Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
File: JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft (raw, json)
Hash identifier: OFOgnVYxkK4+LqGhKz7IIOYjdrc0LvmWB9fD8UkyDRA=
Subject key identifier: 22:A7:AE:54:AE:DD:49:1B:D1:CA:9E:A0:8A:F6:E3:1B:BA:70:CF:6B
Authority key identifier: 26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B
Certificate issuer: /CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
Certificate serial: 019A706E1C1806C1DEC43B61DEDD8D0C6F23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
Manifest number: 0DFE
Signing time: Tue 11 Nov 2025 01:00:55 +0000
Manifest this update: Tue 11 Nov 2025 01:00:55 +0000
Manifest next update: Wed 12 Nov 2025 01:00:55 +0000
Files and hashes: 1: JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl (hash: sn96r2LJ7TGK3zHR5YJJLXS/kBsoBHwDkVXO9lBUZck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:1c:18:06:c1:de:c4:3b:61:de:dd:8d:0c:6f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26f9888e73dee7cb5cdcfd93b2628fbc10a3e90b
Validity
Not Before: Nov 11 01:00:55 2025 GMT
Not After : Nov 12 01:00:55 2025 GMT
Subject: CN=22a7ae54aedd491bd1ca9ea08af6e31bba70cf6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:19:e7:09:a7:75:b1:1b:d3:74:e3:f6:1e:
2e:f5:27:ee:8c:cd:24:8f:4f:cd:38:3d:63:37:e3:
35:56:da:7c:fd:53:b5:e6:46:69:04:df:c6:55:c0:
98:e7:6e:0a:4f:d1:3d:30:0b:db:69:81:c9:4c:c7:
8f:66:e9:4b:8c:b7:41:e1:74:38:50:7b:4b:11:c0:
63:9a:1e:d6:bf:c7:67:c7:a0:d5:72:a1:ce:26:39:
8e:32:ae:2d:ed:b8:63:0a:e2:93:be:75:2d:c4:f1:
e8:a8:e5:62:5b:27:13:27:04:30:d3:18:25:e0:02:
c6:d2:32:77:04:0d:8d:36:6d:be:35:0a:b4:03:b7:
d7:28:d8:73:c6:c6:8e:44:c9:58:dc:2c:04:e6:bd:
78:e7:2e:b4:3d:1b:f4:2d:44:52:86:a3:82:a3:01:
db:94:04:7d:db:fa:36:be:29:97:70:79:fc:cb:c4:
03:d0:bd:6c:e1:da:74:5d:3f:8d:86:80:c7:82:c8:
b4:23:16:26:52:d2:16:76:64:c5:cd:94:02:29:ef:
06:c9:57:74:48:ba:9b:0a:2d:78:6b:77:e8:67:27:
68:5b:c3:02:ae:b7:0f:0b:d2:4f:dd:fc:90:56:8c:
1c:9f:a1:06:11:36:09:4c:31:b0:07:2a:be:9f:50:
8b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A7:AE:54:AE:DD:49:1B:D1:CA:9E:A0:8A:F6:E3:1B:BA:70:CF:6B
X509v3 Authority Key Identifier:
keyid:26:F9:88:8E:73:DE:E7:CB:5C:DC:FD:93:B2:62:8F:BC:10:A3:E9:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvmIjnPe58tc3P2TsmKPvBCj6Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/44a23d-b4e9-460e-a3db-1f82badf5c1e/1/JvmIjnPe58tc3P2TsmKPvBCj6Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2e:57:ef:4e:02:91:72:be:19:48:d2:65:e0:3a:79:c3:0f:
7c:47:1e:a1:65:eb:26:df:f8:ef:14:67:bb:e0:60:3f:55:52:
ed:b2:6d:08:23:91:62:99:db:7a:96:0a:3c:45:72:25:e8:65:
a9:d2:77:66:fd:c4:4e:3b:22:d1:0d:ed:54:55:b1:5e:9b:76:
0b:ed:fd:be:7f:b3:e2:e1:b4:2b:9e:14:76:70:51:67:82:66:
d8:fd:cf:56:54:6b:2f:88:4f:27:55:0c:2f:05:f6:ee:5a:c5:
e6:65:f8:ad:09:09:37:74:e4:47:4f:d1:55:f5:73:36:4a:70:
77:72:43:01:e0:da:c6:14:9a:40:a8:5a:30:04:b1:fb:a8:ee:
52:fd:f7:ad:f6:10:bf:d5:e5:e7:09:d6:03:b6:35:1e:13:f5:
a7:0b:71:cc:49:f9:67:f3:d1:c6:cc:a9:34:7f:75:d3:ad:30:
c3:8f:9d:37:bc:4f:d5:cb:87:2f:f1:60:8d:53:25:13:77:60:
b6:00:93:3e:a2:c8:e5:49:a0:1b:92:bc:35:c4:17:49:a2:ac:
7b:2c:9b:f4:7c:1f:42:8a:fc:ec:02:18:7c:97:d1:b2:c5:c4:
bc:b3:65:08:75:3d:28:9f:cd:7e:ff:2d:49:65:8f:7a:8e:7a:
0b:cc:c6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:20 2025 by rpki-client