Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
File: JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft (raw, json)
Hash identifier: Lgr3Q7k20jlvLC87vbQDGdV5ZMuFd/kNDQHYNwrhOTI=
Subject key identifier: E5:20:15:FD:05:B5:0B:C4:F6:56:CA:6C:09:5C:34:9E:23:77:BB:55
Authority key identifier: 27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
Certificate issuer: /CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Certificate serial: 019A70DC2DE4DEA0476108BD76ABE6221915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
Manifest number: 046F
Signing time: Tue 11 Nov 2025 03:01:09 +0000
Manifest this update: Tue 11 Nov 2025 03:01:09 +0000
Manifest next update: Wed 12 Nov 2025 03:01:09 +0000
Files and hashes: 1: JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl (hash: Q5BUw49If3i28GcLElbOui5UEdm3XjSQAAsh9+1vX3E=)
2: gm-1FgU2aGaeL3uBWUTc78I4FE8.roa (hash: 7heZcqbabPmaXzDUlAW6gffQrzGOH/CbDbfHIPp7ikU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:2d:e4:de:a0:47:61:08:bd:76:ab:e6:22:19:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Validity
Not Before: Nov 11 03:01:09 2025 GMT
Not After : Nov 12 03:01:09 2025 GMT
Subject: CN=e52015fd05b50bc4f656ca6c095c349e2377bb55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:44:91:5f:76:74:94:b1:d6:1b:d0:b8:e8:cb:
c1:81:43:94:26:35:cb:d7:1c:fe:98:94:05:e4:31:
88:22:ca:d3:27:2a:3f:1c:3c:89:6a:2f:eb:85:6d:
20:77:46:99:fe:bf:61:e9:4d:b1:ce:2a:22:c7:43:
a3:f8:b2:1d:72:66:f2:15:c9:29:8d:7e:d6:f1:1f:
18:82:e9:c3:1d:17:10:d3:dc:e6:db:e7:d8:93:fe:
3b:f7:a6:6a:70:ac:90:9d:cd:9c:43:8a:c1:62:45:
db:9b:d5:56:57:ea:12:01:de:2c:99:81:89:28:35:
82:39:18:3f:18:3c:6a:94:9e:f6:33:c9:1b:76:fb:
24:bb:b7:44:44:8c:05:ca:0d:94:ed:97:e0:4f:64:
53:dd:86:c3:95:e2:87:ca:8a:c2:11:4e:91:8d:6f:
63:04:53:58:6a:3c:2b:8b:5a:7b:33:73:e7:95:2a:
8f:76:82:44:19:73:19:e4:f5:65:7e:70:e3:a3:be:
df:b7:ee:de:2f:01:9b:c9:19:77:dc:c5:06:a7:a3:
05:18:c0:cf:b9:19:be:e3:0f:4d:bc:6c:37:c5:28:
95:88:6b:e0:d0:c8:d8:44:e3:fc:4e:99:00:a6:c9:
f6:f0:cb:04:67:d6:98:40:b3:67:eb:83:42:b1:1e:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:20:15:FD:05:B5:0B:C4:F6:56:CA:6C:09:5C:34:9E:23:77:BB:55
X509v3 Authority Key Identifier:
keyid:27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d9:93:1f:92:bf:30:98:3e:59:3b:dd:80:d1:ea:51:c0:eb:
d6:17:e8:a3:ca:d0:67:e6:05:28:6d:07:0d:63:e4:0e:42:76:
e7:d6:f9:ff:d2:22:cb:71:77:f2:01:9f:e8:b9:f3:b5:ab:b1:
05:80:5d:76:85:cf:ed:03:e4:25:98:ed:ac:25:a4:76:0c:b0:
3a:06:9e:fc:50:5a:fa:98:32:37:93:b4:4c:b1:69:94:3e:dd:
b8:ac:3d:21:96:3f:20:e5:fd:b3:31:69:df:c9:e3:72:a7:f6:
2a:d4:9d:a0:3d:bd:1c:8d:77:68:42:55:de:58:85:0a:f3:f6:
82:c5:0f:92:b9:ea:37:09:2a:e3:f5:d1:93:fa:6a:41:43:0b:
50:4d:4b:11:f2:10:07:6c:5c:68:73:5a:38:7d:06:b8:1a:52:
02:0c:c4:18:a7:8e:f1:83:f2:2c:37:b8:14:3c:5b:b9:b6:e7:
bd:89:2c:08:36:1b:2c:a0:a7:aa:89:69:5d:b1:d2:cb:48:31:
62:e5:57:c6:4f:98:ff:61:62:9b:ca:eb:0d:e1:60:67:21:42:
bc:40:9f:96:4d:31:b5:30:31:0b:8f:ec:c7:fb:77:e9:a1:f2:
cc:53:da:e2:2f:c1:86:9f:39:4d:cc:57:2b:e6:6d:6d:e0:21:
b2:90:7f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:43 2025 by rpki-client