Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
File: JdYnfp1eXwpz2jcfMLWseZknkjo.mft (raw, json)
Hash identifier: JF6tpJeuUKYfpbcj99/W8UoykfrOPWQf7/XvzQyzNBo=
Subject key identifier: B3:5F:52:68:42:E9:F5:AD:01:D0:D8:F1:A2:A4:05:A9:13:BE:EC:27
Authority key identifier: 25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
Certificate issuer: /CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Certificate serial: 019A725C5EBDF3559C16224A8E7B21A2DE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
Manifest number: 0440
Signing time: Tue 11 Nov 2025 10:00:47 +0000
Manifest this update: Tue 11 Nov 2025 10:00:47 +0000
Manifest next update: Wed 12 Nov 2025 10:00:47 +0000
Files and hashes: 1: JdYnfp1eXwpz2jcfMLWseZknkjo.crl (hash: xCgnAXV6J2ELTK7cqVf4Kwn/fLt9jiCYR3BlnNCEiVI=)
2: W33wCNoqVtC8nnysLfc50xpdZy0.roa (hash: ojPlZl8ybzd2ray8ATJYzRb0Yn01gVHIP83ulWRE+8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:5e:bd:f3:55:9c:16:22:4a:8e:7b:21:a2:de:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25d6277e9d5e5f0a73da371f30b5ac799927923a
Validity
Not Before: Nov 11 10:00:47 2025 GMT
Not After : Nov 12 10:00:47 2025 GMT
Subject: CN=b35f526842e9f5ad01d0d8f1a2a405a913beec27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:c0:b9:76:f0:e8:59:b2:2a:0e:03:3e:35:
44:0b:e3:ab:33:7f:b5:57:8e:d3:c9:47:41:c1:00:
7e:e7:42:b2:7c:e0:c3:71:ec:b4:80:41:2e:73:2d:
57:4b:7b:97:53:29:f7:85:db:1a:94:2c:97:a2:b7:
08:7e:bb:b6:d6:ff:8c:96:23:52:7d:c2:cf:b0:be:
c6:10:1d:a1:e0:98:36:48:8e:2d:a0:e7:67:fb:f1:
05:04:31:36:9e:47:dc:72:55:51:fc:c3:ce:50:54:
cb:8e:1f:9e:6c:71:e8:4b:66:87:f4:03:8d:8a:43:
86:bf:76:43:42:a7:9c:bd:7d:97:7f:4c:39:e3:5a:
ff:e8:68:ec:df:df:6e:4a:32:a0:07:6b:b1:0d:8c:
b0:68:5b:a7:e6:8f:38:e9:45:d8:56:3f:c6:6c:eb:
b9:ab:5e:13:19:de:7b:db:2f:2a:61:8d:5d:b7:3b:
58:26:f4:2f:c4:95:d9:70:51:b5:51:b0:fb:60:f3:
82:84:4f:de:08:62:d4:f2:0c:58:80:b2:0b:11:8b:
3b:15:c6:0d:6f:a5:f7:60:2e:1e:cc:33:b3:43:6f:
9a:f4:04:9d:60:33:7d:77:a5:93:a8:f1:af:27:df:
9f:b3:fb:cb:ef:e8:e2:09:1a:41:15:f4:33:3e:46:
17:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:5F:52:68:42:E9:F5:AD:01:D0:D8:F1:A2:A4:05:A9:13:BE:EC:27
X509v3 Authority Key Identifier:
keyid:25:D6:27:7E:9D:5E:5F:0A:73:DA:37:1F:30:B5:AC:79:99:27:92:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JdYnfp1eXwpz2jcfMLWseZknkjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7bef3d-5426-40cf-841e-471927a83ce3/1/JdYnfp1eXwpz2jcfMLWseZknkjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:95:d8:3b:bd:4b:a4:87:8a:cc:81:cf:52:e1:56:df:92:18:
c6:5a:b2:d0:d0:e1:56:90:66:ab:a2:3b:24:2d:f3:53:e5:66:
a3:59:df:41:d1:a3:10:30:f9:be:4b:ad:73:c1:ed:31:ed:71:
64:f2:b9:7e:c1:32:13:b0:a3:38:2e:65:41:73:2d:b8:d7:23:
e9:45:42:24:a4:06:8d:55:72:c2:82:54:14:0b:81:1f:ee:c4:
44:98:08:46:88:3a:eb:41:00:24:5e:fb:b1:02:27:c9:ae:ab:
c3:50:25:22:4b:d0:4c:4d:8a:87:d3:d7:8b:d5:8b:b0:99:ef:
ab:c3:5d:07:50:d8:4b:cb:df:1b:b5:b4:aa:3e:72:f1:b1:e4:
58:12:e2:12:c0:9c:a1:9c:00:73:d3:8b:ce:64:f0:e4:5a:f1:
d3:d1:30:53:ea:63:f9:58:23:09:20:eb:ac:04:75:90:ab:16:
f1:8b:99:fb:70:33:29:e8:b5:7f:69:22:0e:f4:14:9e:ab:12:
35:65:84:d0:1d:76:5c:c4:5e:28:66:95:e0:4e:5f:5a:3c:16:
f6:22:19:45:5f:c0:9b:97:e6:c4:ee:e5:6e:97:87:19:d9:1e:
bb:c7:57:43:49:84:e1:5a:03:4c:45:93:23:b8:18:8f:5c:1a:
df:60:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:52 2025 by rpki-client