Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
File: JlhzriNQ0OPow1U7-QZGESdk4cA.mft (raw, json)
Hash identifier: pyLpe55HuEzFzXqm/8oiT1MyhuQK6+QhomNDDR26fyg=
Subject key identifier: 64:AC:A9:8E:57:AB:B9:26:FF:E8:F1:42:81:7E:1E:07:2F:9F:4A:8E
Authority key identifier: 26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
Certificate issuer: /CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Certificate serial: 019A240A2CFD6D9E70F80A3A2FB56FC09413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
Manifest number: 0FED
Signing time: Mon 27 Oct 2025 05:00:37 +0000
Manifest this update: Mon 27 Oct 2025 05:00:37 +0000
Manifest next update: Tue 28 Oct 2025 05:00:37 +0000
Files and hashes: 1: JlhzriNQ0OPow1U7-QZGESdk4cA.crl (hash: C6HBEOQ8QGhtGE76mNLlIFxIc+tCF7YHxmZ6KuAKA7M=)
2: b_FpEo5mzbhghU7FQIOJJKiIivU.roa (hash: HOe4R50HkhUSwXgPcBKFKJCslwOuwtpIjbbm5rlZl9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:2c:fd:6d:9e:70:f8:0a:3a:2f:b5:6f:c0:94:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=265873ae2350d0e3e8c3553bf90646112764e1c0
Validity
Not Before: Oct 27 05:00:37 2025 GMT
Not After : Oct 28 05:00:37 2025 GMT
Subject: CN=64aca98e57abb926ffe8f142817e1e072f9f4a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5c:17:b2:cf:ae:b5:75:da:d5:40:b1:a3:c1:
cd:0f:02:17:8c:9b:59:ff:04:b7:7f:06:19:31:d6:
e4:d2:bb:72:31:c4:ce:30:a0:0b:2a:6c:b9:7c:04:
8d:a5:93:15:97:7e:91:04:b2:e0:cd:01:f7:7e:57:
ed:cf:ba:76:9f:6a:e2:b9:ec:e1:6a:f3:ef:57:40:
6d:a8:1a:5f:50:8e:7a:3b:2b:72:ac:10:ff:ad:8c:
eb:de:81:50:14:cf:0f:0f:4a:20:ec:30:fd:e0:af:
fe:db:b7:9b:89:a6:be:8c:5a:13:5c:a4:d5:9a:ca:
45:65:9b:66:b0:25:f7:d8:41:3b:d0:8c:fd:87:12:
14:70:b9:22:ec:c9:e9:52:6a:86:e2:1c:33:ed:c0:
5f:7d:99:cf:ed:c5:85:98:ea:87:7c:40:e0:10:61:
c0:c2:6e:df:d5:ca:bd:b2:8b:20:71:44:dd:32:f6:
ce:49:a6:fd:96:19:0b:e1:87:c1:af:29:4e:6f:ee:
f0:ce:54:b1:96:7b:4d:2d:e9:71:a3:d0:38:fc:2c:
28:c0:c5:63:c6:5d:ef:76:65:1d:2a:39:70:b1:5d:
d0:5e:87:aa:5a:e6:a7:0a:42:a8:e6:55:26:8a:8d:
e7:8b:1e:07:0f:d8:e9:c7:90:cd:14:fb:80:54:70:
1a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AC:A9:8E:57:AB:B9:26:FF:E8:F1:42:81:7E:1E:07:2F:9F:4A:8E
X509v3 Authority Key Identifier:
keyid:26:58:73:AE:23:50:D0:E3:E8:C3:55:3B:F9:06:46:11:27:64:E1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JlhzriNQ0OPow1U7-QZGESdk4cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/63c344-b50e-4af0-9e9e-fcd4f797d356/1/JlhzriNQ0OPow1U7-QZGESdk4cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5a:2d:4c:8b:da:ed:2f:17:21:47:92:88:01:b3:ee:6a:48:
49:d4:48:f3:89:ab:69:0d:90:8e:f4:2f:86:dd:c3:d5:95:77:
bb:c8:04:87:10:a8:da:81:56:65:64:93:f0:bc:c4:91:b3:c3:
02:cb:a8:ed:a4:71:08:d4:51:3c:6c:c4:b2:99:98:f4:a0:14:
2d:5e:54:23:0c:a5:26:2c:2a:5e:dc:84:7e:63:b7:a1:03:52:
0c:f9:7e:3d:eb:90:96:24:1f:98:6f:97:45:8a:e5:38:8e:cb:
18:9d:f0:95:67:33:4b:45:13:c4:4e:40:20:6f:a0:a9:03:72:
d6:9e:db:fa:67:02:47:51:4f:ad:24:95:4a:35:2b:e3:48:b8:
04:f2:b0:05:11:50:d2:5c:cf:b6:88:2a:59:71:cb:3d:1f:a9:
56:60:0e:0f:c1:c1:10:bb:18:2a:66:dd:e2:c9:82:a5:86:76:
52:0d:55:60:ac:c7:2a:9e:4e:fe:a8:69:a8:24:fc:dd:75:b2:
7b:65:ae:92:79:3f:85:a4:c3:1a:03:b3:aa:f1:c1:7f:ac:75:
b9:f9:02:22:1f:ea:ef:b0:f4:4d:f0:ef:22:91:3e:53:00:6f:
b4:34:2b:e1:67:99:7e:96:f2:c2:51:60:7b:3c:f6:a4:14:f9:
ff:4f:e4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:57:46 2025 by rpki-client