Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft
File: JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft (raw, json)
Hash identifier: 7IABwVCjbEqhENTUmPf124ZvDvJe40sdpimJNRBq5DY=
Subject key identifier: 44:3D:F1:A7:4B:2F:E3:8A:88:CB:C1:20:D0:C4:A0:73:44:E8:F1:8F
Authority key identifier: 26:86:29:26:A8:57:49:15:54:BE:E9:49:51:BB:5F:A6:70:20:7D:9E
Certificate issuer: /CN=26862926a857491554bee94951bb5fa670207d9e
Certificate serial: 019A7338507958552E36F277866114B27C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft
Manifest number: 0AD7
Signing time: Tue 11 Nov 2025 14:01:01 +0000
Manifest this update: Tue 11 Nov 2025 14:01:01 +0000
Manifest next update: Wed 12 Nov 2025 14:01:01 +0000
Files and hashes: 1: JoYpJqhXSRVUvulJUbtfpnAgfZ4.crl (hash: t8GI/QpsGdOzsywJMfPONBVrUlAtFxHf/TpwwDGWaSM=)
2: P_e_hfFdOIg4RdhQ7kbJdYP3-R4.roa (hash: eyPYhbBHlHybHAFvY42BHBhkxjH8RlGXuW3S7/1wkOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:50:79:58:55:2e:36:f2:77:86:61:14:b2:7c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26862926a857491554bee94951bb5fa670207d9e
Validity
Not Before: Nov 11 14:01:01 2025 GMT
Not After : Nov 12 14:01:01 2025 GMT
Subject: CN=443df1a74b2fe38a88cbc120d0c4a07344e8f18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:77:50:63:2a:91:42:82:b9:f6:be:c2:17:ec:
20:2f:1b:a0:aa:1f:3b:b6:97:89:40:a3:0f:0d:d2:
10:1a:36:b5:f4:9d:9e:aa:d2:f6:b2:5d:3a:46:aa:
26:eb:9b:b4:52:98:fe:88:56:e0:79:13:84:7b:b0:
95:f3:06:0a:d2:0e:78:2c:a9:9c:8b:d4:cf:3e:ce:
e9:a6:4d:7a:95:1d:7a:16:cc:9e:d1:1e:b8:8b:69:
23:e3:0c:04:8c:fe:b8:c3:5a:9a:53:71:ab:bd:ac:
f7:e0:53:09:62:1c:a7:24:44:ab:ac:5d:60:9b:1f:
34:fc:46:ed:93:2b:92:32:b7:62:75:81:74:83:b6:
16:dc:6e:6f:47:e4:69:a6:68:51:41:f2:73:46:c0:
a9:0f:1e:0c:1d:ab:a3:d1:64:d9:26:de:a6:aa:01:
be:e8:d8:52:f0:1a:ce:f6:94:7a:4d:25:c2:7e:5d:
51:24:9b:9e:5d:63:6a:68:75:dc:8a:20:80:11:5a:
17:62:e9:95:66:dc:bd:db:74:a4:6b:f5:8c:3c:8c:
3b:6e:45:c0:08:03:83:11:8e:dd:8d:ba:d6:53:b3:
8c:1d:05:26:20:01:2c:c1:bd:9d:68:d5:63:ac:14:
16:d3:19:c3:e6:06:a1:d7:48:1c:01:ff:8b:60:45:
ff:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3D:F1:A7:4B:2F:E3:8A:88:CB:C1:20:D0:C4:A0:73:44:E8:F1:8F
X509v3 Authority Key Identifier:
keyid:26:86:29:26:A8:57:49:15:54:BE:E9:49:51:BB:5F:A6:70:20:7D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JoYpJqhXSRVUvulJUbtfpnAgfZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d46bf-5444-43aa-8cd4-e7b0ee0f498c/1/JoYpJqhXSRVUvulJUbtfpnAgfZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8a:03:d0:bc:49:59:46:ac:b1:b2:d9:11:b8:e6:86:30:ed:
11:05:a7:06:3b:3a:4b:24:c0:63:2c:95:d4:cb:42:3e:99:81:
f9:6e:a7:54:b1:2e:61:ae:c0:24:32:2b:a1:18:2a:ae:fa:60:
16:fe:05:5c:2c:72:38:c6:1a:a5:a6:72:ca:cf:eb:31:24:5e:
40:2d:dd:af:9b:65:bd:9b:b8:14:12:63:33:ff:a0:93:c4:c5:
9c:dd:43:4e:a2:ab:a7:0b:0f:3f:a4:31:8f:b3:6e:6a:f2:73:
b8:66:7e:44:8c:0e:95:3f:35:7d:59:fc:f3:9b:18:4e:2a:1e:
67:35:e6:81:23:28:ea:f6:10:1e:40:59:a0:60:5d:14:f8:fd:
06:aa:e3:13:58:53:f9:f8:42:65:2f:e7:3f:e6:0e:7e:65:ca:
2c:71:4a:5a:7f:a5:2e:fb:87:e2:59:7f:47:f1:06:20:3e:a3:
5d:eb:96:1a:ea:9a:92:a8:b3:e3:71:70:4a:e1:7b:49:ad:35:
41:1d:fd:de:aa:4e:b7:22:f1:cc:9c:ec:03:da:43:f7:3c:cc:
3d:28:89:16:42:d7:6b:14:34:82:04:0b:f3:dc:39:d7:ed:ae:
0e:51:16:9a:89:39:88:54:8d:d3:09:cb:e5:d9:ae:5c:b4:a6:
9a:a1:59:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:56:47 2025 by rpki-client