Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
File: JGdgNiMUO9G8eo_J2OedlVlhGGA.mft (raw, json)
Hash identifier: EnEeFu7nuxGDC/Wt/bs0t2ufpfgjRjLSYTrMY1NmrMU=
Subject key identifier: 20:D2:59:3F:04:C1:D1:84:0A:86:7D:54:12:91:4A:94:E4:50:6A:B2
Authority key identifier: 24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60
Certificate issuer: /CN=2467603623143bd1bc7a8fc9d8e79d9559611860
Certificate serial: 019A71EE7202AC63201B5916F848958D4E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
Manifest number: 15F4
Signing time: Tue 11 Nov 2025 08:00:43 +0000
Manifest this update: Tue 11 Nov 2025 08:00:43 +0000
Manifest next update: Wed 12 Nov 2025 08:00:43 +0000
Files and hashes: 1: JGdgNiMUO9G8eo_J2OedlVlhGGA.crl (hash: RAOZIjU5ZpsrOj83KweDmIwFV02kX5xlI73KQLXPn0w=)
2: l2gwnONgJJmc9aNFKVJiVvqzx2A.roa (hash: yyAEtXytlbDfVZErAQi0Mk5MO/WKce+c66TOzBmN5Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:72:02:ac:63:20:1b:59:16:f8:48:95:8d:4e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2467603623143bd1bc7a8fc9d8e79d9559611860
Validity
Not Before: Nov 11 08:00:43 2025 GMT
Not After : Nov 12 08:00:43 2025 GMT
Subject: CN=20d2593f04c1d1840a867d5412914a94e4506ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9a:33:93:d9:c7:55:88:fb:d2:aa:5f:45:66:
54:2f:e1:74:a4:93:4e:1a:fe:07:2f:ce:3b:94:c4:
e7:b6:c2:ad:a3:4d:8a:f0:62:15:98:c8:e7:11:ae:
b0:f5:9a:12:88:78:e7:4b:a4:48:9d:57:76:34:3b:
34:f0:f8:cd:c2:d0:09:75:27:ff:10:74:8e:2c:b9:
d8:cc:0d:cf:67:3d:80:4b:a4:9c:b0:d5:0e:84:7c:
3a:2c:da:e6:4e:4f:cc:70:23:4e:cd:c1:46:81:eb:
ed:6f:ab:56:94:0b:ea:2f:1f:d4:46:d0:1d:3c:8a:
2e:d2:02:5f:cc:cf:2c:09:df:7d:33:df:24:0a:6e:
f8:f0:8e:6b:0a:1a:97:e0:87:ee:60:5d:10:4f:0e:
57:3e:d3:7d:8f:b1:1e:f5:56:71:0c:39:6c:62:92:
49:87:01:75:57:27:82:fb:d0:67:cf:8e:09:ea:4c:
e4:94:a3:46:dd:be:ac:1b:7d:95:8c:07:db:ed:1b:
40:60:20:ba:8e:e0:55:16:ac:b2:d7:2b:35:9c:9c:
e3:04:0b:3b:0e:6f:f6:94:45:e1:26:7e:73:cb:bd:
0f:09:93:86:7e:ac:4a:16:08:53:45:45:48:2d:f9:
78:08:fe:7a:ca:81:12:4c:05:c0:ba:2f:f3:12:9d:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D2:59:3F:04:C1:D1:84:0A:86:7D:54:12:91:4A:94:E4:50:6A:B2
X509v3 Authority Key Identifier:
keyid:24:67:60:36:23:14:3B:D1:BC:7A:8F:C9:D8:E7:9D:95:59:61:18:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGdgNiMUO9G8eo_J2OedlVlhGGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/fde44b-f2c0-41e4-b141-fb4642d2d9a6/1/JGdgNiMUO9G8eo_J2OedlVlhGGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:7a:ed:a0:76:b9:c5:84:b3:6d:fa:b5:ad:d0:e0:1e:f9:97:
ce:8b:c8:6d:60:23:4b:72:51:77:73:16:f1:82:f5:22:99:48:
b6:30:bb:13:17:57:28:6b:1a:f7:ce:c9:d9:ce:a6:92:9b:03:
e3:ab:32:b6:db:ae:4b:a3:ee:51:8a:c5:18:b5:44:55:7e:1c:
9d:6a:6c:ad:70:d6:5c:96:96:ed:88:b8:55:82:bf:78:8d:b1:
6a:cf:84:a7:eb:0b:a0:7e:36:a8:d7:09:4b:e2:04:59:3d:46:
bb:42:17:ca:3a:c2:33:41:89:46:a2:32:c4:8c:fe:91:de:4c:
aa:4b:cf:12:2e:c0:70:af:d5:21:65:42:b1:1f:85:ae:83:55:
fc:3c:f3:fd:e7:b4:08:f6:d8:59:b7:ff:fa:90:0a:0a:02:8b:
79:48:17:28:41:26:26:ea:3a:7b:e0:4c:53:bd:b7:69:aa:d7:
05:b4:d4:63:12:af:55:d6:78:8b:b9:85:47:f6:41:c2:c1:06:
25:31:e3:f4:cd:6f:57:2f:d2:39:8b:58:8a:cd:cf:44:a1:39:
80:09:24:00:29:a6:70:2d:cc:bb:3b:de:f3:92:b8:8c:3d:46:
ce:74:05:6e:9e:39:84:b0:74:6b:e7:f2:48:8d:dd:49:6a:5d:
7c:67:80:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:00 2025 by rpki-client