ef:6e:00:de:9a:99:48:06:46:4e:a4:85:9d:
cc:d4:a5:32:c7:a5:33:be:c2:13:d5:1a:c5:f1:5a:a2:ab:93:
51:55:8f:0b:0c:dc:79:f6:8b:67:78:25:c3:15:fe:25:a0:cc:
44:13:0d:73:72:dd:ed:3a:5b:73:ad:a4:f0:ed:fb:2a:4f:9e:
f6:92:b1:db:80:cd:7a:be:ee:f5:18:a0:47:0e:d4:97:c3:4b:
51:8e:57:b6:4c:11:da:f4:a2:df:82:99:7c:7c:0c:c3:b6:a0:
4b:cd:31:4f:d8:94:11:56:ff:fd:8d:21:15:d6:f1:40:3a:1e:
4f:5f:2d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:00 2025 by rpki-client