Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
File: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft (raw, json)
Hash identifier: fGT/IZ+XRdIJzOW3YuB4G5NAL6Q+WGVn2kyfNYiXwhE=
Subject key identifier: E2:A5:27:49:24:56:9B:F8:9F:0D:A9:84:E2:CE:98:0B:96:6E:A0:D4
Authority key identifier: 27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F
Certificate issuer: /CN=27032f79023052100c4393c9e690f97d7896926f
Certificate serial: 019A71B79061DDA615431A690ABC47724C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
Manifest number: 1716
Signing time: Tue 11 Nov 2025 07:00:46 +0000
Manifest this update: Tue 11 Nov 2025 07:00:46 +0000
Manifest next update: Wed 12 Nov 2025 07:00:46 +0000
Files and hashes: 1: 0CjJkWjNBNTUeoDrNQPuYSnwMLQ.roa (hash: rMAMLQ6zW01Wu80wVa2CdSK+UNAIR1vD+Et52F6+MjE=)
2: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl (hash: XWP+/y5+cexKN7iOGTJQmDfV719ybXIDn/xoZlYtQNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:90:61:dd:a6:15:43:1a:69:0a:bc:47:72:4c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27032f79023052100c4393c9e690f97d7896926f
Validity
Not Before: Nov 11 07:00:46 2025 GMT
Not After : Nov 12 07:00:46 2025 GMT
Subject: CN=e2a5274924569bf89f0da984e2ce980b966ea0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:3c:11:c5:3a:d2:b4:7b:6e:25:95:c8:46:
b0:67:5e:0d:1c:e4:94:cc:43:3a:31:f4:cf:21:cc:
82:7e:81:89:24:46:c9:82:11:69:71:3f:59:0d:22:
eb:ff:67:d9:15:1e:2e:19:76:15:66:c6:20:8b:f9:
b8:c7:fc:0f:86:47:21:05:dd:9f:8c:6c:c0:64:a3:
78:5e:60:dd:8a:04:ce:a7:80:7d:a8:c8:ec:89:0e:
24:c5:3a:e9:4f:0b:6d:c9:32:94:09:eb:19:71:89:
29:0e:84:c9:26:78:f1:e1:5e:0d:6c:dd:a2:af:12:
36:95:e8:e1:3f:8a:2f:60:d8:6a:97:ec:c2:3d:cd:
34:06:53:63:e2:93:cc:07:5c:29:4f:a9:2c:2c:21:
6d:b4:29:e9:cd:69:ba:1f:df:d7:39:eb:b3:89:69:
32:38:1c:74:89:b7:11:54:98:d5:31:01:3a:2c:d8:
e9:2c:11:40:36:db:e2:67:11:82:24:68:f6:6a:48:
f3:b8:6e:a0:39:fc:3d:d5:af:41:4a:70:0e:cf:02:
1a:ee:02:e3:85:67:a8:d4:10:e4:6a:97:e9:9e:08:
5a:03:4a:a6:7b:42:ab:1a:53:59:0a:35:9f:c2:45:
3f:6b:4f:0f:04:55:46:58:d1:78:2f:b6:e7:b6:c0:
b2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A5:27:49:24:56:9B:F8:9F:0D:A9:84:E2:CE:98:0B:96:6E:A0:D4
X509v3 Authority Key Identifier:
keyid:27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4a:ca:3a:90:aa:f5:09:0e:e9:80:c5:1f:17:1a:c1:80:35:
b3:75:00:af:ee:16:bf:5c:70:81:8f:91:33:5d:8d:6f:28:13:
a9:71:f3:0d:96:93:e8:12:f0:52:6e:5b:3d:cf:98:3c:ea:18:
71:92:18:51:da:29:8d:da:af:6e:d0:ba:02:72:90:23:5e:58:
de:6e:e0:22:6d:dc:d3:e4:8d:78:b3:8f:d7:cc:b3:ec:41:b0:
f4:a8:cf:76:61:64:77:aa:65:ee:00:87:97:46:3b:93:ca:3c:
d6:4d:07:c4:f1:46:cd:82:3a:e6:87:ee:6a:90:28:3f:b5:e5:
f2:e8:c0:99:6d:e5:6c:88:e6:8c:46:f8:99:ab:d6:fd:46:a6:
43:ec:c0:85:b7:8a:5c:ff:07:1a:dc:36:5c:b0:1f:a6:f4:0c:
9a:1c:00:65:33:50:49:89:70:51:35:e8:c8:28:c6:49:74:f8:
55:5d:83:a9:c0:5a:12:b3:cd:f9:52:28:d1:5a:02:1a:45:00:
12:8a:4a:38:0c:31:7d:1c:e5:8c:4a:d2:73:9c:2c:f7:64:ac:
02:15:73:f3:07:33:88:d0:ea:7d:54:f2:6a:3c:42:ab:dd:b3:
9a:9c:31:7e:41:f3:5f:1c:6a:3b:58:f8:84:01:97:71:58:6a:
f4:b2:e7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:14 2025 by rpki-client