Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
File: JWBlthZq75b8_zoupW_f_TkPMWY.mft (raw, json)
Hash identifier: AKAXnATPiefrAFvOwVmZgf57Pn8w72b/3IWTLh7KcaM=
Subject key identifier: EF:7B:9F:CF:DD:40:0D:C4:01:94:EA:3E:0A:24:8E:B6:4A:CF:7E:31
Authority key identifier: 25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
Certificate issuer: /CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Certificate serial: 019A71B7E189D50C8D9D78B101DCE65D05AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
Manifest number: 02EA
Signing time: Tue 11 Nov 2025 07:01:07 +0000
Manifest this update: Tue 11 Nov 2025 07:01:07 +0000
Manifest next update: Wed 12 Nov 2025 07:01:07 +0000
Files and hashes: 1: JFbIS27IKVFB-sXMdYdpnlEymqA.roa (hash: y1iRyb0r9qXHHkGFrahYiSMyCM8wsIM4hJtuQx44zzA=)
2: JWBlthZq75b8_zoupW_f_TkPMWY.crl (hash: SBcCHu8uxQj4Kwe9u9F+o/46x12AUT/5OSzJqQQ00fo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e1:89:d5:0c:8d:9d:78:b1:01:dc:e6:5d:05:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=256065b6166aef96fcff3a2ea56fdffd390f3166
Validity
Not Before: Nov 11 07:01:07 2025 GMT
Not After : Nov 12 07:01:07 2025 GMT
Subject: CN=ef7b9fcfdd400dc40194ea3e0a248eb64acf7e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:17:4f:ac:3a:5b:fc:76:e0:62:c1:2b:54:96:
d8:d1:8b:d9:19:e9:00:12:c5:4a:bc:1a:e2:ef:46:
b1:ed:ed:cd:fc:da:7f:d8:24:fc:61:28:b3:be:01:
70:18:3c:f1:d1:8b:d6:5b:d6:67:69:8b:07:67:ff:
9a:de:70:d9:cc:d7:b0:73:bd:0c:02:fc:8b:65:17:
91:00:fd:6a:2d:3a:92:d6:1c:64:3f:56:df:c5:a3:
ff:c6:c2:3a:34:c2:c9:65:81:04:d9:1d:59:ca:84:
88:fd:cc:b4:1d:06:1f:19:a3:02:ed:b2:2a:a2:fd:
83:ab:aa:89:d4:73:d0:d3:64:01:62:ae:41:2d:f0:
93:49:95:ba:6f:ea:14:ca:8e:db:fd:1f:c3:95:df:
78:fa:29:9e:83:9d:28:af:ee:62:74:6f:42:f7:ef:
55:dd:95:f0:73:9f:99:e2:43:9a:33:1b:e9:9b:c4:
54:cd:3e:e2:d3:d9:cf:f8:a1:7d:4e:2f:59:7e:89:
68:24:10:06:b9:ec:7b:c9:08:5d:f5:6a:d4:02:5b:
e1:f6:a9:9a:09:87:65:de:8a:7a:71:de:4f:eb:9b:
6d:50:65:1f:60:11:b0:87:e3:9c:ce:0e:0f:c0:5a:
ce:75:1b:e5:4c:9c:8f:f3:c9:f5:fe:44:3b:ca:7e:
42:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7B:9F:CF:DD:40:0D:C4:01:94:EA:3E:0A:24:8E:B6:4A:CF:7E:31
X509v3 Authority Key Identifier:
keyid:25:60:65:B6:16:6A:EF:96:FC:FF:3A:2E:A5:6F:DF:FD:39:0F:31:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JWBlthZq75b8_zoupW_f_TkPMWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/8cdc48-2822-4599-bb69-8c456af6b6bb/1/JWBlthZq75b8_zoupW_f_TkPMWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e7:dc:0a:f6:5a:45:48:71:4d:64:c8:58:00:7c:02:7a:7c:
4f:29:56:c0:2c:3a:5a:67:6d:bb:99:84:b5:6d:5f:89:db:aa:
28:08:35:69:e2:e6:17:e3:20:12:09:da:af:4d:59:d1:84:58:
ce:ca:75:4b:d7:b6:46:9d:29:b5:d2:e1:87:80:a6:1d:62:3c:
eb:d2:9b:5d:6f:c5:26:99:c7:06:74:3b:6d:9f:e9:8b:a1:96:
e2:1b:e4:3c:83:28:0f:8f:32:b5:8b:56:e6:24:08:73:70:cb:
e9:95:24:87:32:1b:15:a5:e5:3d:02:1b:f6:e9:05:73:1c:fc:
15:b9:5e:ee:c5:8c:89:bb:06:b9:a2:9a:7b:32:fe:b9:66:a7:
c7:56:7d:05:07:50:e6:9a:47:85:0a:23:95:d4:d5:65:c7:2b:
48:ea:7a:22:f1:db:b9:17:7b:9b:9c:1b:ca:8f:34:e8:2e:10:
83:b3:90:1c:5e:76:a7:be:d4:5d:6d:c3:b5:10:e1:ea:bd:c5:
71:e5:d6:e9:69:af:ba:be:89:c6:65:7b:08:06:a9:15:44:24:
8f:44:cb:07:1a:ca:b0:ac:13:4c:ef:4b:82:c5:97:29:e7:c5:
af:a6:7a:b2:3c:8f:55:a1:a1:b5:df:6a:d5:f2:d6:d3:ee:d0:
3b:b0:14:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:05 2025 by rpki-client