Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
File: JrFSTsAdz0BfRBcYKe1nopkqpC0.mft (raw, json)
Hash identifier: ZZjUjpXutTVSsZthQdgLYXcYTMji3iSqnSk0bs3ISQE=
Subject key identifier: C7:E3:E1:28:F0:D0:E5:DF:3B:35:53:39:42:6C:03:F6:1B:1F:58:62
Authority key identifier: 26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
Certificate issuer: /CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Certificate serial: 019A7225AFEFA138B415A7150CA611DAF608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
Manifest number: 044E
Signing time: Tue 11 Nov 2025 09:01:03 +0000
Manifest this update: Tue 11 Nov 2025 09:01:03 +0000
Manifest next update: Wed 12 Nov 2025 09:01:03 +0000
Files and hashes: 1: JrFSTsAdz0BfRBcYKe1nopkqpC0.crl (hash: 0UFyUH2baOVE3K2JSO6Urdzn2z38yAB5m0vfuxgAxUY=)
2: jH1x7tCRtg5jN4v24LJl9VjwMwY.roa (hash: iZNUbQPKf2tKNiMhgRNv7TxXA4h1WHG9l0RsCftRNIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:af:ef:a1:38:b4:15:a7:15:0c:a6:11:da:f6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26b1524ec01dcf405f44171829ed67a2992aa42d
Validity
Not Before: Nov 11 09:01:03 2025 GMT
Not After : Nov 12 09:01:03 2025 GMT
Subject: CN=c7e3e128f0d0e5df3b355339426c03f61b1f5862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:41:7f:a5:8f:35:09:43:47:29:11:d4:57:13:
55:ff:f5:e1:1f:0d:41:c2:8c:44:86:48:85:ea:10:
53:51:82:79:3c:cd:b9:03:2d:1e:41:f3:68:b9:98:
3b:64:89:eb:ed:57:97:eb:fe:5d:af:0f:1b:f3:5d:
c9:62:57:ee:81:5f:56:a6:8b:ae:b4:24:bd:54:9a:
ff:d5:3a:82:cf:ce:05:a1:af:b7:9d:f0:b2:8a:ca:
a8:2c:12:3a:5e:c4:37:0f:29:79:75:da:c4:86:bb:
9c:9e:b7:b1:ff:d8:d8:68:e7:01:a3:a8:4a:0e:a8:
8c:d0:a2:14:ca:63:25:e5:94:6f:1e:68:40:c6:b3:
44:c0:fb:fd:e0:b4:c4:ae:97:dc:2b:01:a2:3f:8a:
ac:64:67:ab:03:b0:0d:af:57:06:0b:a0:c9:27:ce:
a7:2e:11:4b:9e:fb:31:99:c7:85:3f:fe:61:ec:ef:
af:d3:19:5f:e6:55:2a:ba:0a:7a:78:3f:78:b8:fd:
03:6d:ab:a3:73:34:54:18:de:e1:3b:a5:4a:b2:25:
1c:5c:fb:a7:5f:db:95:9f:18:ef:40:5a:75:78:aa:
d9:ee:60:44:e9:89:a6:f5:14:95:73:63:3e:63:74:
4c:be:ce:8c:4c:b4:ac:6a:4a:98:d9:14:21:d0:8c:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E3:E1:28:F0:D0:E5:DF:3B:35:53:39:42:6C:03:F6:1B:1F:58:62
X509v3 Authority Key Identifier:
keyid:26:B1:52:4E:C0:1D:CF:40:5F:44:17:18:29:ED:67:A2:99:2A:A4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JrFSTsAdz0BfRBcYKe1nopkqpC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/056563-e61c-4b8a-8d6e-766c82758065/1/JrFSTsAdz0BfRBcYKe1nopkqpC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d9:86:62:68:94:1c:e7:de:cf:a8:80:b2:b4:8a:74:67:e2:
8d:f0:25:49:6a:8c:7c:9c:aa:61:0f:76:5b:61:15:0f:80:04:
ac:ba:1d:e6:38:8b:30:2f:f4:34:c1:4a:a0:f5:3b:e5:89:85:
5d:07:2d:97:3e:ea:14:2a:e5:54:fd:b1:3b:f0:e9:87:7b:cf:
f4:cf:03:f9:74:c6:ec:59:ec:8e:24:61:c5:11:f8:99:c4:a7:
41:8d:d2:1e:c9:b6:a0:f4:19:0c:00:3b:fb:c7:1d:dd:80:e7:
96:c5:fe:8b:1f:b1:d5:a2:9b:87:f6:1e:d0:86:48:0e:20:6d:
d2:1f:82:9d:68:a7:5b:5c:30:9c:fb:e0:0f:41:bf:93:60:7a:
ac:ff:72:a8:2d:08:a0:d5:e0:de:65:3f:59:57:34:ae:34:2b:
28:8e:6a:f1:e4:ad:0e:09:c3:a7:ad:e7:77:4e:0d:70:82:6c:
2d:b9:8a:26:e5:2b:1c:bc:9d:cc:7a:7c:61:6d:af:bb:59:19:
4a:59:ca:5c:5d:1a:b1:17:22:e9:58:75:15:80:9c:0d:bf:dd:
f5:df:1a:d1:cb:0c:b5:9b:3c:07:89:60:b4:c4:81:69:72:26:
f3:1d:f6:73:e3:4c:0f:8f:d2:bb:07:98:f7:de:4a:15:6e:61:
39:3c:e1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:53 2025 by rpki-client