Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
File: JG-b54PXPZWriqVGGeYPkBHATWc.mft (raw, json)
Hash identifier: OvDodzX+tKkvXWClcMpxxBlNfN8nYALBcCmm9HdUC8E=
Subject key identifier: 0D:01:D1:98:9E:78:AC:D2:00:A1:4A:68:DE:AB:34:A6:EC:5F:94:8D
Authority key identifier: 24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
Certificate issuer: /CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Certificate serial: 019A6CC8BC9EE9EDE2C7D88702E7D71CFCE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
Manifest number: 08B0
Signing time: Mon 10 Nov 2025 08:01:25 +0000
Manifest this update: Mon 10 Nov 2025 08:01:25 +0000
Manifest next update: Tue 11 Nov 2025 08:01:25 +0000
Files and hashes: 1: JG-b54PXPZWriqVGGeYPkBHATWc.crl (hash: xSG2SqmKA5eUG3XJsJhc96CZKHlVYOHfVVFIMiAEzu8=)
2: yQOovkVgBPdQUYWIP8s5JEl_do0.roa (hash: teGG3Giw/XqatuTMOZRs13KC4GUJoaqGETNz76LPhGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Nov 2025 08:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6c:c8:bc:9e:e9:ed:e2:c7:d8:87:02:e7:d7:1c:fc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=246f9be783d73d95ab8aa54619e60f9011c04d67
Validity
Not Before: Nov 10 08:01:25 2025 GMT
Not After : Nov 11 08:01:25 2025 GMT
Subject: CN=0d01d1989e78acd200a14a68deab34a6ec5f948d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3f:ce:0f:85:14:66:6c:33:0f:e8:b8:75:f4:
f5:27:55:34:4b:73:94:ea:bd:a8:e5:62:d9:37:ff:
df:6d:4f:19:98:02:c0:dd:fa:51:ce:e5:a9:3f:e4:
58:02:3f:eb:29:0d:f4:1a:9b:8d:68:80:48:aa:74:
ec:0c:bd:19:b3:60:6c:30:40:ab:b8:89:be:78:85:
77:a7:07:98:97:df:ad:86:b9:85:4d:8c:f5:b6:77:
0e:be:b8:e7:9e:83:d8:12:30:09:05:9b:cc:15:da:
52:c0:6b:a9:5e:62:81:a0:07:31:72:d8:34:e3:56:
a3:46:fc:d9:dd:f4:8f:35:40:39:a8:47:f2:f1:a4:
b8:ed:cd:b4:d7:97:73:35:62:28:59:35:78:d6:12:
bc:ec:df:00:34:82:8a:82:48:e0:2c:66:f9:9f:62:
5c:64:70:e6:dc:49:c9:a6:00:69:be:28:3f:f9:2b:
62:47:6a:e5:2b:fa:5b:6c:85:97:01:3c:12:2e:56:
b1:dc:6b:d7:7c:94:9b:18:bd:6f:84:d6:d1:14:15:
e8:1d:d1:f1:3a:c6:c7:b3:7e:89:b0:73:16:52:ee:
96:f2:03:98:11:e1:ad:92:4e:dd:21:eb:e7:d5:c7:
11:d6:31:90:92:40:e3:ae:49:7c:90:ef:bc:6d:5e:
ae:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:01:D1:98:9E:78:AC:D2:00:A1:4A:68:DE:AB:34:A6:EC:5F:94:8D
X509v3 Authority Key Identifier:
keyid:24:6F:9B:E7:83:D7:3D:95:AB:8A:A5:46:19:E6:0F:90:11:C0:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JG-b54PXPZWriqVGGeYPkBHATWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/baa372-823b-4b07-9aab-cbbd01f2b91c/1/JG-b54PXPZWriqVGGeYPkBHATWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7b:67:05:cf:90:6b:75:d1:b3:bc:dd:d7:ec:83:8a:20:53:
83:73:e8:b5:ec:d2:f2:37:d1:74:ae:51:2d:de:39:8c:8f:d2:
7a:da:b2:81:d4:1d:94:47:10:51:7b:32:b2:b5:40:7a:63:fd:
af:25:aa:99:92:af:81:57:26:7f:27:21:52:32:28:7c:17:b5:
42:9e:6f:b3:1c:44:82:87:98:50:44:c6:17:4f:a3:5b:9d:07:
61:97:27:dd:b6:99:15:e6:41:27:11:aa:8c:16:1d:fa:d6:44:
37:1b:dc:52:46:1d:0d:0b:ab:79:6f:36:63:57:bb:d8:05:f4:
77:0e:e7:37:5d:c6:85:6e:ea:ca:f2:0f:f3:2e:ad:78:a2:52:
f3:e1:e2:b3:c3:07:42:26:87:28:99:ec:bb:a8:e1:b4:87:ae:
56:33:24:2c:d1:e9:3c:82:2f:72:37:be:57:d6:37:d9:e2:30:
2d:f3:37:e7:c5:ab:0d:e9:48:01:fc:44:42:c3:ad:2d:73:11:
0d:dd:1d:46:9a:4e:bf:6f:75:8c:40:22:20:0c:57:7e:6e:49:
71:42:0e:d2:db:6b:ed:5e:f0:f0:ab:33:93:1b:1c:af:1d:9e:
d5:ce:33:66:30:ea:d8:e9:0d:71:b9:c5:60:57:07:06:2a:5c:
2e:f6:67:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpsyLye6e3ix9iHAufXHPzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NmY5YmU3ODNkNzNkOTVhYjhhYTU0NjE5ZTYwZjkwMTFj
MDRkNjcwHhcNMjUxMTEwMDgwMTI1WhcNMjUxMTExMDgwMTI1WjAzMTEwLwYDVQQD
EygwZDAxZDE5ODllNzhhY2QyMDBhMTRhNjhkZWFiMzRhNmVjNWY5NDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD/OD4UUZmwzD+i4dfT1J1U0S3OU
6r2o5WLZN//fbU8ZmALA3fpRzuWpP+RYAj/rKQ30GpuNaIBIqnTsDL0Zs2BsMECr
uIm+eIV3pweYl9+thrmFTYz1tncOvrjnnoPYEjAJBZvMFdpSwGupXmKBoAcxctg0
41ajRvzZ3fSPNUA5qEfy8aS47c2015dzNWIoWTV41hK87N8ANIKKgkjgLGb5n2Jc
ZHDm3EnJpgBpvig/+StiR2rlK/pbbIWXATwSLlax3GvXfJSbGL1vhNbRFBXoHdHx
OsbHs36JsHMWUu6W8gOYEeGtkk7dIevn1ccR1jGQkkDjrkl8kO+8bV6uAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0B0ZieeKzSAKFKaN6rNKbsX5SNMB8GA1UdIwQY
MBaAFCRvm+eD1z2Vq4qlRhnmD5ARwE1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iYWEzNzItODIzYi00YjA3LTlhYWIt
Y2JiZDAxZjJiOTFjLzEvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9iYWEzNzItODIzYi00YjA3LTlhYWItY2JiZDAxZjJiOTFj
LzEvSkctYjU0UFhQWldyaXFWR0dlWVBrQkhBVFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHtnBc+Q
a3XRs7zd1+yDiiBTg3PotezS8jfRdK5RLd45jI/SetqygdQdlEcQUXsysrVAemP9
ryWqmZKvgVcmfychUjIofBe1Qp5vsxxEgoeYUETGF0+jW50HYZcn3baZFeZBJxGq
jBYd+tZENxvcUkYdDQureW82Y1e72AX0dw7nN13GhW7qyvIP8y6teKJS8+His8MH
QiaHKJnsu6jhtIeuVjMkLNHpPIIvcje+V9Y32eIwLfM358WrDelIAfxEQsOtLXMR
Dd0dRppOv291jEAiIAxXfm5JcUIO0ttr7V7w8Kszkxscrx2e1c4zZjDq2OkNcbnF
YFcHBipcLvZnYA==
-----END CERTIFICATE-----
Generated at Mon Nov 10 16:05:50 2025 by rpki-client