Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
File: JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft (raw, json)
Hash identifier: 1LQSa5XXg0YekygSJa3+gaRR9/QJm6bhFV0Zk7JZOos=
Subject key identifier: C9:A2:05:99:52:DD:C3:19:7A:89:00:23:DD:B6:7C:00:19:24:9D:98
Authority key identifier: 26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
Certificate issuer: /CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Certificate serial: 019A7293D726B232FB2CDFEEF6713E258203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
Manifest number: 0468
Signing time: Tue 11 Nov 2025 11:01:22 +0000
Manifest this update: Tue 11 Nov 2025 11:01:22 +0000
Manifest next update: Wed 12 Nov 2025 11:01:22 +0000
Files and hashes: 1: JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl (hash: FRiV0Wdpsq9+3iLbrvlVijxa0dn8Zzbiw1ju/MFc59Y=)
2: iqsUTfguaYVXgXe8Vuc2DqYtis4.roa (hash: 7sUhJ+4DrqI1GXlkga4LbUKQ6fX31R18iQCPmLz2YM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:d7:26:b2:32:fb:2c:df:ee:f6:71:3e:25:82:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2679520fb81a45fcbc42a6e9355807eb9a7641f9
Validity
Not Before: Nov 11 11:01:22 2025 GMT
Not After : Nov 12 11:01:22 2025 GMT
Subject: CN=c9a2059952ddc3197a890023ddb67c0019249d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:90:b8:b8:16:9c:42:ff:4e:98:08:e4:bb:
11:83:b7:5d:b6:8d:59:82:8d:bb:b6:8c:71:1e:5c:
c1:20:26:e9:a2:3b:e8:93:74:6e:81:6d:2f:b3:81:
3b:82:8f:12:47:ef:19:6a:da:77:9c:56:e7:62:c4:
b2:b6:9f:82:e6:99:7a:f9:b4:82:0c:8d:6e:17:d3:
ce:55:e8:cb:50:60:8c:13:1f:2e:a3:85:46:0b:28:
ac:f0:23:2b:26:83:30:dd:37:9b:60:21:67:f2:3a:
a0:ba:27:92:24:30:55:9d:0b:0e:ec:a2:bb:8f:f7:
17:01:b5:c8:96:d1:96:be:a2:4e:0b:31:0c:a3:fd:
b0:c2:5c:7f:a3:4c:54:af:08:f6:79:b5:00:0b:48:
a3:6f:88:1d:0c:b5:5d:a4:4d:83:ce:8f:d3:ea:4c:
82:ec:cf:8a:0a:70:40:f5:9f:57:18:40:c8:81:cb:
5a:56:b0:f9:54:f2:f0:e5:1f:90:a8:c5:79:64:6d:
22:b9:55:6c:9b:a9:f2:81:ac:bf:96:6a:3a:1c:df:
83:36:e3:78:63:60:a5:50:ae:df:eb:ce:ab:70:3b:
80:34:a0:b9:14:7b:18:bf:c4:8d:fa:2e:d3:de:59:
4f:c9:4e:71:2c:5a:63:c9:ae:08:79:88:f3:0f:a7:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A2:05:99:52:DD:C3:19:7A:89:00:23:DD:B6:7C:00:19:24:9D:98
X509v3 Authority Key Identifier:
keyid:26:79:52:0F:B8:1A:45:FC:BC:42:A6:E9:35:58:07:EB:9A:76:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnlSD7gaRfy8QqbpNVgH65p2Qfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/80e6fc-3aba-45e1-b9ac-fa8239f6c6b3/1/JnlSD7gaRfy8QqbpNVgH65p2Qfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c1:1d:64:bb:52:72:9d:ff:d2:38:c4:96:87:7f:da:8b:c9:
56:e5:9b:33:06:d9:17:46:cb:81:b1:57:2d:3c:64:58:40:3e:
6d:c9:17:a2:2b:3b:03:87:c0:06:3c:c7:08:bd:e3:41:8b:8e:
ef:db:0a:c5:bd:d0:0c:82:81:13:2c:4a:a0:5b:c7:40:bb:f3:
0c:72:7c:8c:41:3b:45:49:e0:39:06:34:01:cf:14:4e:ab:d7:
fd:8f:9a:b6:98:18:e8:d2:c4:17:e0:a9:e7:6d:20:fe:ec:25:
3f:f0:e6:ac:e0:3b:a2:6a:22:f5:87:17:95:6c:cb:a8:84:90:
fa:3f:df:10:06:1a:57:f4:45:2f:23:d5:13:8e:2b:fb:29:85:
83:d9:f2:fe:32:7b:6c:d9:0d:ae:aa:c6:1c:d8:78:9f:46:a8:
f0:08:79:8c:e7:62:9e:68:f0:fd:13:2b:60:9d:b1:ef:31:8f:
ea:bd:97:9b:70:89:e3:4f:2b:a1:46:67:b4:d5:fa:69:ee:cf:
79:22:32:34:88:f7:d7:be:9c:92:3d:fd:9c:2c:14:04:7d:3d:
e1:26:71:2a:a7:1e:97:66:cc:fb:eb:cb:33:c8:69:2f:39:7a:
46:13:50:d9:41:5e:b2:d4:58:a2:17:3d:78:d9:2d:ee:98:6d:
9e:97:c4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:56 2025 by rpki-client