Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
File: JTNYNY66UbU00_rppsuHHeY34AA.mft (raw, json)
Hash identifier: QYA+qLHU7apUS7xGWhXVtPOa+X7eIeBlOZkP5geT/8M=
Subject key identifier: C5:C6:F9:FA:B0:A8:67:5B:8B:42:3D:9D:E9:B4:7A:E8:8F:D3:8C:CE
Authority key identifier: 25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
Certificate issuer: /CN=253358358eba51b534d3fae9a6cb871de637e000
Certificate serial: 019A71B8A0714DDBD1EFF3606EE065A3EB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
Manifest number: 0ABD
Signing time: Tue 11 Nov 2025 07:01:56 +0000
Manifest this update: Tue 11 Nov 2025 07:01:56 +0000
Manifest next update: Wed 12 Nov 2025 07:01:56 +0000
Files and hashes: 1: AznASXPtSsVB0QJTrOLEwvRqJvg.roa (hash: AIlADlzguhRYCJM9H8PKNEWx4IayFm+wVXpreNrn5jI=)
2: JTNYNY66UbU00_rppsuHHeY34AA.crl (hash: 3qtGmg+z1rvL8M5MHVgq3kN6F2TzyJxqTQB28c4oabc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a0:71:4d:db:d1:ef:f3:60:6e:e0:65:a3:eb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253358358eba51b534d3fae9a6cb871de637e000
Validity
Not Before: Nov 11 07:01:56 2025 GMT
Not After : Nov 12 07:01:56 2025 GMT
Subject: CN=c5c6f9fab0a8675b8b423d9de9b47ae88fd38cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:e8:29:4f:b5:d5:8a:bb:4f:2e:05:ae:36:
56:8b:60:7a:93:bf:15:55:c7:4f:c6:35:4f:01:54:
c4:b8:04:3b:71:f9:06:49:6e:12:4b:ee:0d:65:9b:
21:06:eb:13:b2:66:b0:cc:b6:0d:8d:95:23:bb:63:
85:be:ef:5d:e6:77:ed:4f:d5:c9:80:2a:61:fd:cb:
fe:88:e3:b2:34:7f:6d:71:93:42:89:e2:2b:b8:d7:
62:16:21:b9:be:80:e1:54:06:48:aa:1a:74:74:d7:
2f:75:e5:ba:41:1b:77:fd:fe:de:1b:22:30:fd:7a:
4a:21:78:2d:95:28:f9:af:ac:18:d1:1e:82:df:9d:
d3:9b:50:95:4e:43:2b:c6:8a:d6:83:61:ca:cf:d4:
d6:9b:00:9f:5a:27:3f:60:74:bf:39:f7:63:e1:ad:
1b:e3:4c:eb:a3:f5:9a:78:48:8c:ac:43:97:e1:c2:
64:a1:ec:e7:44:aa:a8:fd:ae:57:3c:74:41:36:96:
82:8c:c7:17:6a:9a:e0:e5:b5:1f:73:a1:81:37:89:
ee:1d:bc:58:4a:46:58:4b:63:0f:ff:6a:5e:e5:37:
64:1f:41:e5:b4:39:99:da:ed:1f:47:d8:7c:c3:8c:
59:31:7d:75:9e:f5:c4:4f:86:b5:8c:ba:ef:c0:fc:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C6:F9:FA:B0:A8:67:5B:8B:42:3D:9D:E9:B4:7A:E8:8F:D3:8C:CE
X509v3 Authority Key Identifier:
keyid:25:33:58:35:8E:BA:51:B5:34:D3:FA:E9:A6:CB:87:1D:E6:37:E0:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTNYNY66UbU00_rppsuHHeY34AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1c2f90-26ea-4d59-91a9-4d775622bcb6/1/JTNYNY66UbU00_rppsuHHeY34AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:cb:50:8e:7e:df:1e:c4:df:c2:7e:a2:20:5d:c9:35:49:15:
19:0f:ca:e8:32:f1:41:89:e2:4e:b6:8d:50:3e:bd:45:4f:0f:
7c:cd:0c:db:c9:01:5a:32:9c:2a:ff:68:63:c6:57:71:38:d4:
7a:6d:01:e4:cd:c4:34:d7:c3:a6:37:a5:2c:63:bd:77:9c:b7:
0c:55:e9:d9:6c:d6:2b:8d:6a:88:1a:04:66:ad:18:61:bd:37:
f0:c0:02:74:69:93:ab:2a:d7:19:eb:c8:9f:ac:70:1b:34:d2:
42:1f:d5:2f:9d:23:d8:95:82:65:7b:56:d5:fd:3b:3c:39:30:
c8:bd:de:0d:fa:c5:cf:b4:95:df:89:fb:f0:46:0a:0b:4f:b7:
ec:56:cb:f1:d5:82:ee:23:76:69:d4:87:f3:2e:ab:9f:cf:13:
e7:42:d9:94:b2:b7:f2:54:24:62:7a:29:39:ac:68:1c:7d:52:
0c:b9:3c:4a:2d:47:9a:cf:50:7d:99:05:11:32:43:12:c7:c5:
1f:ea:fe:b7:d9:4f:fe:30:5e:62:15:b6:da:21:3e:eb:0e:0e:
31:10:9a:fe:5e:86:fc:0c:89:b4:82:28:74:4e:72:7e:86:f7:
b4:09:e3:d4:fa:a5:b7:5f:a5:0a:da:9c:34:3d:a7:0b:4a:10:
0c:af:3f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:36:48 2025 by rpki-client