Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
File: JRIoadDqT5h6tR-5eRgA2EBamjw.mft (raw, json)
Hash identifier: CVJxK8+5M7wW4V/Q0MI4yGwzDDwebZ6yvX6DPZBBG/U=
Subject key identifier: C8:87:98:8A:4A:F0:D0:B8:ED:69:2C:C5:A0:5B:C0:BB:E4:00:A1:95
Authority key identifier: 25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
Certificate issuer: /CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Certificate serial: 019A71EE8DAF2C8BC8728CD73A820392D1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
Manifest number: 01A0
Signing time: Tue 11 Nov 2025 08:00:50 +0000
Manifest this update: Tue 11 Nov 2025 08:00:50 +0000
Manifest next update: Wed 12 Nov 2025 08:00:50 +0000
Files and hashes: 1: JRIoadDqT5h6tR-5eRgA2EBamjw.crl (hash: 21fee8uDx+38IxS9OcbvUm4pku6YvtmneZptzdgok/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8d:af:2c:8b:c8:72:8c:d7:3a:82:03:92:d1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25122869d0ea4f987ab51fb9791800d8405a9a3c
Validity
Not Before: Nov 11 08:00:50 2025 GMT
Not After : Nov 12 08:00:50 2025 GMT
Subject: CN=c887988a4af0d0b8ed692cc5a05bc0bbe400a195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:81:7f:4f:c5:d9:17:45:5e:5a:4e:53:e6:
d9:67:ad:84:c0:66:cf:94:42:95:e3:12:f1:b9:42:
13:85:04:09:cf:bb:df:b1:f0:e5:59:73:e9:c0:2a:
ae:fa:ab:49:02:19:38:74:45:4e:c3:98:5b:55:9f:
58:33:c4:b7:f8:50:0a:8d:a2:ba:b0:89:64:0e:79:
4b:8c:cd:dc:1e:83:95:92:de:5e:ff:c6:d3:4a:59:
da:98:0c:d6:73:4d:1c:89:40:a9:5c:50:1e:1e:53:
76:02:bf:4b:34:4a:70:1a:bf:e2:d5:50:a1:15:0d:
fc:8f:60:35:3f:6e:f4:d0:00:f5:fc:aa:73:8b:3e:
ac:2e:53:e2:f8:24:88:44:27:03:51:be:f7:7e:32:
78:f9:4f:6a:e0:eb:c0:ed:c5:82:ba:fa:36:44:30:
f2:34:14:f4:36:3f:5b:a6:6b:59:21:b1:40:04:cc:
28:c5:b1:f8:da:3c:11:41:17:04:48:be:89:55:f7:
d0:63:ab:0a:5b:d8:35:a1:5c:de:73:2a:6f:6a:ab:
cd:73:07:83:45:94:b7:42:e7:db:a1:af:c4:64:b8:
42:d9:02:be:a7:ed:68:16:31:ba:12:6b:c4:9b:74:
f6:f1:31:d3:d6:70:ef:ae:8a:d6:41:59:a6:25:75:
7a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:87:98:8A:4A:F0:D0:B8:ED:69:2C:C5:A0:5B:C0:BB:E4:00:A1:95
X509v3 Authority Key Identifier:
keyid:25:12:28:69:D0:EA:4F:98:7A:B5:1F:B9:79:18:00:D8:40:5A:9A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRIoadDqT5h6tR-5eRgA2EBamjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0e5d4b-625c-4571-bb45-869220677bc6/1/JRIoadDqT5h6tR-5eRgA2EBamjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fb:ab:33:90:6d:24:7d:98:a3:14:3e:6c:ea:39:4e:8a:58:
0a:61:26:73:47:cc:3d:78:ea:6a:ac:c7:8e:e3:7e:41:8a:b6:
10:a5:73:24:ee:42:4b:3f:88:f5:34:8c:05:d1:05:8f:79:d2:
91:16:54:bd:3c:06:f2:73:3b:9a:bb:a8:14:e9:5c:1b:8e:d7:
4e:b4:9c:22:a0:78:c8:76:23:42:bf:ea:23:41:1d:37:08:ea:
95:86:22:b8:24:eb:ec:85:60:c3:2f:ee:6a:b1:9b:3c:6f:52:
ff:a7:25:5c:72:82:07:6d:7b:f6:e2:a5:95:c4:8f:d5:a2:9c:
e0:14:cb:24:26:c3:d4:b2:1a:62:1b:5f:b9:a1:f3:29:41:1e:
c3:a4:f1:6f:ee:b5:cd:99:e0:6e:d2:f7:ff:c6:71:76:42:52:
d5:fa:39:36:8b:5f:54:77:71:37:40:ea:25:35:d4:26:6c:0c:
1e:a7:65:eb:18:6c:a8:39:95:7f:41:af:da:c7:03:96:7e:4b:
3e:05:ca:8c:32:45:61:b3:c4:fe:10:21:40:c6:2c:63:77:f5:
a7:8d:c0:8c:a8:19:4b:3b:2c:b9:af:64:9a:21:f5:df:7c:6c:
cc:df:5b:51:87:c5:7d:5d:ff:51:67:a7:d8:0a:3f:d8:ce:35:
5f:14:e3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:11 2025 by rpki-client