Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
File: jsM7jhNW_M_INGbu2KhlUSp9APE.mft (raw, json)
Hash identifier: JDvYgijlWSgBaNh7W0cHnYHXlbv3Sfik3LjvuQkcv6c=
Subject key identifier: A2:67:5F:0C:9F:66:1B:7B:41:AF:4F:90:65:4D:01:0F:54:B7:59:CF
Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Certificate serial: 019A71B84CAF327E61B0602EC4890EDCDD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:34 +0000
Manifest this update: Tue 11 Nov 2025 07:01:34 +0000
Manifest next update: Wed 12 Nov 2025 07:01:34 +0000
Files and hashes: 1: jsM7jhNW_M_INGbu2KhlUSp9APE.crl (hash: VO7vdYcWuRQYU9trQqNLHrmTkvLsWJoc+SNAVFI/sFA=)
2: qwVGjqL0m5G9ustOpPZ5FS2RFbA.roa (hash: QQptDB1uT/9FFhotqk1bN1Jx0M0NJncKcjU5av3+7no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4c:af:32:7e:61:b0:60:2e:c4:89:0e:dc:dd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Validity
Not Before: Nov 11 07:01:34 2025 GMT
Not After : Nov 12 07:01:34 2025 GMT
Subject: CN=a2675f0c9f661b7b41af4f90654d010f54b759cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3e:f3:b8:34:ff:32:4b:c2:16:1a:7f:4a:4d:
19:0a:f1:45:88:f9:84:04:12:c9:0e:ec:1a:7b:65:
80:d6:a6:ae:f8:80:4e:48:2a:ef:33:7b:f0:70:91:
4e:0c:a4:74:35:8c:c0:d0:4d:f2:77:58:d6:6a:01:
9c:9d:bc:4a:4a:2e:a3:39:8a:40:dd:51:61:b6:43:
b2:0a:65:03:ad:84:7e:57:65:e2:2f:3a:bb:68:fc:
12:3c:d7:11:cb:bd:b9:0c:9c:4e:85:e9:50:14:c3:
45:6a:f8:a1:78:6e:e9:fd:b2:5c:76:04:48:fc:8e:
73:45:93:4b:a2:d9:49:e2:3a:a5:c3:65:37:1e:d9:
26:74:f2:98:90:6d:1c:30:e8:81:83:4f:ac:21:b6:
14:46:b0:31:1c:df:dd:66:92:2b:1b:aa:75:51:18:
30:e4:e9:c0:01:45:b5:8d:05:7b:cf:c2:73:05:8a:
33:16:af:ed:0e:2d:09:42:c4:8f:02:ff:d3:3b:bf:
7a:a0:67:ed:10:f5:80:05:3a:fc:24:2e:73:b6:5c:
9d:ad:a1:35:8a:a9:31:04:eb:92:a6:ef:b8:32:a5:
d5:d2:61:83:4f:a9:17:ef:d5:fb:58:a2:dc:f5:bd:
e8:82:3e:21:2b:c7:20:3e:90:79:3f:3c:11:76:26:
9c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:67:5F:0C:9F:66:1B:7B:41:AF:4F:90:65:4D:01:0F:54:B7:59:CF
X509v3 Authority Key Identifier:
keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:45:08:10:b1:72:ed:43:50:2c:92:6d:f5:f3:7c:c5:90:41:
11:6f:8e:3a:4a:4d:09:5b:ea:38:9c:13:7f:51:17:0e:87:cf:
12:49:c6:21:ab:ed:fe:83:1c:ed:df:63:20:f0:eb:c5:ba:b1:
c3:b2:c3:a3:41:1e:b9:18:6f:ef:b9:ca:42:b7:0f:3e:9e:f5:
45:0a:2c:8d:ae:32:43:3c:7f:07:da:43:df:77:78:4f:af:f8:
0a:69:2d:96:03:b1:fc:82:2a:6f:15:1c:39:d9:cc:0e:86:db:
bb:8f:ba:5b:56:86:55:17:d8:59:26:b2:45:df:1d:0e:79:ab:
dd:8d:7e:88:6e:a2:0e:14:75:5c:34:e9:f1:b9:58:7e:ba:25:
72:8b:b2:fd:18:b3:f8:6a:c6:50:64:ab:f4:fb:97:0c:e5:91:
46:c4:5a:c5:7d:ab:30:33:c9:0e:a1:09:a9:07:24:62:41:b3:
64:ce:87:43:13:be:77:59:8e:e9:9d:b5:f4:ec:00:15:52:35:
1f:ac:55:60:3c:e4:ca:44:79:7a:33:a7:b7:55:16:75:86:5c:
e8:b4:5d:55:27:51:06:55:7d:e3:11:52:95:b8:26:f8:4d:60:
d7:eb:b4:2f:2e:4d:36:f5:3f:ef:59:c4:88:9a:6d:b7:b6:eb:
88:d1:5e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:32 2025 by rpki-client