Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
File: _JKCpXb9YqCiQWa17B8STkJY20k.mft (raw, json)
Hash identifier: fMBQm/Eo6w4NB0nBGN2HAginTTZ/HX/i8qs2ZOxp5LI=
Subject key identifier: 1B:73:EC:B1:57:8E:27:94:A1:78:D8:E1:9F:8B:64:A7:31:4E:3D:99
Authority key identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
Certificate issuer: /CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Certificate serial: 019A71EEDFD2F9E52FF19919A79130581CB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
Manifest number: 0692
Signing time: Tue 11 Nov 2025 08:01:11 +0000
Manifest this update: Tue 11 Nov 2025 08:01:11 +0000
Manifest next update: Wed 12 Nov 2025 08:01:11 +0000
Files and hashes: 1: SpZQMZasDnFvSHk0hsSQsjr39Pk.roa (hash: 0yRKRNGlypprPpNYWnGY3uPL+vLYa/tp92ZMslVRtjs=)
2: _JKCpXb9YqCiQWa17B8STkJY20k.crl (hash: cRtb2HDikVYWMeOY1AWZQkm0ALao+OyC2OXRdb75hUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:df:d2:f9:e5:2f:f1:99:19:a7:91:30:58:1c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Validity
Not Before: Nov 11 08:01:11 2025 GMT
Not After : Nov 12 08:01:11 2025 GMT
Subject: CN=1b73ecb1578e2794a178d8e19f8b64a7314e3d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:23:9f:47:23:cf:76:ee:fc:60:f5:52:6b:05:
6b:15:ae:24:6e:e6:86:8c:f1:e4:ce:8a:73:f1:48:
cc:f7:b6:ec:b3:8a:21:fc:87:be:dd:6a:d6:3c:b6:
d9:9b:dd:cf:11:1a:a4:02:40:09:f3:c8:cb:4f:b1:
c0:64:ff:67:db:84:38:94:49:a3:f2:f0:82:5c:61:
4f:51:81:cd:c6:3c:fe:4f:68:b7:fa:3b:ad:58:5f:
a9:ff:12:29:48:de:6e:31:60:dc:e2:50:f7:bc:37:
14:d9:41:0b:95:93:e7:8d:d5:e6:6d:14:ae:fb:cc:
d6:b6:01:96:b7:45:30:3d:32:54:f7:09:e6:ec:a5:
54:5d:c8:e4:82:32:dc:36:ef:6d:44:ef:f4:f6:1a:
61:a4:58:28:e5:b7:6b:98:85:1c:27:29:16:d9:da:
dd:5d:ac:52:44:8d:9f:1c:a6:a2:97:80:7d:c4:c4:
c2:14:b9:e7:c7:28:39:df:c1:6b:c9:7d:ad:14:39:
f9:00:45:6f:eb:e3:91:f1:7e:f4:ac:5c:ac:3f:1f:
44:e6:5e:69:97:d5:16:d3:7e:17:5f:0f:61:4d:f0:
e4:b9:2f:d5:2d:05:50:7f:71:15:0e:26:79:32:1f:
9a:eb:aa:dc:c1:dc:7e:84:cf:86:05:aa:1d:08:2f:
be:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:73:EC:B1:57:8E:27:94:A1:78:D8:E1:9F:8B:64:A7:31:4E:3D:99
X509v3 Authority Key Identifier:
keyid:FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:c2:63:68:29:ee:28:c4:bf:98:e8:fd:b2:f8:87:a4:d8:5e:
16:0c:1f:ba:5f:72:0f:13:21:be:e9:97:d8:60:b4:6a:f9:80:
93:f8:1f:2b:91:7b:28:33:2a:92:13:9c:da:9d:0f:ca:01:ac:
15:58:40:73:7a:bc:d6:58:08:8c:9e:7f:ae:95:a2:21:38:4c:
36:7c:cf:f4:87:1e:c3:5f:f6:cc:76:2e:61:fd:1f:85:ae:a0:
c1:9c:82:96:a3:5a:b6:da:7f:6f:31:79:30:4a:e7:08:1b:05:
ed:67:9b:9f:1f:df:21:ea:69:e0:b7:a6:0d:02:b9:a5:d0:a1:
14:97:10:eb:85:4c:9d:04:9e:db:16:f6:4d:8e:43:e3:84:f9:
f3:17:d7:03:2a:9e:97:7a:6a:3b:09:6e:32:24:9e:21:1d:7d:
c1:4f:69:fe:f5:e2:6c:ec:dd:52:ea:3f:c5:ae:1a:cd:1b:24:
c1:75:17:14:0a:11:73:00:a4:bd:6d:c0:02:5a:23:3f:85:55:
7d:27:03:62:00:81:77:98:1d:39:a6:f5:e2:9c:c0:11:0d:e8:
fa:10:5c:ff:37:f3:bf:d9:b9:f3:99:9f:ab:af:cf:00:bc:89:
ae:23:29:0c:62:e6:43:bd:70:b5:c5:28:1c:4e:87:e0:4b:b8:
f8:8e:23:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:18 2025 by rpki-client