Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
File: jlo2o46eViR2rnC5FQKOMBhxKRk.mft (raw, json)
Hash identifier: IHZQoFxNwvFl/ibCgz1T6/3Kh8jWPbiuqe3wZJK7jxw=
Subject key identifier: 50:EE:AB:F4:EC:0C:B3:C6:31:46:1D:8B:C3:CD:62:70:67:91:C1:32
Authority key identifier: 8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
Certificate issuer: /CN=8e5a36a38e9e562476ae70b915028e3018712919
Certificate serial: 019A70A4FA384072CA1FBE4623E11B65260B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
Manifest number: 0ABF
Signing time: Tue 11 Nov 2025 02:00:51 +0000
Manifest this update: Tue 11 Nov 2025 02:00:51 +0000
Manifest next update: Wed 12 Nov 2025 02:00:51 +0000
Files and hashes: 1: jlo2o46eViR2rnC5FQKOMBhxKRk.crl (hash: uIhLnR8X8AluTaWgZXg3ff5NGKvoRO8k0/Ux2Dt91r0=)
2: lCFWlcHQXl8OCfG8VkJf_ovcDUY.roa (hash: SWucWn1D4Fv0B4+THeJJxTuUCPWrkWrGEDFRw9TIy8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:fa:38:40:72:ca:1f:be:46:23:e1:1b:65:26:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e5a36a38e9e562476ae70b915028e3018712919
Validity
Not Before: Nov 11 02:00:51 2025 GMT
Not After : Nov 12 02:00:51 2025 GMT
Subject: CN=50eeabf4ec0cb3c631461d8bc3cd62706791c132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:22:b1:5b:b4:f9:8b:ca:9f:98:e4:e9:ac:70:
d1:53:22:e5:2e:99:d2:b3:a2:65:b1:f2:02:c9:7c:
c8:1c:a3:fe:5f:ad:14:30:21:39:70:ae:65:13:e1:
f3:42:82:7d:14:f3:27:14:b9:7f:f6:ca:09:f4:fd:
76:e7:b6:66:19:29:bd:e6:76:79:ae:63:fb:75:d3:
65:82:49:eb:61:c9:5e:4c:ce:5d:18:90:51:3e:1c:
c1:c7:b0:b4:dd:fd:c6:fa:83:6c:f6:7a:52:bb:09:
6d:dc:d3:56:fe:34:ff:33:73:01:97:f8:ba:f2:11:
f9:fa:0d:f9:73:ec:48:05:53:e1:68:9f:52:fd:8e:
ae:c6:de:74:96:86:e8:1a:59:f4:03:18:ee:8c:1c:
71:ad:da:62:0f:0f:39:99:a4:c2:c5:27:10:7b:df:
6e:fd:14:2e:63:c8:d1:f0:02:ba:74:ac:02:6b:25:
e2:c6:0e:c6:b6:af:67:67:cf:ec:f9:10:39:f6:33:
49:e9:da:f5:aa:cf:0e:e9:ff:fa:3c:73:19:b1:72:
82:26:d5:12:b3:9c:77:8a:be:04:0a:71:50:f4:08:
b6:2a:96:0b:72:99:8a:81:c5:fb:3d:63:1d:05:12:
48:b5:40:21:32:b4:07:8d:3d:cc:2f:47:81:f4:ad:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EE:AB:F4:EC:0C:B3:C6:31:46:1D:8B:C3:CD:62:70:67:91:C1:32
X509v3 Authority Key Identifier:
keyid:8E:5A:36:A3:8E:9E:56:24:76:AE:70:B9:15:02:8E:30:18:71:29:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jlo2o46eViR2rnC5FQKOMBhxKRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7b2567-dbaf-46d3-8c01-df0e619a0b82/1/jlo2o46eViR2rnC5FQKOMBhxKRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:23:eb:13:87:4e:38:18:e3:09:91:0b:7a:c3:29:b0:93:f4:
29:68:b6:29:1b:44:c3:3e:d3:b9:b7:3c:83:4d:d6:8f:cd:ba:
d2:f4:d6:fd:02:e3:f4:fa:e5:5f:24:d8:5f:31:38:1a:66:7e:
2b:ce:17:61:f8:15:07:78:99:18:d2:25:4b:15:db:d6:02:29:
04:1f:47:a6:72:49:a0:34:46:03:32:1c:5b:2a:9d:7d:e4:91:
40:c3:f3:a6:9b:23:a4:6a:9f:e1:b8:01:28:30:46:98:70:01:
e4:f9:91:aa:60:7c:48:97:4c:21:b6:37:e0:02:e4:31:b5:17:
4a:79:d4:c7:22:88:94:e7:d6:f0:f8:57:32:9e:1d:40:75:fb:
58:e3:9e:e7:ff:7e:d0:40:26:0f:80:0f:13:5d:ab:2c:2b:dc:
6e:c5:6f:78:c8:b3:e0:52:ba:8f:f2:d8:59:19:a0:b3:9e:9f:
0f:f2:af:3d:f2:6d:d5:49:b4:c2:71:27:22:8d:3e:2f:01:c3:
23:93:2e:cd:f6:2c:55:c1:1d:f4:ee:e1:d9:c0:cc:b6:a4:bf:
fd:58:0d:49:f0:31:ad:01:99:74:50:b1:01:b7:0a:f6:46:f0:
e3:ed:00:00:2b:24:f1:2c:9e:c4:db:b3:d0:30:4d:c8:0a:f6:
4e:41:18:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:15 2025 by rpki-client