Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
File: JegnfR_qtSOH6rJvjcypJgwlij0.mft (raw, json)
Hash identifier: slE+q70eeDnIPGZa3MDeYmdmm4Ct+zo82vT7yumrQeM=
Subject key identifier: 9E:E4:44:20:0C:E0:62:6F:26:40:22:B7:8B:2A:EC:A6:28:F8:7C:B1
Authority key identifier: 25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
Certificate issuer: /CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Certificate serial: 019A4F2B749B975143FF577D2AD1A7CF4B0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
Manifest number: 0A13
Signing time: Tue 04 Nov 2025 14:00:39 +0000
Manifest this update: Tue 04 Nov 2025 14:00:39 +0000
Manifest next update: Wed 05 Nov 2025 14:00:39 +0000
Files and hashes: 1: JegnfR_qtSOH6rJvjcypJgwlij0.crl (hash: rraaDb6leFdECmlnSpsf9WOfQCrRPSmrv01QbapYaDQ=)
2: QJ-q4jY57XBPftq8mgfLyBux4KM.roa (hash: pgWu6jyyJTF/Q2y1mtLzh6qQQVUyFCHc0G6KZW7xtps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:74:9b:97:51:43:ff:57:7d:2a:d1:a7:cf:4b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Validity
Not Before: Nov 4 14:00:39 2025 GMT
Not After : Nov 5 14:00:39 2025 GMT
Subject: CN=9ee444200ce0626f264022b78b2aeca628f87cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:23:b8:bd:dc:7e:2b:fb:ae:f4:ab:f5:04:fa:
0b:58:59:b6:a4:b9:aa:bd:33:39:16:af:1e:31:3f:
71:55:d0:7f:c3:e7:75:3e:1c:2a:42:cb:58:b0:61:
fb:7c:58:46:4d:18:13:41:8f:12:20:82:98:3c:c4:
35:42:2d:fb:bc:15:67:2c:31:ab:53:c3:22:c5:aa:
6a:c6:f7:65:2d:f2:55:49:6b:46:41:59:3b:84:05:
f4:7f:29:36:6d:80:83:9b:95:12:57:0c:0c:74:c0:
ac:d0:3e:06:6e:ae:cb:52:6f:76:c8:b8:95:a1:54:
09:8a:aa:89:ad:80:5c:0e:e0:83:cb:79:c4:84:d1:
7e:d0:6b:8d:7c:1c:e2:67:74:18:58:dc:3e:c2:6b:
8e:15:ed:cb:c3:9e:bd:ca:88:fe:76:21:b5:20:c7:
5a:1f:62:d3:a6:ae:0c:00:59:83:68:3c:a1:5f:19:
b5:80:6d:36:0f:0b:84:6d:11:e2:19:fe:cb:5c:fd:
82:67:8c:da:c2:4d:b3:fd:12:6a:9a:78:51:b3:e3:
a9:51:dd:e9:55:05:75:ae:b4:29:34:02:88:8d:35:
1d:bd:f9:05:64:93:ab:d6:54:93:88:ef:82:ee:3d:
90:5d:b2:1d:a6:98:83:d8:11:6d:81:aa:91:e4:13:
e3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E4:44:20:0C:E0:62:6F:26:40:22:B7:8B:2A:EC:A6:28:F8:7C:B1
X509v3 Authority Key Identifier:
keyid:25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:08:93:f3:a6:00:e3:b7:b5:11:b3:e3:c2:cc:94:27:87:3e:
fc:e9:59:a2:c1:33:98:cb:30:d6:6b:b6:5b:f8:55:1b:2d:00:
43:ad:d3:55:29:64:92:75:a5:72:a1:db:03:07:cd:97:95:67:
82:6b:ee:e1:6f:ec:32:ef:40:db:9e:27:c5:4b:e0:af:c1:45:
d3:6c:d4:cc:b8:8a:69:5b:88:e7:48:1e:d5:73:fa:59:60:9f:
2c:67:00:8b:64:f1:ca:86:73:37:a0:e4:3a:f3:b7:75:99:ff:
66:6b:d1:74:5a:e0:1d:44:ee:96:0e:34:b5:ed:ae:e9:19:ff:
a9:e5:3d:2a:d5:24:bb:ae:5b:ab:67:2c:fc:eb:10:6b:59:24:
b9:47:92:1c:38:02:5a:71:69:8c:24:55:02:f7:3f:c6:6e:cd:
e7:55:6a:c2:e4:d0:69:41:94:20:f1:e6:30:07:ae:3f:ed:87:
4f:7a:f7:c1:50:95:86:7e:d6:ac:a0:e5:00:a7:ac:18:87:17:
b3:8f:b7:e5:30:4b:ba:6b:12:f1:31:32:22:b0:2f:fd:a7:5a:
23:bc:7c:72:aa:97:e3:bf:18:cf:a7:c9:38:0d:68:45:fc:a1:
4b:da:43:67:df:6d:63:17:c6:e2:6c:48:a4:34:7d:c5:48:c6:
f0:6d:16:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:06 2025 by rpki-client