Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
File: JgkJ1zonmIPiVxEeSE5_B4teyP0.mft (raw, json)
Hash identifier: ITs/KW+FuD6hwun1kU7krvfhAoqFjCo64p93w7+ko9M=
Subject key identifier: B7:85:CC:C8:C5:A9:FB:EE:36:4C:9C:95:BE:B0:7F:A8:D2:CC:79:02
Authority key identifier: 26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
Certificate issuer: /CN=260909d73a279883e257111e484e7f078b5ec8fd
Certificate serial: 019A2741DEABC539D88EFEEB1F22B2502605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
Manifest number: 0BA9
Signing time: Mon 27 Oct 2025 20:00:19 +0000
Manifest this update: Mon 27 Oct 2025 20:00:19 +0000
Manifest next update: Tue 28 Oct 2025 20:00:19 +0000
Files and hashes: 1: ByXM_Ln1i6sp51H3UoiAVLtk9H4.roa (hash: WkKv5GmFkjNS11QcfAX/i3RvuDqUCdANkXDcqukdiOw=)
2: JgkJ1zonmIPiVxEeSE5_B4teyP0.crl (hash: aCx+iBgjTJdy5nFnSN7nrG3Oxa32VEH5CmC+x0pshfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:41:de:ab:c5:39:d8:8e:fe:eb:1f:22:b2:50:26:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260909d73a279883e257111e484e7f078b5ec8fd
Validity
Not Before: Oct 27 20:00:19 2025 GMT
Not After : Oct 28 20:00:19 2025 GMT
Subject: CN=b785ccc8c5a9fbee364c9c95beb07fa8d2cc7902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:03:12:8c:e3:19:04:ca:0e:9c:bb:05:46:
66:bc:af:a5:ec:80:00:38:53:ec:83:b0:1a:1f:d5:
f0:2f:cd:c9:2b:fc:c6:92:84:6a:c6:a6:2d:65:05:
ab:92:c9:b2:81:de:77:f1:8e:37:46:bf:3f:43:eb:
b0:44:88:7f:de:5d:21:77:8b:20:97:de:90:02:77:
96:ba:dc:b6:20:46:f0:1a:c5:0e:30:e3:57:33:ab:
cf:f4:79:9e:42:a5:fc:17:18:b4:c7:93:29:44:c3:
6b:1c:76:59:b7:24:d4:a6:cd:51:be:61:e6:5d:32:
12:0f:b0:2e:ba:eb:61:3f:cd:dd:92:92:e5:22:dc:
d0:96:a3:a3:7a:10:0a:b0:5a:53:ad:0c:b9:8f:85:
d4:88:ee:01:85:a8:25:0a:8d:e4:e0:92:78:73:ea:
40:c7:f5:85:a7:1d:a5:17:f6:fd:09:8b:5c:4e:94:
3e:2b:03:13:f6:11:fc:7f:f9:bc:3c:12:86:79:2b:
b0:11:b4:0d:40:07:2c:da:1d:2f:f9:0e:02:1c:ad:
60:f0:fd:06:76:86:6b:89:d3:b1:fa:b6:38:9c:56:
d2:a9:47:4b:6c:b0:05:66:3b:ce:d2:f6:3d:25:6f:
05:60:30:6c:fe:ab:c0:af:97:b5:5b:0d:c7:8f:c7:
d2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:85:CC:C8:C5:A9:FB:EE:36:4C:9C:95:BE:B0:7F:A8:D2:CC:79:02
X509v3 Authority Key Identifier:
keyid:26:09:09:D7:3A:27:98:83:E2:57:11:1E:48:4E:7F:07:8B:5E:C8:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgkJ1zonmIPiVxEeSE5_B4teyP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0fa88e-a5db-48e8-b15b-6561317cf263/1/JgkJ1zonmIPiVxEeSE5_B4teyP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7d:b4:f4:5e:0c:34:9a:c0:e6:42:42:41:89:86:de:81:eb:
8e:89:3c:83:6c:21:16:d2:32:77:95:1d:e9:5c:14:21:24:b4:
0b:65:20:a9:bc:3d:08:27:65:25:42:fc:a8:7e:d4:29:aa:50:
8e:f5:19:a1:cd:be:75:e4:3d:db:71:4e:52:99:96:29:30:a1:
00:ac:37:ff:ab:e8:2b:32:15:68:cb:f5:de:dd:bb:e9:ce:45:
b6:2e:ad:ab:1e:9b:03:34:4f:5c:90:c4:b4:f5:07:40:5c:0f:
da:7e:46:2e:4a:7f:10:e0:2a:54:c8:e4:cb:0d:5a:2a:a0:91:
01:16:69:2c:0e:22:88:21:62:15:2c:f8:99:0d:c1:37:48:f2:
0f:ea:ec:03:52:f5:17:28:8f:ff:cb:44:8d:93:da:dc:97:80:
52:5a:89:8b:df:c3:af:f2:6d:7e:87:22:36:ec:fe:ac:5a:ec:
bd:b7:6f:d3:49:0f:39:0a:15:80:49:0a:de:7b:38:ea:d8:c1:
0b:bb:c0:2e:09:e7:75:4c:70:84:ca:42:10:e0:b9:eb:34:c2:
43:4f:df:8a:14:33:1a:8a:4d:67:5e:fc:97:5e:55:db:0c:cb:
a1:ee:dc:a5:24:bd:fb:d3:c1:c7:f1:70:af:a8:79:bf:5e:51:
03:e0:c5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 00:55:48 2025 by rpki-client