Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
File: RJRpaPL33ZUOpJuHc33x9q69u1M.mft (raw, json)
Hash identifier: 4xqgOawYgD1m5Rpo+fQnWAgF4ZG2vp/YilD0xwTtHjM=
Subject key identifier: 89:AE:C7:A3:E0:6F:B0:AC:53:B3:44:BB:D5:FC:49:1E:35:B4:1A:B6
Authority key identifier: 44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
Certificate issuer: /CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Certificate serial: 019A533ED5F80FAB7CDCC70CA09ED0D29FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
Manifest number: 0869
Signing time: Wed 05 Nov 2025 09:00:18 +0000
Manifest this update: Wed 05 Nov 2025 09:00:18 +0000
Manifest next update: Thu 06 Nov 2025 09:00:18 +0000
Files and hashes: 1: PoLYxkMVycTNzRpiJblUxxrqJt0.roa (hash: Lw/mDGQLMZUq6fBec8pNWkJSbSgJOh8v7cZOSqwybpw=)
2: RJRpaPL33ZUOpJuHc33x9q69u1M.crl (hash: ZPdVP3nhn4L8QkgnJng8Oq5F9hG2XviU1jWHjJOglaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:d5:f8:0f:ab:7c:dc:c7:0c:a0:9e:d0:d2:9f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Validity
Not Before: Nov 5 09:00:18 2025 GMT
Not After : Nov 6 09:00:18 2025 GMT
Subject: CN=89aec7a3e06fb0ac53b344bbd5fc491e35b41ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2e:d0:06:65:a3:57:c8:96:3b:b9:c4:a0:b0:
23:18:be:6b:bb:5f:07:a6:12:fb:b6:7f:93:9e:b1:
03:c8:ff:97:a1:92:36:78:73:72:52:ec:40:ea:bb:
77:c5:ab:38:6f:a8:31:c5:83:43:a6:e1:4b:f0:a0:
b0:ba:a1:be:74:9b:d0:48:3e:e2:90:9d:b2:19:f5:
1c:ee:e7:4e:4f:58:85:cf:9f:e8:f5:ac:d0:ca:7b:
2d:8c:b1:65:2d:a2:b9:0b:24:5e:77:1d:61:75:a8:
a4:10:34:f4:98:6e:0b:cc:dd:68:0e:f3:2b:b2:85:
3e:0d:79:ec:d6:4f:fb:21:64:c7:ab:c2:a6:37:cd:
38:7c:b2:db:2c:e0:2d:dd:c4:c0:bf:3e:bf:cd:7e:
95:6f:93:e9:d8:0b:78:4b:e1:03:4e:74:33:94:c4:
d9:e0:b0:07:aa:97:49:17:7a:b9:48:4d:99:84:14:
4d:2b:68:4f:47:c8:e5:04:14:2e:a9:f9:96:9d:c6:
62:ae:5b:47:81:b4:86:58:dd:36:b0:67:31:8a:d3:
5b:08:19:2b:31:97:ed:1a:16:50:a8:98:2b:c5:27:
5c:02:17:dc:84:51:89:b1:d0:83:bc:d4:9f:c7:0f:
11:6a:62:ed:0c:3b:b3:e8:b2:0d:4b:a6:e0:e0:ed:
ed:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:AE:C7:A3:E0:6F:B0:AC:53:B3:44:BB:D5:FC:49:1E:35:B4:1A:B6
X509v3 Authority Key Identifier:
keyid:44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b7:97:3e:e6:d1:5f:81:9d:f9:29:b3:70:97:9e:f8:c4:ce:
86:ec:9f:a6:04:4d:66:67:4f:aa:89:c6:2e:31:93:0e:ce:26:
0b:41:5d:76:6e:5b:cf:00:b0:d6:94:9c:4d:5c:1d:20:56:9e:
ee:dc:34:1c:20:ec:b9:9d:fa:fe:1d:0c:3c:29:f2:03:d8:bd:
98:ee:4a:6e:5c:0f:e3:4f:95:6e:d3:9e:c5:a4:ea:ad:8a:ac:
91:35:35:e6:48:89:ee:f2:38:e0:36:8a:e2:e1:a4:cf:f3:c4:
2d:1d:7d:dc:cd:ac:f4:f2:3d:9d:4c:27:b6:1e:5c:32:90:3f:
b6:93:5e:f4:7f:cb:51:86:99:6f:27:f2:c2:85:5d:13:e0:c7:
13:f2:43:a9:fd:11:2c:6c:ed:60:d7:59:66:3a:3f:2c:aa:39:
c3:46:4e:32:60:bf:22:ce:53:a1:d5:b2:fa:83:6e:79:77:c7:
1c:1f:a1:b9:c3:5d:2c:00:f7:d0:8a:c4:66:3c:73:9b:9c:76:
b1:86:6c:be:24:07:06:2f:21:b2:12:bc:07:0c:ad:66:15:75:
a8:d6:6d:ff:aa:d6:46:e9:69:4d:9a:ca:d7:b2:d9:a7:57:33:
50:e3:2c:31:15:90:78:ed:84:43:0a:5b:b1:22:7e:24:aa:4d:
e1:1d:c6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:17 2025 by rpki-client