Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
File: JJkvMtdIbftKMsLngQhUrGpmjjQ.mft (raw, json)
Hash identifier: 7fqHOd+juIliOl2r51PJ5OtWvLY9rTVfDvnqpxln6i4=
Subject key identifier: C3:81:D6:A4:D3:6D:25:69:72:7C:5A:77:A0:E3:08:B1:60:79:CE:FB
Authority key identifier: 24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
Certificate issuer: /CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Certificate serial: 019A71133AE456C62164EC72CCF22D1B82E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
Manifest number: 0A14
Signing time: Tue 11 Nov 2025 04:01:16 +0000
Manifest this update: Tue 11 Nov 2025 04:01:16 +0000
Manifest next update: Wed 12 Nov 2025 04:01:16 +0000
Files and hashes: 1: JJkvMtdIbftKMsLngQhUrGpmjjQ.crl (hash: UhaZ3hhHNEjcz9zEr4hV2fQsEvcqlZutlsk1oJ5S8YQ=)
2: SvgtOmag1Ed_NFITsp_g8SM3OYs.roa (hash: CvglQLYhu3pHLDYJxUoGcvgzwDqOLBBqoRW5UuJHkAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:3a:e4:56:c6:21:64:ec:72:cc:f2:2d:1b:82:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24992f32d7486dfb4a32c2e7810854ac6a668e34
Validity
Not Before: Nov 11 04:01:16 2025 GMT
Not After : Nov 12 04:01:16 2025 GMT
Subject: CN=c381d6a4d36d2569727c5a77a0e308b16079cefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:58:21:c5:d4:69:be:ef:6f:cb:0c:fa:7a:ec:
8f:4c:21:42:82:5c:df:32:27:de:e1:38:45:08:16:
a5:b9:aa:53:85:73:dc:d4:29:f8:09:8e:c7:8c:f6:
f9:19:c0:4d:66:0b:df:dd:91:61:52:93:a9:fc:aa:
96:27:f7:c9:0e:c9:59:7f:ab:97:fd:d9:c6:ab:2d:
44:8f:8d:ce:66:fa:5d:86:3e:92:ec:05:04:e6:a2:
1a:7d:71:86:a7:5b:f8:44:7a:0b:34:4c:5e:64:19:
e1:dd:cc:5e:60:7e:d3:82:99:8b:7c:17:ca:b2:58:
4c:78:16:d7:c3:54:1b:39:37:b7:f7:96:f8:d3:28:
1e:af:40:5b:95:ec:a3:40:61:55:a3:08:10:1f:5a:
22:70:4c:1c:38:09:19:ec:fc:9b:22:53:64:40:3d:
5d:dd:db:66:99:9b:23:51:70:2a:c7:0c:9b:b5:13:
29:38:3a:2c:2b:9b:a9:8f:f6:c8:58:3e:e1:d5:3f:
bc:04:15:5c:46:d8:1b:4f:ea:67:db:cd:af:01:70:
5f:44:8a:41:cb:2c:d2:23:60:e7:6b:f9:f0:55:be:
d6:9a:79:c3:3b:9d:73:8e:69:75:6e:d9:2b:da:91:
77:a4:55:1d:ec:58:88:77:80:76:99:f7:36:c3:9c:
35:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:81:D6:A4:D3:6D:25:69:72:7C:5A:77:A0:E3:08:B1:60:79:CE:FB
X509v3 Authority Key Identifier:
keyid:24:99:2F:32:D7:48:6D:FB:4A:32:C2:E7:81:08:54:AC:6A:66:8E:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJkvMtdIbftKMsLngQhUrGpmjjQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/219592-4a44-4298-bd8e-4b2e680c7491/1/JJkvMtdIbftKMsLngQhUrGpmjjQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:92:0d:56:a4:d6:14:40:8f:ac:8e:7a:c7:07:cd:b4:53:29:
4a:83:79:91:59:ea:dd:8c:16:a8:d7:3e:87:2c:a9:2a:9d:4d:
97:ce:60:da:c2:9f:e3:25:74:8f:41:1f:7d:0b:28:b5:d4:15:
0c:e6:de:e4:3c:72:da:6b:86:e6:8b:53:25:29:fa:b7:63:f3:
15:18:3e:ab:d9:c6:de:ba:d9:70:88:51:1f:6d:1f:49:ed:26:
2f:19:39:31:99:db:2b:b0:48:7b:bd:27:ff:1b:51:f7:da:a8:
a6:e7:55:d7:f0:95:36:13:d7:ab:45:41:7b:2f:da:64:88:50:
11:f9:ff:db:e7:01:7b:5c:8b:44:d9:c2:a0:25:e2:9c:1c:f9:
cf:73:f3:88:d6:dc:74:75:0b:e2:04:bf:ed:52:5b:d2:b5:9b:
f9:91:4d:1c:9a:5c:3e:67:f3:b7:31:b2:3f:35:c5:9b:9f:08:
b4:47:44:f4:5f:d0:65:ca:b1:bf:17:94:0b:13:73:88:ea:29:
86:f5:07:53:18:21:72:d7:1b:ff:35:a2:db:c3:f6:2a:6a:c5:
73:bd:01:93:7b:bf:ab:ab:ad:3d:75:b3:2f:a7:a1:59:37:7f:
93:3c:aa:78:61:ee:73:f4:41:95:ec:ae:11:d5:d3:c0:5b:f9:
8a:4c:a6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:46 2025 by rpki-client