Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
File: JGDLdNAZgkw0siOu1McJqFeyxgY.mft (raw, json)
Hash identifier: QqDBbs5CXIMNRA2tmh+CfyBUOkDy2/uue97GnynitQo=
Subject key identifier: 31:0A:AA:FA:54:F4:7B:C5:7C:26:48:92:F3:16:28:BC:DB:30:D2:E1
Authority key identifier: 24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
Certificate issuer: /CN=2460cb74d019824c34b223aed4c709a857b2c606
Certificate serial: 019A72CA4507E02C459F33548E0B3062EA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
Manifest number: 059D
Signing time: Tue 11 Nov 2025 12:00:49 +0000
Manifest this update: Tue 11 Nov 2025 12:00:49 +0000
Manifest next update: Wed 12 Nov 2025 12:00:49 +0000
Files and hashes: 1: JGDLdNAZgkw0siOu1McJqFeyxgY.crl (hash: SGlOo+GdBTjj6AAYUOQkB94l0bzu4i51iy1C/lLT45Y=)
2: Po9Kd95ItrzwaoslHVQ8GkKDEsg.roa (hash: TRai4O+tEgZgd6yxFrk6Ul1AehRTWxDzlup3pEvU2bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:45:07:e0:2c:45:9f:33:54:8e:0b:30:62:ea:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2460cb74d019824c34b223aed4c709a857b2c606
Validity
Not Before: Nov 11 12:00:49 2025 GMT
Not After : Nov 12 12:00:49 2025 GMT
Subject: CN=310aaafa54f47bc57c264892f31628bcdb30d2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:32:c5:b3:d1:98:1f:2b:2b:af:3b:67:02:
2e:1a:5c:a3:21:89:a0:2b:b3:e3:c2:fc:f9:71:2e:
15:15:b7:f5:79:8b:1e:21:30:a7:0f:7c:f5:c8:83:
4f:3b:da:8e:65:32:f3:39:3f:51:3d:00:5e:52:86:
7f:34:78:9e:61:6b:08:dd:2f:ff:ae:84:85:ce:4f:
15:4c:48:93:ce:84:1d:28:e3:32:84:2c:c1:e9:12:
dc:fd:e2:a1:20:92:cd:cd:6c:55:ae:aa:66:69:56:
e6:d1:66:de:9f:9d:4f:1c:16:b6:85:90:14:63:70:
f4:78:04:57:9c:de:9d:0f:2e:cc:ae:64:34:f9:6a:
4f:d7:c9:e6:8e:e1:99:2c:06:b3:6a:ba:ac:0f:27:
c7:b8:f7:6b:06:f1:0a:3d:33:a3:e0:e8:3e:94:23:
a1:12:db:4e:9e:02:1c:f7:c1:8a:2d:dd:07:f6:47:
c3:e7:64:44:eb:1d:7a:b7:42:d5:a0:31:26:a1:a7:
4d:27:f3:9f:50:b7:3f:67:e4:57:77:7b:0b:18:c0:
d0:98:41:39:c6:70:fb:b1:b8:e0:6b:82:f8:33:c3:
5d:a5:bb:01:1c:c2:55:3c:07:56:65:0f:ff:44:f9:
06:c1:db:77:55:cf:ab:7a:a9:0a:3c:79:2d:db:1d:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0A:AA:FA:54:F4:7B:C5:7C:26:48:92:F3:16:28:BC:DB:30:D2:E1
X509v3 Authority Key Identifier:
keyid:24:60:CB:74:D0:19:82:4C:34:B2:23:AE:D4:C7:09:A8:57:B2:C6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JGDLdNAZgkw0siOu1McJqFeyxgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/b29205-0777-4eb0-8c13-3bc5dde542c3/1/JGDLdNAZgkw0siOu1McJqFeyxgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:bd:82:f0:b9:05:6e:a8:09:57:8b:a2:3e:6a:46:82:89:c3:
6b:38:db:ef:c5:fc:e9:9a:91:8b:99:fa:22:9f:62:13:97:32:
83:03:b2:62:b3:b3:6a:71:b3:93:ae:62:3a:cb:5e:ce:33:86:
ef:79:49:b2:5b:a4:8d:57:f7:3d:96:1e:c7:65:7f:14:f6:50:
ff:9d:05:45:40:1c:05:12:d5:82:d5:57:d9:5b:16:fc:d1:cf:
dc:4f:e0:79:5d:31:35:54:89:dc:cb:f9:1f:21:19:b3:5b:f5:
bf:f1:8e:94:5a:9f:33:41:21:a2:2e:57:b0:d4:07:89:34:e5:
9d:91:b3:3d:9b:87:0e:51:26:c1:b8:e5:cd:29:42:3e:8f:68:
d2:0a:1f:b2:90:ad:09:68:d7:ce:7f:8b:bb:1f:02:28:01:55:
de:34:2f:0f:61:94:47:e1:74:03:15:bf:66:6e:26:b8:42:b1:
d3:97:e2:1d:64:b6:39:07:a4:14:a8:7f:19:88:46:53:ba:cd:
11:53:44:5c:c4:81:ad:ee:2a:9c:88:7d:fe:bd:5c:fa:48:0f:
18:0c:5f:b6:59:7f:3a:17:6f:39:14:c6:9d:e0:97:8a:ce:b3:
78:98:fe:fa:9f:71:65:d8:fa:2e:60:5a:f1:60:5b:a4:14:7c:
ea:79:50:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:18 2025 by rpki-client