Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
File: JaVTeUIj5rTGMnebUTcdxOfXBwU.mft (raw, json)
Hash identifier: Qt1P+Y7JWupNoD1UVNU1LCkM6FIhKuLhHxOVYYwDZ7E=
Subject key identifier: A7:A4:C9:54:59:62:FF:C7:EB:E4:B2:AC:7C:59:49:84:74:8A:05:C4
Authority key identifier: 25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
Certificate issuer: /CN=25a553794223e6b4c632779b51371dc4e7d70705
Certificate serial: 019A71B820D8A7AE83291B1A93BA5DEC645C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
Manifest number: 13D5
Signing time: Tue 11 Nov 2025 07:01:23 +0000
Manifest this update: Tue 11 Nov 2025 07:01:23 +0000
Manifest next update: Wed 12 Nov 2025 07:01:23 +0000
Files and hashes: 1: AamKKecGtsamRu5tPrCvb4wPCCg.roa (hash: R/0dKm7RYIaO6gMOFzcg/w47GHlEc3dvGlaSi8cjRio=)
2: JaVTeUIj5rTGMnebUTcdxOfXBwU.crl (hash: 5uex6MhDYNvYZoOArt7mSPCiFd6J7bMkzUSGO2JGe50=)
3: hK2MvsUGX-en-QRS8wt3Wf_U0nw.roa (hash: TPzEJ4PR056FgBQncfoR2MgdCQdkMjaLd6UC5c1/V+U=)
4: sZzOId0-MCcpYuzen4Nr9pbpCWM.roa (hash: uaC6M8HkP81VbJLKmwQxRrL5lIIVQEkwETGYd2tWcYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:20:d8:a7:ae:83:29:1b:1a:93:ba:5d:ec:64:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a553794223e6b4c632779b51371dc4e7d70705
Validity
Not Before: Nov 11 07:01:23 2025 GMT
Not After : Nov 12 07:01:23 2025 GMT
Subject: CN=a7a4c9545962ffc7ebe4b2ac7c594984748a05c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:db:0c:89:d4:dd:5c:6e:d6:ac:04:da:c3:
43:f5:dc:f4:39:92:a8:8e:51:07:2e:65:43:cb:25:
e1:0f:50:ca:42:30:11:aa:2e:24:8c:64:12:ed:e0:
a1:50:ac:fa:18:b8:97:68:de:c2:9e:7c:d8:bd:59:
53:cd:2b:8f:3a:60:6e:a6:99:83:21:ed:b6:a0:0a:
96:47:8e:94:e1:d2:69:53:50:8e:39:3e:a5:d0:e2:
61:73:51:47:2d:69:d2:f3:29:0c:f0:c1:40:90:a7:
7c:76:20:97:0a:d7:2d:97:ea:7e:b8:99:42:47:f6:
c8:72:8c:ad:d7:02:89:d5:cc:a9:22:6e:45:87:16:
13:c2:5e:ad:2f:aa:81:24:52:5c:93:5a:80:d6:80:
d1:37:fd:6b:1c:5c:04:d4:5c:4b:28:3d:a5:86:de:
49:39:48:75:fc:cc:23:8c:33:3e:fd:98:0f:00:f6:
01:a4:8d:90:53:d3:93:c6:b6:4a:e3:f9:d0:e0:04:
d2:b8:0e:54:ed:f6:75:ee:e2:07:fa:9f:8e:b5:9c:
b3:63:6e:27:e4:08:d8:6d:48:7c:83:37:8b:58:84:
c2:ac:6a:b1:d8:4d:ca:4c:9e:ff:a7:c1:55:26:6f:
9b:86:42:44:5d:5b:81:1b:b2:98:9a:6f:7b:4c:52:
e8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A4:C9:54:59:62:FF:C7:EB:E4:B2:AC:7C:59:49:84:74:8A:05:C4
X509v3 Authority Key Identifier:
keyid:25:A5:53:79:42:23:E6:B4:C6:32:77:9B:51:37:1D:C4:E7:D7:07:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaVTeUIj5rTGMnebUTcdxOfXBwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1f96cc-5ea6-49e3-8f5f-30e929ed1063/1/JaVTeUIj5rTGMnebUTcdxOfXBwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:51:1f:bc:6f:28:29:8a:1e:0b:6c:7b:2f:94:2a:fb:f8:b1:
9a:2b:3d:35:ce:43:19:12:cb:62:89:5e:b0:68:e3:b5:5b:f7:
0a:1b:83:b6:a7:82:57:05:eb:ec:4d:df:cd:a3:61:d2:41:48:
d1:02:2e:36:ab:68:8d:d1:95:52:b2:a7:ee:8a:6d:c1:a3:ce:
c0:d8:aa:d0:04:6d:ba:38:46:e7:52:90:c4:36:86:b3:8e:21:
f1:bc:81:06:ed:bf:ae:1b:43:e2:94:65:fd:21:4d:ec:4d:5e:
00:39:98:07:5b:b3:0e:7c:66:a4:eb:e3:d4:85:24:fa:45:48:
a0:a6:01:8c:14:bd:5d:b0:ca:8e:ce:fa:0e:1a:d2:95:2e:64:
53:8e:d7:f9:88:cd:bf:62:01:84:2f:b1:a2:b3:80:a2:76:e0:
22:3f:91:f0:c4:71:1c:76:c7:a1:7f:65:02:f3:1b:9d:64:30:
19:75:a9:2b:30:6f:ac:3b:94:ee:15:a2:eb:e2:65:36:b0:1d:
64:bc:b1:2b:99:1e:89:7c:71:44:f5:23:0e:cc:0b:19:88:51:
88:aa:d5:be:a1:f1:81:5b:02:10:2d:3c:10:d2:9a:40:9d:fa:
9a:18:cd:53:ad:a8:94:32:62:11:19:dc:b0:95:4f:cf:02:51:
b8:63:36:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:58 2025 by rpki-client