Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
File: JsymKjWIHK6NLFgSrFjKBxCNcK4.mft (raw, json)
Hash identifier: VUwZqe2lHe5q1b/8BNkyCTNNYr3lGb9V0ro8wY32kqo=
Subject key identifier: 59:DE:AF:96:54:A0:45:3C:89:4A:C4:F3:D5:5F:ED:BF:AC:42:44:A0
Authority key identifier: 26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
Certificate issuer: /CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Certificate serial: 019A4D748236672D2C3228F432B88973CD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
Manifest number: 0E02
Signing time: Tue 04 Nov 2025 06:01:12 +0000
Manifest this update: Tue 04 Nov 2025 06:01:12 +0000
Manifest next update: Wed 05 Nov 2025 06:01:12 +0000
Files and hashes: 1: JsymKjWIHK6NLFgSrFjKBxCNcK4.crl (hash: Wo39OH/A0UelFDPZ2gIpQKsgP40O/+PWCrMP2wDXyik=)
2: TI2sUvWDSUpJ-tuAKDLzGHYWcDc.roa (hash: +KTdwKTz1o8gs9Nib2fmPFoQlxElWxBwjFIadXb85TE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:82:36:67:2d:2c:32:28:f4:32:b8:89:73:cd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Validity
Not Before: Nov 4 06:01:12 2025 GMT
Not After : Nov 5 06:01:12 2025 GMT
Subject: CN=59deaf9654a0453c894ac4f3d55fedbfac4244a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:8e:65:bc:70:78:b6:1b:aa:36:c0:89:54:
59:d6:70:54:ed:28:b7:d3:e9:81:68:0d:e0:68:90:
34:1f:ca:63:99:aa:07:e6:6a:9d:48:ac:ba:cf:55:
6b:72:5b:16:cb:54:60:ff:4a:ee:99:d8:d2:30:38:
15:79:fe:07:d6:c5:00:48:49:9b:98:cb:7a:51:65:
8e:56:9d:d6:52:2d:be:8d:3c:8a:f4:0f:9d:8d:0d:
86:95:50:04:fa:7c:a5:a1:4f:ab:4a:4e:a7:d0:d8:
07:24:ae:95:fe:d7:b2:b3:38:19:0b:ba:2f:35:4d:
c2:c2:e5:5b:d5:24:cc:ad:75:8d:21:17:03:6e:f1:
32:9a:3c:e5:a8:03:f7:a0:53:ef:1a:79:9a:92:32:
6e:36:c6:68:5b:ab:af:01:e8:3e:19:89:12:38:3c:
10:85:8d:52:32:1e:3e:d5:bb:a9:76:1b:43:a4:ca:
7c:da:29:d7:b5:12:99:60:e0:5c:f1:bf:47:e1:59:
71:27:a0:c7:60:24:3f:88:b6:53:be:5a:bf:be:33:
80:48:ee:29:fc:dd:dc:b3:74:66:75:aa:c6:ea:fe:
92:8f:50:c9:12:5c:f6:7c:62:91:1c:dd:8b:c2:e9:
e5:e4:44:4e:73:92:32:8c:8e:88:ea:ab:ed:a4:d2:
ec:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DE:AF:96:54:A0:45:3C:89:4A:C4:F3:D5:5F:ED:BF:AC:42:44:A0
X509v3 Authority Key Identifier:
keyid:26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:17:24:27:11:b2:8a:8f:c0:27:db:8d:9a:bc:21:7f:02:9c:
44:eb:88:67:0d:9c:d6:80:fd:74:60:23:af:b1:35:35:03:c4:
8f:6c:72:15:07:d8:96:1d:4f:20:10:00:93:e5:4e:29:0b:03:
31:a3:bc:9e:b7:74:65:9d:3e:cc:bc:23:6b:32:d2:35:59:4a:
4b:68:8a:e5:52:b5:2a:83:5e:f2:ad:a8:93:37:3d:5e:bb:dc:
ae:d2:d2:ad:df:fe:6f:69:3b:de:46:65:3e:44:5b:50:96:04:
d1:53:af:71:5a:7b:bf:fa:83:34:cb:ff:23:e4:2c:30:05:03:
a2:40:04:76:67:86:00:ca:52:7a:ce:c4:aa:b8:c4:3f:ca:c3:
dd:55:da:11:29:aa:1a:c3:d6:ea:b3:ef:08:f9:df:76:16:4d:
9a:0e:86:13:6a:25:0c:88:30:90:6e:55:6a:a3:6a:42:ec:d4:
d3:8f:d7:3f:c3:dc:9e:c0:8a:fe:69:e2:32:f2:50:ee:09:a8:
4e:be:46:93:2b:0a:5a:89:d5:84:b5:bd:80:11:a7:64:41:d7:
7b:b9:99:51:c3:a8:95:a9:91:41:54:cf:a7:1a:9a:52:1c:84:
93:1c:6c:3e:63:d9:fc:a2:77:b7:61:ad:1c:5e:c8:15:ae:e6:
0b:c9:72:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:13 2025 by rpki-client