Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
File: JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft (raw, json)
Hash identifier: vi08NJPyyzCMXXZTT5YStUoK/PRq0W9hsovid6NZM+w=
Subject key identifier: 43:67:E1:F1:25:CF:77:63:02:71:09:2E:94:62:77:CF:70:5B:6D:DF
Authority key identifier: 26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
Certificate issuer: /CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Certificate serial: 019A4E18EAC8FA7AEF478D7A5AD3388684BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 09:00:47 +0000
Manifest this update: Tue 04 Nov 2025 09:00:47 +0000
Manifest next update: Wed 05 Nov 2025 09:00:47 +0000
Files and hashes: 1: JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl (hash: 7W2H/3fdfOZnqUZZCAQS+sXzLVe5iVJp+XO36Lx9GJc=)
2: pUkIJqBsM01F-i6Em2tr3Saf2sk.roa (hash: iY+eh+5NMCHozu8pjL4QFCTT1O1hYE+uhiNgfrNLxws=)
3: tnDBwukw0h8yvmfKynq161ze7HM.roa (hash: hhJlzz8ox0/NR3tX5f2QrfPo2aePRzJGPcnJfHw1RMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ea:c8:fa:7a:ef:47:8d:7a:5a:d3:38:86:84:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f36b5c6ca7a1698e7421a27e3d4a6b7648148d
Validity
Not Before: Nov 4 09:00:47 2025 GMT
Not After : Nov 5 09:00:47 2025 GMT
Subject: CN=4367e1f125cf77630271092e946277cf705b6ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:4d:db:fd:a4:e8:0a:dd:a0:da:f0:f5:78:
9f:e0:90:bb:03:e5:ae:5a:9c:cb:64:98:8a:b0:fd:
9f:f6:21:22:9c:99:0c:38:44:2e:7d:48:e3:03:77:
f6:06:15:aa:73:af:b1:17:f5:8c:2c:80:ae:33:68:
b4:5e:72:d7:ac:9f:b3:40:f5:ab:49:58:c0:62:55:
73:e9:6c:5f:4f:40:89:66:cf:09:16:2e:77:d1:a5:
68:59:f8:85:9d:3a:9d:5c:f3:8f:34:ef:ce:14:93:
08:b7:2b:99:93:c2:b4:68:74:9b:67:83:ae:ae:52:
17:44:27:6a:0c:55:b6:87:b2:1f:b3:5c:0b:c9:04:
4c:a2:ad:73:e7:cf:41:ba:ec:0c:33:a2:bf:fb:10:
69:c0:d2:ac:bf:29:fa:98:b0:b1:30:b4:e3:3c:09:
aa:3b:86:e5:59:82:74:46:23:1f:ca:c2:67:88:e2:
a8:ca:5f:35:e5:42:fc:6c:f6:56:30:99:f4:60:b8:
53:51:f5:cb:78:e4:30:3b:b8:78:01:32:dc:11:8c:
7d:1d:e0:5f:db:33:f8:49:18:fe:aa:6c:ee:ae:9a:
e2:04:c3:31:96:af:11:30:56:c9:82:d6:90:48:27:
9f:ec:2c:97:49:cc:b6:ea:c4:f5:c6:9b:b2:da:c4:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:67:E1:F1:25:CF:77:63:02:71:09:2E:94:62:77:CF:70:5B:6D:DF
X509v3 Authority Key Identifier:
keyid:26:F3:6B:5C:6C:A7:A1:69:8E:74:21:A2:7E:3D:4A:6B:76:48:14:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvNrXGynoWmOdCGifj1Ka3ZIFI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/7cc0f6-74ef-423a-a696-4a2bf4ab199d/1/JvNrXGynoWmOdCGifj1Ka3ZIFI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:69:d3:08:35:ff:fb:21:fb:f1:ce:8d:dc:88:29:5f:25:e0:
6b:27:34:89:64:d8:83:00:25:15:1b:a0:8c:98:cd:31:b9:17:
56:78:9b:15:5b:84:eb:b4:32:52:fb:f5:56:2a:90:b4:81:b0:
b2:5d:1d:fe:3f:af:55:00:60:45:59:bb:94:32:4d:03:8c:7f:
f7:91:da:5c:8b:94:89:63:ee:d6:26:ad:8f:f8:0c:25:2c:0f:
47:66:b8:8e:06:95:94:7a:1d:9e:8e:86:49:11:4f:4e:27:e7:
a1:7a:cb:8d:24:a0:9b:7f:ca:87:9a:c8:7c:cc:43:26:15:8a:
3a:57:41:05:f0:72:e2:4d:0d:01:f0:30:3b:14:4d:6f:67:d6:
2c:fc:ee:f2:1b:9f:22:1d:b2:02:4b:cf:3f:8a:1f:6d:cc:77:
30:fc:08:14:29:20:02:11:f1:3f:39:07:88:50:fa:ac:ef:55:
03:08:b8:00:9a:2b:18:31:03:dc:4b:09:86:f3:41:73:01:42:
d3:a1:94:0c:29:35:ea:65:22:13:10:4f:49:52:91:ad:61:7e:
b3:10:43:8e:b6:ff:ac:f3:69:61:67:79:62:38:fc:ab:33:05:
0d:e1:60:eb:c0:0f:58:01:72:cb:35:06:9a:52:af:8f:86:b5:
16:5e:de:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:39 2025 by rpki-client