Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft
File: JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft (raw, json)
Hash identifier: 0SaQEI5TIZeeXymfd5YA7H1/hbdLghF5MG7TPIxKUrk=
Subject key identifier: 63:33:00:C6:26:77:B5:BC:9B:0C:AB:05:77:C1:75:63:A6:E7:BF:C7
Authority key identifier: 24:E9:40:DB:19:0B:69:2C:D1:B0:D5:83:ED:B6:D8:C3:61:12:45:69
Certificate issuer: /CN=24e940db190b692cd1b0d583edb6d8c361124569
Certificate serial: 019A714A2B00742365597930ECE474BD4424
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft
Manifest number: 01AD
Signing time: Tue 11 Nov 2025 05:01:17 +0000
Manifest this update: Tue 11 Nov 2025 05:01:17 +0000
Manifest next update: Wed 12 Nov 2025 05:01:17 +0000
Files and hashes: 1: JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl (hash: u5SfYK1KEN52D1nnNrSe241wAGQr/J4Nljh1dfxy5KI=)
2: NDyL4QmyZMdWfVseu9H3PyESraU.roa (hash: 2KgZJolbNaz+51AuiNXbaQEgEsCh7UoocaNukepjnzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:2b:00:74:23:65:59:79:30:ec:e4:74:bd:44:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24e940db190b692cd1b0d583edb6d8c361124569
Validity
Not Before: Nov 11 05:01:17 2025 GMT
Not After : Nov 12 05:01:17 2025 GMT
Subject: CN=633300c62677b5bc9b0cab0577c17563a6e7bfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:f3:ee:73:f5:63:a3:94:5b:e0:c3:42:3b:
1a:5d:5c:11:23:f3:71:0b:00:c3:a1:eb:0d:6f:8a:
db:ea:17:e2:9a:f9:da:8f:75:0d:f1:7d:e1:05:39:
b3:92:2f:53:e9:05:44:e6:e2:d8:e8:70:44:1d:ef:
37:06:03:6a:74:57:0f:60:d8:5d:9a:68:52:c7:da:
f1:0d:45:f3:c3:30:97:1d:68:21:8e:e5:34:14:90:
8b:dc:49:f8:65:b8:14:bd:61:1b:ca:e9:94:d7:78:
01:14:49:7d:af:5d:d9:59:77:b3:9b:ae:23:0a:38:
7e:d4:57:c0:43:d9:dd:a5:be:68:90:8f:b9:59:c5:
d4:4c:7c:2a:06:a8:aa:58:30:63:b2:2d:60:a3:1f:
93:85:18:54:ec:c6:fe:ed:5a:42:63:47:89:13:97:
0e:cb:4e:df:64:c1:af:3b:87:c7:3e:15:5e:5d:c6:
da:18:fa:3f:de:a3:31:46:bd:78:9f:93:43:41:77:
83:c3:16:e4:e0:37:eb:69:4d:3c:fd:c3:7e:e2:fa:
e0:ac:f3:6d:7d:05:67:7a:ba:20:73:d0:ea:f0:fa:
46:32:9a:fd:1e:72:b8:c6:3b:d9:46:8e:a2:74:03:
f7:7d:96:ad:64:54:aa:08:70:5f:c7:96:75:ba:b2:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:33:00:C6:26:77:B5:BC:9B:0C:AB:05:77:C1:75:63:A6:E7:BF:C7
X509v3 Authority Key Identifier:
keyid:24:E9:40:DB:19:0B:69:2C:D1:B0:D5:83:ED:B6:D8:C3:61:12:45:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOlA2xkLaSzRsNWD7bbYw2ESRWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/75025d-061a-4d96-a7d2-f589f8c032ca/1/JOlA2xkLaSzRsNWD7bbYw2ESRWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:8d:fd:c4:cc:42:44:e3:be:8f:e2:54:c5:04:a7:aa:3f:91:
02:2a:c8:a0:78:08:c4:2b:89:9e:f1:59:5c:28:ae:0d:6f:20:
1d:81:4d:4d:e0:0e:5b:20:49:ea:70:ff:c6:e6:0b:c1:93:b1:
b4:d6:8a:bb:eb:6d:73:77:a9:b0:1c:4e:66:fc:07:46:4d:3f:
9a:e1:a8:e0:4d:74:bc:81:7f:36:c3:f5:e3:c3:c9:af:d7:dc:
31:50:a6:ef:79:ff:63:4b:2f:6f:ad:1b:28:91:75:b2:43:7f:
49:eb:cf:eb:a0:c2:fe:3c:ab:57:1c:ce:bf:41:9f:5c:74:10:
0d:31:c6:3a:dc:9c:fd:e1:b3:22:c9:ee:e9:13:ef:e1:99:bb:
ba:3f:d5:af:de:dd:e8:45:b2:d7:a3:9b:13:15:ef:c5:7a:52:
aa:df:ad:de:62:12:9f:3b:d9:8d:5c:bd:2e:cf:84:61:d4:fc:
80:bf:00:da:94:a7:0b:dd:79:e4:e3:73:c3:83:7e:0d:ed:b6:
2c:9b:6c:5d:b3:ee:ac:66:56:d7:ea:d2:24:de:27:b9:df:96:
73:41:15:fc:9a:15:80:21:a5:69:82:2a:6f:2a:5b:b9:fa:df:
d0:d6:60:3c:27:fa:62:7e:a4:9d:28:3d:4c:5a:ee:f5:96:ad:
2f:23:c8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:08 2025 by rpki-client