Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
File: JR54cf048t-RgkLdocb8NWiEI8o.mft (raw, json)
Hash identifier: wMidF9rMOYVuY0CmjipLE68j2RAcQSs+VQmacmJ5Hc0=
Subject key identifier: 6B:03:73:50:CA:0C:C1:5C:F9:04:5A:CF:0A:6E:4F:1A:17:1C:DA:BD
Authority key identifier: 25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
Certificate issuer: /CN=251e7871fd38f2df918242dda1c6fc35688423ca
Certificate serial: 019A21096D71A44B9AA27C638D7469639BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
Manifest number: 07CE
Signing time: Sun 26 Oct 2025 15:00:57 +0000
Manifest this update: Sun 26 Oct 2025 15:00:57 +0000
Manifest next update: Mon 27 Oct 2025 15:00:57 +0000
Files and hashes: 1: JR54cf048t-RgkLdocb8NWiEI8o.crl (hash: 7UgfKinvMN6zJn3SQNYnyjl4f3bbQAS/98tPMnLjp2k=)
2: P05t3kiYPDkZIteTxzHkdWLEeeU.roa (hash: BIrJT8z8EjrhQoOfb8QVBhdG6eDY7ydaRNIxS8nhYAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:6d:71:a4:4b:9a:a2:7c:63:8d:74:69:63:9b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=251e7871fd38f2df918242dda1c6fc35688423ca
Validity
Not Before: Oct 26 15:00:57 2025 GMT
Not After : Oct 27 15:00:57 2025 GMT
Subject: CN=6b037350ca0cc15cf9045acf0a6e4f1a171cdabd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:fa:8b:17:b0:96:7e:93:24:9b:bd:a6:6d:
97:b4:53:1a:46:dc:21:94:62:ed:8a:84:37:82:20:
b5:b2:6c:15:15:3c:f5:51:69:c9:78:4f:ab:78:5f:
01:61:ac:23:76:8e:cc:65:48:eb:cb:8f:dd:4a:ff:
4b:e5:4f:6d:08:89:2b:1e:62:60:f4:c7:2d:ef:8f:
d3:46:c5:1b:ba:08:48:ca:da:7d:5c:8c:28:b3:e6:
0e:85:cf:e3:92:7e:69:14:2f:80:10:33:44:c9:64:
5c:3a:18:98:be:62:ee:98:9d:2f:f0:04:9a:77:c3:
5e:09:64:bb:51:b4:92:c9:44:c6:08:2a:9c:b0:5d:
6b:4e:50:6c:33:ae:db:7a:bc:e9:34:9f:06:58:6d:
30:db:2d:4b:0e:5d:2f:7f:6a:4c:e6:68:6c:aa:5b:
e7:94:4c:10:ef:35:a9:ef:5f:a7:a9:27:d0:77:1f:
50:e9:e9:24:48:a4:3f:99:ba:80:ae:46:65:e8:7b:
51:71:57:c6:b5:df:b4:31:f2:9e:a4:1b:a5:28:44:
b6:df:83:57:d0:76:f0:7f:c7:e7:98:e0:61:79:7a:
2b:ec:c9:6f:f6:99:b3:3a:d2:ac:aa:a6:07:fc:ea:
8c:1b:ca:5e:a5:79:f5:b0:ad:b2:92:45:98:12:d4:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:03:73:50:CA:0C:C1:5C:F9:04:5A:CF:0A:6E:4F:1A:17:1C:DA:BD
X509v3 Authority Key Identifier:
keyid:25:1E:78:71:FD:38:F2:DF:91:82:42:DD:A1:C6:FC:35:68:84:23:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JR54cf048t-RgkLdocb8NWiEI8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7113df-e0e8-440e-a118-8beadaaad0b1/1/JR54cf048t-RgkLdocb8NWiEI8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:59:5d:41:82:ff:d3:fc:ab:e4:66:df:4e:17:59:7a:74:fb:
ed:d1:c8:26:13:6b:d9:bb:90:e2:84:cd:96:32:63:c5:9a:bc:
6a:c8:eb:64:95:f9:38:d2:58:a0:37:55:4f:fb:de:6f:32:be:
bb:1e:22:c2:30:13:12:f0:91:be:1c:87:d9:1a:6e:ab:b8:ef:
f7:a5:f6:7a:c3:65:14:c1:3a:48:45:75:f2:d8:eb:f9:7c:92:
09:3a:cc:7f:7c:22:e2:62:75:71:ba:f0:d1:b8:ed:26:16:6c:
c8:98:4b:24:fe:ee:0b:43:1a:0b:4b:7a:f4:b1:c4:ac:53:0a:
86:e1:d2:ca:09:14:03:16:28:3f:b2:ad:e6:5c:1d:49:30:6d:
43:c5:de:43:ec:3c:61:6b:d1:44:01:6e:8e:bf:f0:23:b1:f9:
76:e4:99:0a:fb:6e:d7:d7:69:d8:77:49:34:db:fb:7c:40:12:
07:db:5e:d6:78:d2:f9:15:44:74:33:5f:bd:1c:a2:63:53:f6:
1e:56:b4:2a:92:28:28:c2:c4:0b:ff:cd:8d:db:76:8d:92:90:
69:d6:f3:ba:15:69:e9:7c:e8:a0:9a:3d:05:ca:9b:46:a2:b2:
1a:09:ae:af:22:fa:62:f0:2c:d5:94:fd:e9:a8:48:20:6b:ce:
8a:ff:87:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:36:38 2025 by rpki-client