Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File: JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier: veg5xrPR+F+gbSa05Jtl8Ac1tChMk77Q94Azc24viLU=
Subject key identifier: D1:DF:A0:FB:9E:82:A3:06:8E:38:23:2C:FE:20:1F:8F:81:91:53:1D
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 019A4E18DD01CAC5AB5282CAE18F6C5FC4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number: 0B86
Signing time: Tue 04 Nov 2025 09:00:43 +0000
Manifest this update: Tue 04 Nov 2025 09:00:43 +0000
Manifest next update: Wed 05 Nov 2025 09:00:43 +0000
Files and hashes: 1: ITb_XVl2tA11J6nAknkJ07xuM_A.roa (hash: Te0z4RiC3nV17xojwnpgYVjVq9us6VbZr6q0RMM9u2o=)
2: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: RQbq1zOLw8rd/yrqrbi3YaqixR3xV4fCqg+bdYA3dfk=)
3: WyMoFYnAIn1sAAAmnPjWInPKCN0.roa (hash: 1MKnjj6EqbU+hUr91/B+f0YJrJKMU7mmnJwoLcY6nt0=)
4: y9KTYkCcz9X-wHblp6V4OiKB-A8.roa (hash: MiEzpatVp+ndU9E4bxMOGWBIiRH8JujeOmOr6aRsU1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:dd:01:ca:c5:ab:52:82:ca:e1:8f:6c:5f:c4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Nov 4 09:00:43 2025 GMT
Not After : Nov 5 09:00:43 2025 GMT
Subject: CN=d1dfa0fb9e82a3068e38232cfe201f8f8191531d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ff:9c:0c:66:2b:61:4c:a9:5f:58:c4:50:5f:
8a:3e:69:fb:5c:af:90:5c:05:7d:09:60:90:c4:be:
cc:8e:cb:e2:b1:f3:c1:c9:7b:f8:5e:8b:0a:3a:a8:
a9:f4:99:fc:de:d6:4b:6a:d4:63:12:f4:73:fd:5b:
0e:01:d1:67:e0:b6:41:3d:f3:3c:ad:7e:ed:24:36:
df:31:c7:c3:a4:68:11:56:91:01:ac:c5:a8:86:3c:
df:88:39:9b:3b:45:dd:a2:3b:44:db:f4:32:0a:e1:
41:25:14:03:46:8a:56:78:a7:fa:8f:56:18:32:f4:
f0:9a:0f:8e:d9:7f:57:7c:35:f6:74:42:6b:3f:06:
47:ee:90:ea:a7:da:87:d6:4b:9e:88:63:c1:70:c9:
d6:ab:05:ae:22:b9:bc:c2:91:a7:70:13:5e:9e:df:
2d:56:de:3b:d7:38:e2:83:9b:6d:8b:7b:cd:f7:35:
c2:cd:8b:f4:38:40:78:98:d4:78:39:0f:43:d2:1a:
77:24:7a:64:7e:fe:26:1e:d7:32:2a:dd:02:13:38:
9a:9a:c8:e3:6a:9f:ec:66:8a:6a:9c:fd:a2:af:a9:
21:f5:88:9b:fd:f9:99:f4:ba:5d:f1:31:2d:65:ab:
4c:42:8c:bf:5f:01:b4:bc:98:84:8a:7b:20:49:74:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DF:A0:FB:9E:82:A3:06:8E:38:23:2C:FE:20:1F:8F:81:91:53:1D
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d9:96:fc:e2:a1:5e:97:18:47:b7:0e:21:93:9b:11:ec:df:
ec:58:7b:89:16:9d:ae:c0:ba:6c:60:10:57:8f:e0:91:72:b5:
3f:a6:ba:9c:89:47:34:e8:63:7a:bf:7f:0f:d0:7d:83:fc:20:
77:ed:43:17:20:4e:de:1c:ca:5d:48:1e:54:56:48:31:d3:ba:
08:34:3a:5a:f3:86:ad:87:6d:63:f9:92:62:00:96:9f:fb:d8:
93:2c:82:89:0e:f5:85:d3:33:32:bf:e6:b2:af:ab:ec:5b:41:
d1:60:7a:3a:1d:18:d4:f0:03:f4:2f:83:b0:9e:db:8b:9a:34:
ec:c1:61:c1:ca:c4:04:21:6e:17:0a:5d:76:cb:d6:b1:13:78:
e3:3f:23:55:02:44:06:53:89:32:34:e7:fc:7d:50:a1:12:1e:
5b:cb:fe:92:9c:77:4e:23:5d:aa:f8:d8:09:4c:50:06:ab:b2:
1d:0b:67:17:90:b3:13:a4:84:1f:ad:42:b7:a0:04:e0:bc:7e:
9f:16:70:35:a7:5d:f6:ae:2c:52:55:98:be:55:d6:57:44:a2:
67:78:4b:68:7e:24:70:3b:ae:85:a6:df:dc:c2:ff:79:cf:94:
62:f0:3f:33:3c:ab:15:97:3f:e4:2b:3c:a8:c1:71:a9:ca:dc:
8d:28:c4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:35 2025 by rpki-client