Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
File: jpsf4xLwCfII6oorcyDOp2XdUYs.mft (raw, json)
Hash identifier: dCETM4yV5ybZ7iV/JhInhkgCcoDAb5Dmb8M8jTmM3Ps=
Subject key identifier: AF:B8:B8:47:36:52:6D:FC:87:13:22:CB:28:5E:31:19:E3:4F:90:3A
Authority key identifier: 8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
Certificate issuer: /CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Certificate serial: 019A7226223B8A07917E2C7D0807838C8552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:33 +0000
Manifest this update: Tue 11 Nov 2025 09:01:33 +0000
Manifest next update: Wed 12 Nov 2025 09:01:33 +0000
Files and hashes: 1: jpsf4xLwCfII6oorcyDOp2XdUYs.crl (hash: a39ASHeFx/kI8qPjJESExBHhXa9I8o2DkhdF+gVgBwg=)
2: visWSJlNcMrC3jJZFirSko7YGBQ.roa (hash: aZpd1tnSI6OX83780EE9bEx3FT7nmj99SMc4Lm6Unmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:22:3b:8a:07:91:7e:2c:7d:08:07:83:8c:85:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9b1fe312f009f208ea8a2b7320cea765dd518b
Validity
Not Before: Nov 11 09:01:33 2025 GMT
Not After : Nov 12 09:01:33 2025 GMT
Subject: CN=afb8b84736526dfc871322cb285e3119e34f903a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:51:0f:b5:17:45:75:53:f4:4e:eb:0e:e7:
fa:b0:db:91:01:0b:0e:6a:4b:23:49:28:3d:62:70:
98:d9:be:e5:b2:db:0b:f0:c3:8e:02:16:c5:01:21:
e7:32:61:0c:14:6d:37:3a:66:68:a4:83:ec:ab:e0:
b1:23:f0:5d:f6:fc:25:1d:ab:2b:6a:d3:fc:de:37:
4d:25:8c:42:cf:25:43:ad:34:ee:51:40:dd:b7:0f:
54:79:ff:cf:63:f5:1a:19:c3:31:9c:70:ea:ab:42:
d0:df:38:e9:d4:b2:04:7a:e9:24:b1:60:8a:3e:99:
55:e3:d7:76:0e:07:02:cb:1f:0d:d8:60:3d:cb:bc:
c2:6c:30:4f:6b:f4:cc:1b:97:40:10:95:ea:b3:b9:
5f:da:1c:21:e4:f7:88:24:62:f3:98:e6:b7:c8:5d:
f0:f8:f6:e1:b6:47:33:f4:7f:8a:20:b2:09:85:2f:
6d:72:3d:33:4f:9b:2d:8c:56:d7:18:bc:2c:e7:55:
07:8e:6b:17:36:a3:9c:23:87:75:31:8b:71:65:68:
59:5c:2a:97:5a:c7:34:bc:19:e0:8f:5e:d7:07:e0:
93:f9:8f:ed:8c:7e:89:7c:63:d4:3d:b2:b8:6d:33:
6a:dc:24:67:83:05:5d:ce:a1:0a:af:78:e7:ea:44:
1d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B8:B8:47:36:52:6D:FC:87:13:22:CB:28:5E:31:19:E3:4F:90:3A
X509v3 Authority Key Identifier:
keyid:8E:9B:1F:E3:12:F0:09:F2:08:EA:8A:2B:73:20:CE:A7:65:DD:51:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jpsf4xLwCfII6oorcyDOp2XdUYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ba4da6-1d1e-4878-876e-a85399db60bf/1/jpsf4xLwCfII6oorcyDOp2XdUYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:80:f0:45:e6:3a:bb:2c:f6:c2:b0:f2:03:82:45:d2:9b:7d:
ee:c2:de:49:51:09:9f:10:3d:42:05:45:5d:e4:64:80:92:a2:
d4:9d:a5:5d:2a:69:82:22:bd:a0:bd:30:d8:7e:19:8b:5b:79:
3d:0a:d1:0a:11:2d:ae:18:09:5f:ba:fa:90:61:15:51:ab:d7:
ab:6a:5b:68:0a:ef:ee:22:c8:1f:fc:4a:f7:41:82:51:97:77:
e3:ca:30:fa:b9:24:0c:41:9e:62:56:de:16:c6:c5:10:52:49:
42:b9:8b:4b:d9:3b:bd:1c:e2:25:e0:a8:51:34:b8:8d:cb:28:
4b:f2:34:f4:9f:2a:fe:bb:9e:cd:e8:ba:b9:a7:19:06:1b:6d:
7d:e7:26:6d:7b:bf:28:b7:26:00:84:0d:8f:1b:93:50:06:16:
73:34:2c:3f:11:9f:ed:1e:cb:05:e0:e5:48:9a:10:82:d7:8c:
29:27:2d:73:56:07:e9:b2:80:7c:c7:0a:18:e9:6d:9f:d2:89:
3d:0c:eb:a7:66:89:24:ad:bf:9a:c7:c5:fb:66:06:25:33:50:
40:83:17:a8:86:43:96:9e:19:06:b5:b3:15:07:5d:1f:4f:f6:
88:16:f8:38:f9:d1:96:1a:ed:6b:6d:dc:7b:66:94:d0:a3:9e:
03:93:34:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:20 2025 by rpki-client