Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
File: JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft (raw, json)
Hash identifier: HG92Ak5VZvZS7ImXZW8eMfz73sThqYbGYs495Hek6EE=
Subject key identifier: 73:DE:CA:E8:8C:09:F2:7A:DE:F4:78:20:05:D5:E4:6A:5A:75:D6:F2
Authority key identifier: 24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
Certificate issuer: /CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Certificate serial: 019A7225C93B2DEB2ADF88DABDB554433F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
Manifest number: 0A63
Signing time: Tue 11 Nov 2025 09:01:10 +0000
Manifest this update: Tue 11 Nov 2025 09:01:10 +0000
Manifest next update: Wed 12 Nov 2025 09:01:10 +0000
Files and hashes: 1: JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl (hash: opk7HgBtoftX3PvGEjgTfmTqygXaZQkrb1dt85vx4DQ=)
2: a4Rgp8ho7PzxQQPKwdBZtuvECRY.roa (hash: RsAUUp6bEgrlBTHA6hUkPwZnwkAi94Oxg46FrwXwg0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c9:3b:2d:eb:2a:df:88:da:bd:b5:54:43:3f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2453da50e879bba7d7cff4f07d2caa5e9c01087d
Validity
Not Before: Nov 11 09:01:10 2025 GMT
Not After : Nov 12 09:01:10 2025 GMT
Subject: CN=73decae88c09f27adef4782005d5e46a5a75d6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:c5:09:7f:7d:a6:ca:77:96:21:d5:d0:a6:
ee:5c:b5:35:45:7b:ae:1a:6f:c5:16:07:9d:75:10:
9d:77:1b:99:ac:31:f9:11:ed:f7:fc:ea:a5:45:c8:
c2:4e:2a:d4:b7:aa:4e:3d:e8:8b:38:50:a3:d0:e1:
93:d0:d8:e6:47:90:89:fe:4f:38:c8:27:4e:63:b6:
e2:bc:fd:3d:9d:7e:f6:72:93:1d:e1:4f:e3:29:f8:
2f:3a:f4:64:27:60:66:c2:3f:30:05:ac:d5:14:88:
5c:49:99:0d:fd:6b:26:5a:08:3e:09:fb:49:85:99:
61:bb:c3:0e:38:6c:0e:98:04:01:21:ab:5e:65:58:
27:2f:50:f0:0b:8f:7d:a9:9f:85:b7:d6:14:42:35:
ed:c7:b6:31:a9:8a:c2:88:75:28:80:ca:1b:0b:3c:
2d:b7:4f:29:d1:71:46:89:23:30:dc:e3:be:02:2e:
bf:91:8e:2b:3a:b2:4c:3e:cd:ee:ac:79:69:cb:fd:
ca:5e:c2:1e:6c:99:5c:a7:0a:1e:e5:2e:c5:97:32:
f4:55:38:2b:b5:1b:19:cc:8b:f2:06:ba:92:30:63:
a6:55:06:e5:a4:3d:41:43:c9:51:f1:86:e6:8d:13:
02:30:12:8d:51:36:1d:3a:74:db:e7:59:76:7f:f0:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:DE:CA:E8:8C:09:F2:7A:DE:F4:78:20:05:D5:E4:6A:5A:75:D6:F2
X509v3 Authority Key Identifier:
keyid:24:53:DA:50:E8:79:BB:A7:D7:CF:F4:F0:7D:2C:AA:5E:9C:01:08:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFPaUOh5u6fXz_TwfSyqXpwBCH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/2f78cf-3260-433b-9e91-e43a52b604ca/1/JFPaUOh5u6fXz_TwfSyqXpwBCH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1a:b9:40:6d:ab:14:8a:ef:c3:01:2b:2f:ff:b0:cc:6d:90:
9e:72:fb:a3:d3:17:ff:2a:e8:6b:fd:85:6e:24:01:0c:35:af:
1c:6b:29:21:c7:60:15:eb:05:f9:91:12:9e:ee:fa:dc:98:c9:
73:4b:ed:52:18:6e:ce:76:27:79:cf:8a:df:de:40:df:89:2d:
be:a4:39:63:2b:f7:84:0d:2f:85:77:5e:72:77:d8:61:a7:8d:
54:59:ea:8d:48:dd:db:69:7f:f8:09:ba:07:c9:1b:69:d8:5b:
5e:af:73:cf:24:12:00:00:7a:b8:11:b4:0c:c6:98:5e:b9:d0:
ab:94:6b:a7:19:28:34:8c:14:c3:f4:83:c3:2f:5a:3f:84:c6:
f8:ae:12:c5:ea:52:43:f6:d1:5c:de:cc:a7:61:49:af:7e:6c:
63:df:ff:4f:9b:51:99:b5:c2:ab:47:af:09:1e:a1:23:9b:73:
ac:e5:3a:a4:10:ae:5c:31:a7:68:50:e4:cd:7b:44:67:3a:dd:
8d:22:8e:b9:a2:02:ed:15:4c:26:30:e0:3b:16:51:b6:6e:28:
3c:f2:c7:6a:50:7d:0b:27:03:9a:7a:6c:62:81:30:de:c7:a5:
7f:57:12:40:8b:22:2b:10:39:b2:0b:61:52:92:a8:44:2f:aa:
77:1e:b5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:38 2025 by rpki-client