Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
File: JNm7BTDf4yKPg7CGE5LihFk0tpg.mft (raw, json)
Hash identifier: PqoECe4t5qmoNWv2niQY0qB0X++m8DZaiZ6w4MrrpWc=
Subject key identifier: 24:EE:94:C1:5F:57:D9:14:5D:09:A6:2E:E2:36:6C:C4:0D:9D:06:BD
Authority key identifier: 24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
Certificate issuer: /CN=24d9bb0530dfe3228f83b0861392e2845934b698
Certificate serial: 019A71EEACC4436B83FE4E96530AAB779C0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 08:00:58 +0000
Manifest this update: Tue 11 Nov 2025 08:00:58 +0000
Manifest next update: Wed 12 Nov 2025 08:00:58 +0000
Files and hashes: 1: 1ZxW8u-5P1t4UMze5JFbl0Ooyu4.roa (hash: Nhhuv6DdC39yd8/4en2lPPTqam7XI+LxbkaMlQc4uqc=)
2: JNm7BTDf4yKPg7CGE5LihFk0tpg.crl (hash: M3LLJB1sfD5IyPZHdwk1cqyw+NQ4T4Dssw2ELFJkFVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:ac:c4:43:6b:83:fe:4e:96:53:0a:ab:77:9c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9bb0530dfe3228f83b0861392e2845934b698
Validity
Not Before: Nov 11 08:00:58 2025 GMT
Not After : Nov 12 08:00:58 2025 GMT
Subject: CN=24ee94c15f57d9145d09a62ee2366cc40d9d06bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:87:1f:05:99:ab:98:e1:2c:07:a7:bf:b9:
e7:15:de:1f:78:65:96:24:ad:3d:f6:f2:77:0e:c3:
81:13:33:7a:30:79:b5:fe:cb:f6:c0:4e:e4:ca:65:
fb:36:c2:27:57:22:6d:fa:99:b6:74:82:03:99:e9:
fd:2c:b1:c5:62:44:5c:dc:d1:59:8e:eb:a4:d3:07:
50:09:7b:46:1d:53:1b:7f:c4:11:f4:3d:fb:e3:6d:
0c:2f:03:09:25:d4:88:59:26:13:40:e4:0b:5f:c8:
90:b7:8f:9f:ca:65:74:b5:7b:10:8e:43:5f:7e:19:
75:d2:b3:e0:35:8e:64:26:72:48:4e:71:68:08:8c:
b0:5f:cf:3c:42:44:1e:89:10:4e:96:40:06:b7:cb:
ab:88:9f:88:46:7e:67:25:56:d7:fb:60:29:29:ba:
30:a5:c8:ec:57:00:41:54:bf:d1:6d:fd:af:53:3f:
7b:6b:e9:24:0a:88:bd:79:8b:92:b1:f0:c9:bf:f9:
27:99:3d:80:0c:65:b7:95:9d:16:fc:b4:f3:55:2b:
1f:a4:36:7d:a8:22:9a:3e:0d:bb:27:8a:34:a8:9d:
aa:68:d2:a5:c3:3d:29:2e:00:c2:a6:04:c3:65:bc:
e9:4e:29:bc:a2:ff:bf:7b:a3:16:8a:c1:99:5c:5e:
65:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EE:94:C1:5F:57:D9:14:5D:09:A6:2E:E2:36:6C:C4:0D:9D:06:BD
X509v3 Authority Key Identifier:
keyid:24:D9:BB:05:30:DF:E3:22:8F:83:B0:86:13:92:E2:84:59:34:B6:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNm7BTDf4yKPg7CGE5LihFk0tpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9979c-d989-46ff-b91e-4ea3011dab6c/1/JNm7BTDf4yKPg7CGE5LihFk0tpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:14:69:69:24:31:c5:06:68:10:29:64:cb:43:60:c8:c1:7d:
bb:8c:32:09:8e:9b:91:75:1a:91:4e:66:4a:26:99:2d:3c:d2:
23:f6:4b:02:3e:99:17:20:81:a0:3c:a8:ed:fb:3a:10:0f:fb:
cc:29:63:a6:09:c1:0f:05:fd:bc:fd:17:c3:a9:48:10:c4:65:
2e:a3:a4:52:c3:45:53:f1:cf:ac:49:60:2a:04:b4:d8:6b:56:
d8:00:21:f7:c3:16:24:34:a0:82:8b:ff:36:58:05:75:be:19:
46:70:d0:37:21:3f:9e:29:d6:bc:04:be:e2:c1:0c:db:88:5b:
53:9b:bf:07:5b:95:82:e1:d8:54:ce:91:89:b3:c2:97:d7:93:
d3:24:97:43:99:27:c1:f0:8a:56:7a:e2:87:c0:5e:3f:2e:f8:
0c:84:e6:89:c2:44:6f:a3:c7:ec:65:5b:e3:f6:6e:80:b7:97:
9a:67:7e:9a:2d:d8:ce:a9:f0:ca:5d:ae:03:2d:c6:de:72:f6:
77:61:1b:e1:b7:58:df:d3:0a:02:af:c4:c6:f1:4b:0e:af:e6:
12:64:74:f2:b2:4f:b2:63:d6:55:bd:3d:c4:ee:93:16:0c:53:
a2:5d:71:30:71:b7:2f:1a:f6:6a:8b:a9:54:ad:e2:a9:e1:83:
87:ce:f2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:08 2025 by rpki-client