Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
File: JBOjQZZ67b5SqLEcecsTkRpKn3c.mft (raw, json)
Hash identifier: r8CbzCw0n02YN5RdKWiWiSU3xBtuEgNjcz/7MWKJ7b0=
Subject key identifier: 84:86:22:D7:51:8E:70:01:D8:97:99:B6:B5:86:28:5D:56:25:35:06
Authority key identifier: 24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
Certificate issuer: /CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Certificate serial: 019A4EF4EFB94504EDE944216BF1DFE84F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:06 +0000
Manifest this update: Tue 04 Nov 2025 13:01:06 +0000
Manifest next update: Wed 05 Nov 2025 13:01:06 +0000
Files and hashes: 1: JBOjQZZ67b5SqLEcecsTkRpKn3c.crl (hash: FRXm2+ScjXVgXmVN5lSDoiTzAjwRzhL74XrVeyoPMKQ=)
2: Q9tpjWUnZ29Md-50Kxu_HQRQ-Mk.roa (hash: zHTjqQivC3Wds3ZRsFbwTssRdBvxgxtLcNo5p+QkSKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ef:b9:45:04:ed:e9:44:21:6b:f1:df:e8:4f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2413a341967aedbe52a8b11c79cb13911a4a9f77
Validity
Not Before: Nov 4 13:01:06 2025 GMT
Not After : Nov 5 13:01:06 2025 GMT
Subject: CN=848622d7518e7001d89799b6b586285d56253506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:de:2d:64:14:40:d9:06:c2:00:9e:e7:2c:
52:4d:d5:26:70:a9:7a:7a:72:f1:4c:d0:e4:3a:50:
d2:b7:e2:8e:6c:7c:0d:98:f7:a7:24:f3:02:42:0c:
a4:12:a4:ab:c8:9c:49:fe:23:99:07:ee:5e:e1:61:
80:3b:5a:59:71:b7:e7:26:e5:65:4c:e6:19:8d:8c:
f6:05:20:dd:96:d0:13:3d:53:6e:5d:4d:e6:df:2e:
c2:fc:0c:1d:8b:cf:65:af:e4:be:d6:35:e4:a9:d8:
24:ba:b8:32:f6:1c:0a:8c:61:bf:a7:23:3f:55:6f:
d2:76:58:f1:69:87:89:16:60:1e:9e:67:55:bc:32:
f1:3e:e2:fd:48:82:37:b6:e3:bc:8d:df:6c:45:bf:
50:fc:71:b4:f7:ef:4d:3d:0f:66:ce:40:7e:9a:0c:
0b:46:69:3a:e0:c2:de:40:f3:ec:d6:4b:f9:d6:aa:
7d:2e:85:b2:e6:b3:f0:4f:ff:26:65:09:98:8e:4a:
61:bd:0b:5e:17:6a:f7:a5:33:dc:c6:74:57:c6:c9:
e7:63:95:61:7a:02:e7:75:cf:61:aa:89:75:5f:1a:
2d:14:d0:5f:58:26:c9:b6:1e:79:16:e3:ec:6a:8b:
cc:cd:fd:32:b9:42:ec:4d:4f:56:f6:b7:3e:1b:fa:
44:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:86:22:D7:51:8E:70:01:D8:97:99:B6:B5:86:28:5D:56:25:35:06
X509v3 Authority Key Identifier:
keyid:24:13:A3:41:96:7A:ED:BE:52:A8:B1:1C:79:CB:13:91:1A:4A:9F:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBOjQZZ67b5SqLEcecsTkRpKn3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ff6401-1f00-4b74-ab99-4d9296e9b3ae/1/JBOjQZZ67b5SqLEcecsTkRpKn3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cd:30:b3:d9:3d:97:ed:7f:84:52:82:ed:2c:69:24:df:99:
dd:3f:df:a2:41:e2:b8:d5:cd:0c:bd:ea:33:08:dd:3d:e3:8d:
2c:c5:4d:0b:a7:36:d7:5f:9f:e6:81:f9:92:30:03:3f:84:2f:
54:b8:7f:46:0a:4b:7a:98:7f:65:4d:51:79:2a:0e:2b:8c:11:
6c:db:01:f8:3c:7f:72:f1:fa:60:a4:59:03:04:ba:41:f9:d7:
ec:04:fe:0b:a9:ed:7f:fc:cc:14:58:c5:fb:3d:e6:6c:4e:dd:
d6:b4:33:92:cf:4a:07:51:00:91:50:a1:c0:71:1d:a1:77:8f:
9b:06:98:db:a8:33:48:28:74:c2:74:90:ef:18:6b:6e:8e:a9:
93:b0:74:c7:7b:79:d2:28:ae:af:3d:5c:23:31:97:d3:34:e6:
87:1e:a6:f1:d1:57:e7:59:21:98:43:b7:d6:ac:d5:2f:1e:aa:
17:fe:56:a1:b5:02:78:a6:35:f6:31:3b:70:38:25:d9:d2:bb:
10:23:20:83:5b:26:a7:7a:fc:f0:93:5d:3a:5e:39:d8:61:1e:
ab:45:4f:d0:03:8d:82:7a:92:fa:36:f8:9e:03:97:2a:ef:fb:
81:31:19:73:ff:83:73:77:db:a8:13:83:c0:ca:b4:e8:64:34:
77:94:f5:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:56 2025 by rpki-client