Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
File: JLcItlJ6u9LeK5s3NJarwddItuc.mft (raw, json)
Hash identifier: fwBxfz3aK01DnDxEYd/dYOb4OSE2junFsM8oeZmdCDk=
Subject key identifier: 0C:A6:1E:17:94:C5:74:80:21:D1:C9:72:25:EC:32:01:36:29:AA:F6
Authority key identifier: 24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
Certificate issuer: /CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Certificate serial: 019A72CAADFBA0319A1542412D9B35C3A632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
Manifest number: 146D
Signing time: Tue 11 Nov 2025 12:01:16 +0000
Manifest this update: Tue 11 Nov 2025 12:01:16 +0000
Manifest next update: Wed 12 Nov 2025 12:01:16 +0000
Files and hashes: 1: JLcItlJ6u9LeK5s3NJarwddItuc.crl (hash: CNAn+yz2EQaoeIerGZqEW5Szc0LcNaiqu7Cc23dr8vM=)
2: vZBmS-EA2uBUhcAI4deCtG0tMbQ.roa (hash: jDBhmRUhtmMAlFzmv4saGBsUFOT3KgtgZMefYA3RiUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:ad:fb:a0:31:9a:15:42:41:2d:9b:35:c3:a6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b708b6527abbd2de2b9b373496abc1d748b6e7
Validity
Not Before: Nov 11 12:01:16 2025 GMT
Not After : Nov 12 12:01:16 2025 GMT
Subject: CN=0ca61e1794c5748021d1c97225ec32013629aaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:3d:03:fc:ad:ca:81:93:c2:b4:f8:fa:e0:
00:96:ad:91:1f:58:2d:a9:62:e5:17:b4:37:ee:54:
06:e5:ed:c3:1d:0f:42:8a:3b:69:fd:12:de:7d:e5:
bd:9e:71:84:6e:b8:d8:46:28:f5:57:61:bd:0a:ba:
d9:19:55:cf:c8:7c:c9:58:00:78:fd:09:82:50:88:
28:f6:b1:94:44:52:9e:a7:7e:96:32:de:e4:f6:8b:
75:90:7a:6b:55:54:3c:f4:2d:55:26:44:26:ac:9b:
a3:66:36:fa:ce:d1:8a:05:67:69:de:16:89:d6:4a:
92:c5:65:da:ca:70:63:7e:60:91:e9:f3:19:4c:18:
95:77:28:b6:66:0d:11:d4:aa:1a:24:8a:9d:9e:07:
b9:f1:5d:25:95:5b:e2:c1:5e:21:30:e1:54:b2:d7:
5b:b5:5e:e7:9d:bd:dd:75:56:7a:15:69:6b:17:59:
fd:9d:e8:95:4e:32:72:50:7f:ba:e6:8a:a8:36:d5:
64:c9:ce:d0:e1:ce:f3:22:c0:fe:d4:7a:dc:0f:9b:
47:26:eb:41:82:10:e2:48:e7:7e:a9:35:95:84:41:
2e:c8:06:b3:14:40:54:9a:84:64:09:63:cc:1a:23:
59:8b:44:94:47:2d:50:e3:5b:5f:42:4f:65:2f:40:
66:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A6:1E:17:94:C5:74:80:21:D1:C9:72:25:EC:32:01:36:29:AA:F6
X509v3 Authority Key Identifier:
keyid:24:B7:08:B6:52:7A:BB:D2:DE:2B:9B:37:34:96:AB:C1:D7:48:B6:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLcItlJ6u9LeK5s3NJarwddItuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/ee43a0-edf5-447d-b473-b2a13a3a9b8a/1/JLcItlJ6u9LeK5s3NJarwddItuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:78:7f:f0:84:37:96:57:3c:10:68:39:9c:ee:cb:85:41:32:
21:48:53:d7:26:be:cb:36:c9:64:45:9a:75:b6:27:ca:23:11:
21:c6:05:95:d8:01:87:13:ac:62:ab:98:74:80:9b:be:bb:c6:
c0:aa:32:f1:72:26:3d:92:5c:c1:50:6f:b5:a2:40:5a:42:c4:
02:d4:72:07:88:f3:02:3e:ec:65:8f:5a:37:9f:a1:d6:6f:3c:
3f:37:eb:8b:40:47:4f:d3:3b:4d:b2:17:1e:d9:93:b3:61:c2:
f0:f8:50:61:15:45:79:07:06:90:61:d2:83:4f:ce:9a:c4:b8:
2d:1e:42:40:da:3f:d4:b4:89:2f:b1:31:b0:33:74:4c:62:09:
dc:ef:bd:92:6a:8e:3d:5d:c9:cc:1f:09:07:7c:62:32:07:f8:
f5:f8:2c:75:15:f5:71:d6:53:e7:d3:ac:9c:d8:16:f7:8d:ac:
bb:44:4a:d9:87:dc:31:98:c4:14:70:58:5b:a4:07:f8:38:90:
fc:c2:9c:d5:57:f8:9f:bf:c4:f0:19:db:39:16:15:67:4f:db:
0b:89:60:e7:45:89:56:b9:76:a2:fa:f1:02:b0:e9:6e:3a:f3:
52:c1:c4:c9:f3:03:49:67:a7:aa:80:8c:ea:c6:6a:2f:b8:f9:
75:ba:e8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:25 2025 by rpki-client