Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
File: JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft (raw, json)
Hash identifier: 1EMbmeTarwy3I0GBlAYFFQq6e/rfI+K4IKWfOpFe99I=
Subject key identifier: 86:04:94:48:00:26:2E:72:A6:18:FD:09:66:74:D1:BF:06:C7:65:CF
Authority key identifier: 26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
Certificate issuer: /CN=26425863c309f2655b884c1600394c4338e7fb41
Certificate serial: 019A71EEFC911BE6E20ACB250BDDDD3C7911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
Manifest number: 0F14
Signing time: Tue 11 Nov 2025 08:01:18 +0000
Manifest this update: Tue 11 Nov 2025 08:01:18 +0000
Manifest next update: Wed 12 Nov 2025 08:01:18 +0000
Files and hashes: 1: JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl (hash: CcqbxQQJ13IZdGBfo2AkAK+Qt8/y+2gFYrfBYCKKPOw=)
2: t5KH1FGaAuB50jIyv-mWsCV4YiY.roa (hash: WmKRabvhJ8d8xujyGtrgZuJ7rkW86Ru4hgJL7uZhjLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:fc:91:1b:e6:e2:0a:cb:25:0b:dd:dd:3c:79:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26425863c309f2655b884c1600394c4338e7fb41
Validity
Not Before: Nov 11 08:01:18 2025 GMT
Not After : Nov 12 08:01:18 2025 GMT
Subject: CN=8604944800262e72a618fd096674d1bf06c765cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b5:33:68:77:86:0b:b6:57:8e:45:87:a0:0d:
76:40:10:db:b4:ba:8b:56:04:ce:b0:ae:07:08:6b:
e3:62:49:04:1c:70:ea:2f:ff:d5:d9:93:a9:12:b5:
c4:ab:84:77:a6:1a:fe:fd:06:34:41:b6:c5:d6:b5:
66:1f:82:48:dc:02:bc:67:d8:7f:27:07:ae:25:0c:
75:6e:ee:44:29:33:8e:3f:a9:86:ab:74:7d:cc:62:
22:3d:b1:38:c5:42:13:49:7e:56:35:e9:99:b8:20:
c9:5c:d4:07:be:8c:b4:cd:a0:5d:38:05:54:1c:3f:
c8:3d:1b:38:98:8a:35:93:d4:b7:07:02:52:2c:62:
21:00:2e:20:6a:6c:1d:aa:4c:5a:ef:18:bc:9c:e3:
30:4e:49:d5:df:35:48:c9:2c:db:5a:4d:44:bf:1b:
bc:92:1e:6b:98:14:10:a5:b7:82:52:f8:4f:d6:7d:
a6:2d:b0:52:00:5c:cf:8a:08:f5:b6:83:a6:e1:b4:
b8:be:a7:52:a2:72:12:ed:e9:40:ee:e8:da:58:5f:
4b:d3:7f:f3:15:4c:0d:71:24:62:eb:6b:50:57:2e:
73:0f:ac:66:8b:59:2e:63:06:d6:aa:58:94:df:55:
c2:b9:d1:3d:01:a9:f3:f6:42:10:73:33:0a:5a:1d:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:04:94:48:00:26:2E:72:A6:18:FD:09:66:74:D1:BF:06:C7:65:CF
X509v3 Authority Key Identifier:
keyid:26:42:58:63:C3:09:F2:65:5B:88:4C:16:00:39:4C:43:38:E7:FB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JkJYY8MJ8mVbiEwWADlMQzjn-0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f10e0e-16ca-48b0-abdc-c14f6ba25cb0/1/JkJYY8MJ8mVbiEwWADlMQzjn-0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:d7:c2:76:4c:1f:77:ae:a7:ce:74:12:06:0d:0b:80:34:ac:
67:5f:cc:a7:e7:3d:d3:43:7c:ee:80:41:bc:5a:65:eb:84:62:
45:b0:17:70:1d:53:8d:08:37:12:81:87:e4:ad:c9:8e:2a:e3:
f5:b1:22:88:59:70:c7:27:28:8a:a6:65:64:82:9e:e4:6c:c3:
15:2c:45:6e:ad:98:5d:fa:db:66:3d:e4:3a:20:74:0b:c4:44:
ee:36:42:7b:8e:64:51:e6:7a:33:d9:ca:f7:12:98:c9:0e:76:
77:a6:52:54:17:13:69:b8:84:ca:52:3f:76:fb:57:2f:b4:b9:
36:4a:95:51:c4:09:a8:43:5e:82:13:9c:e2:56:95:cd:9a:d0:
40:38:3d:f6:3e:f3:9d:6e:26:0e:70:38:1e:b1:92:0a:c4:58:
cc:2d:f6:25:60:02:8c:25:4b:72:f5:fc:52:a0:7b:c9:59:6e:
27:ad:bf:2a:f7:0d:65:a7:b0:24:dd:52:69:a4:41:5b:70:2d:
07:97:fc:bc:5f:4c:c1:58:70:1d:f1:d5:93:2a:68:6f:1b:82:
04:09:ae:02:98:01:3b:f9:b4:2a:71:28:99:7f:1c:c6:8f:e5:
d0:68:b5:6b:6b:cd:e8:08:26:98:ef:33:f1:c5:d3:3f:9c:22:
92:d3:1b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:19 2025 by rpki-client