Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
File: JTKlzyuhjHU-3JXuILZmKT3wLVs.mft (raw, json)
Hash identifier: to40v2Y/FGA/ddRM3gB5fCqXheVxL8qU8vr3UlVZ7Cg=
Subject key identifier: E1:27:21:74:F5:97:C1:5E:64:D5:7C:5B:FE:C6:4D:2E:B4:B1:1E:9C
Authority key identifier: 25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
Certificate issuer: /CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Certificate serial: 019A7293367411B13DC15AE9E6B3C9005569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
Manifest number: 1201
Signing time: Tue 11 Nov 2025 11:00:41 +0000
Manifest this update: Tue 11 Nov 2025 11:00:41 +0000
Manifest next update: Wed 12 Nov 2025 11:00:41 +0000
Files and hashes: 1: JTKlzyuhjHU-3JXuILZmKT3wLVs.crl (hash: 30fGkOqJNDhuopQmN/YOEOHrtf+q5nQA+Rn2umTgel0=)
2: oBH_u1PqllstMg1clbDeim1fyyE.roa (hash: L3SOkvuxnMh5EHKE9/YilBcdLKJMaucr/0ncA4MIDhw=)
3: zHs9cFuQEsCg45LnMiCsOF3kF4Q.roa (hash: C6+fwUFGNJ/F4sEfe/qDP+eEAltXpbDsycsJBFRmzqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:36:74:11:b1:3d:c1:5a:e9:e6:b3:c9:00:55:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2532a5cf2ba18c753edc95ee20b666293df02d5b
Validity
Not Before: Nov 11 11:00:41 2025 GMT
Not After : Nov 12 11:00:41 2025 GMT
Subject: CN=e1272174f597c15e64d57c5bfec64d2eb4b11e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:0e:54:bc:9a:ae:29:ad:9f:2c:c8:94:d5:
45:2d:d1:23:3c:ce:85:d6:20:e6:4f:4b:9e:40:36:
46:57:b4:90:f8:b1:47:ef:a9:66:01:e7:f1:20:e0:
d2:c2:03:3e:b1:7a:98:ba:ae:e0:02:cf:c2:73:06:
60:0f:e4:27:5e:94:c7:fd:ff:8b:36:4d:e9:a8:b2:
e3:70:91:3e:71:98:26:c9:8a:57:cd:7e:78:b1:56:
4c:87:ca:e5:f7:f3:1e:22:96:76:2e:1d:18:93:65:
f3:4e:4b:db:d8:e2:23:db:37:ce:7b:c7:82:30:97:
4c:31:78:7c:cf:75:65:4c:24:f1:39:cb:6b:17:20:
9b:13:94:ca:cb:a7:c2:90:b0:72:79:c3:e5:82:ff:
86:dc:67:6c:b6:5e:27:d1:c7:cd:79:2d:17:2a:6e:
08:c8:9c:c6:0d:c9:43:c2:04:bf:dc:02:fa:c3:70:
88:4f:06:ea:12:24:32:40:dd:ce:18:f5:13:ba:38:
58:6d:ba:af:a1:c9:56:3e:7a:30:ac:6e:a5:43:04:
5f:58:5c:10:88:30:a7:e1:33:4c:94:f9:68:e1:f9:
31:a5:e4:1b:36:61:e0:c6:b4:2b:e3:89:ab:c6:8b:
bc:63:55:41:d4:65:72:43:fa:2a:94:18:04:f9:70:
72:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:27:21:74:F5:97:C1:5E:64:D5:7C:5B:FE:C6:4D:2E:B4:B1:1E:9C
X509v3 Authority Key Identifier:
keyid:25:32:A5:CF:2B:A1:8C:75:3E:DC:95:EE:20:B6:66:29:3D:F0:2D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTKlzyuhjHU-3JXuILZmKT3wLVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/1e02fa-f823-41c8-86b2-151cf61de83e/1/JTKlzyuhjHU-3JXuILZmKT3wLVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:cc:0a:f7:92:5c:f5:9b:21:2e:d2:77:38:c7:94:1e:ce:b8:
89:2b:e2:27:fd:7d:95:6a:de:a5:23:6c:13:f7:28:3d:d3:f9:
66:23:bb:cf:3d:15:ff:af:fa:93:d6:6b:d3:7b:b6:71:8e:50:
62:16:06:19:19:eb:78:b2:62:2a:c9:ab:a9:a5:3d:fa:29:2b:
1a:74:fb:f4:e7:4c:ca:eb:8e:57:54:e3:cd:c2:6e:f4:64:9c:
2b:be:3a:2f:f9:7c:eb:88:f0:f9:63:ce:59:3c:8e:bd:b1:42:
56:3b:9f:2a:35:27:64:70:3c:6d:91:e3:2f:3a:bf:e2:49:fb:
d0:e0:a4:77:92:c3:46:8e:91:33:cc:48:70:eb:e7:f7:89:74:
cb:0e:76:c4:49:df:4a:bb:a1:89:47:ee:5d:2a:12:90:bc:04:
34:5f:df:61:a5:0a:1d:17:7f:b2:fc:74:d2:05:e1:c1:c8:c7:
0d:8a:04:61:94:81:d2:32:0d:6b:e0:88:72:18:1f:93:47:7f:
ca:50:e0:a0:90:41:f1:a2:9d:77:21:03:7c:49:66:7d:d2:dd:
ab:9e:33:97:92:94:1f:52:be:33:ba:b5:97:1f:18:66:14:f6:
af:87:12:db:44:13:a8:30:1b:81:ed:19:e7:ad:49:69:aa:f2:
62:c5:ba:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:08 2025 by rpki-client