Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
File: JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft (raw, json)
Hash identifier: h3j6L+IWl2qiend61b3D65Oji0fDFXVnulP3+Yj1Q5g=
Subject key identifier: CA:72:12:0E:14:68:B3:8E:25:37:E2:C5:29:D9:4B:96:4E:04:91:AE
Authority key identifier: 26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
Certificate issuer: /CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Certificate serial: 019A4EF4326221D4AB6EA00E538517C81066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
Manifest number: 05D3
Signing time: Tue 04 Nov 2025 13:00:17 +0000
Manifest this update: Tue 04 Nov 2025 13:00:17 +0000
Manifest next update: Wed 05 Nov 2025 13:00:17 +0000
Files and hashes: 1: JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl (hash: vjXSyJXdQ8Yhivk4Xwuj9Gr0OfZeePL1AVjzA4h8veE=)
2: hRPI0iSGl2IzeA7QH3Szt11HLAA.roa (hash: PPwH27Sg7uIDGa5QbdK7/mYmLXCSL9d4CnlOhCXOspw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:32:62:21:d4:ab:6e:a0:0e:53:85:17:c8:10:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2669dd2f4da888c27d130f99e88a2e0c590aad2f
Validity
Not Before: Nov 4 13:00:17 2025 GMT
Not After : Nov 5 13:00:17 2025 GMT
Subject: CN=ca72120e1468b38e2537e2c529d94b964e0491ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ce:f5:9b:30:ce:b1:4b:35:87:02:de:e5:ed:
77:b8:ac:33:86:e2:0c:d6:89:9d:6c:e6:f4:fe:a9:
87:d6:40:53:3a:3a:ce:ea:8a:51:f4:45:35:28:dd:
48:81:9b:27:b0:76:a0:50:d3:c3:54:98:3a:60:f0:
b4:b5:51:0e:61:87:ac:0e:cb:bc:63:fc:99:9e:c1:
16:56:a5:39:98:9b:9b:7a:aa:ec:ac:fb:b8:61:fb:
ce:7b:13:3d:56:2c:a3:1d:8d:27:d0:d0:26:71:ae:
1c:bf:62:a4:32:a7:ef:2e:07:08:58:a1:d2:df:2c:
5b:eb:ea:f2:7e:43:5b:b8:af:85:55:ab:aa:2e:c7:
bd:9e:72:88:7c:ef:06:44:28:18:d7:d1:e5:2f:8d:
62:a0:f9:26:45:03:2d:43:cd:a6:05:99:10:75:94:
fe:d2:56:a2:27:37:00:1c:07:96:8c:58:19:2a:c4:
cd:96:81:15:90:ca:22:70:64:69:7a:32:3f:c0:62:
bb:dc:a4:c0:50:2e:45:15:d1:16:93:1d:66:11:c6:
fd:46:4a:ea:6a:fd:48:bc:ba:f8:5e:bb:50:17:b1:
a5:ea:fc:a1:27:05:77:5d:d8:f6:f7:59:6d:a8:84:
1f:3c:c1:27:ab:51:9a:5c:dc:17:84:f7:b0:28:eb:
d3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:72:12:0E:14:68:B3:8E:25:37:E2:C5:29:D9:4B:96:4E:04:91:AE
X509v3 Authority Key Identifier:
keyid:26:69:DD:2F:4D:A8:88:C2:7D:13:0F:99:E8:8A:2E:0C:59:0A:AD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmndL02oiMJ9Ew-Z6IouDFkKrS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cab588-32fd-4a6d-a0e2-f4d30a7943f6/1/JmndL02oiMJ9Ew-Z6IouDFkKrS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:7c:54:fe:94:2a:4e:0d:88:9a:59:15:19:6a:94:d2:01:85:
e5:f7:25:4c:4a:4b:2c:81:9b:46:3e:86:c0:79:41:5e:0b:0f:
c7:39:e3:49:05:c6:ed:8d:58:23:ef:c5:2a:95:0d:09:4f:60:
b8:e8:38:1d:ce:b2:5c:35:e5:f0:a1:c5:de:6b:39:e2:22:ba:
33:c8:5c:25:c6:c5:83:86:0c:bc:b3:48:7c:55:ba:38:c1:28:
59:12:66:3e:9a:d8:56:f9:ac:43:18:d8:59:3d:5b:94:8e:d5:
f0:12:f3:42:25:7e:6a:81:28:d8:24:66:6e:2f:22:71:d2:33:
32:5e:39:27:ef:b1:9f:1e:ab:20:09:62:70:59:23:03:68:01:
96:6f:56:42:25:c8:cc:68:14:27:79:2e:f6:ed:ee:78:df:75:
81:b6:b5:e8:f9:3e:06:48:b1:5d:2a:eb:b1:66:c4:c5:af:9e:
00:d0:15:ac:be:be:d5:2d:69:df:3b:bc:00:50:09:db:61:f5:
f8:c0:1e:cd:8b:f0:3b:62:4e:d2:b1:ee:a9:ca:0a:63:f7:28:
32:65:56:f9:2a:0b:81:ec:3d:c6:54:81:ae:ec:8d:bf:5f:62:
5d:60:62:63:87:01:aa:0b:f7:4f:34:46:7a:c6:de:1b:a2:78:
a0:0b:d3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:24 2025 by rpki-client