Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
File: JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json)
Hash identifier: SQYUCDhqHowkcg2ESCd8L1/qyWWJx2C+Olgkp22TGMI=
Subject key identifier: 20:9A:3C:BC:94:5A:D9:C4:0E:DB:20:48:90:D5:57:CD:7F:4F:6B:F9
Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
Certificate issuer: /CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Certificate serial: 019A73015B4DE0A3F5651B52CA8635B8F224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
Manifest number: 11D6
Signing time: Tue 11 Nov 2025 13:00:59 +0000
Manifest this update: Tue 11 Nov 2025 13:00:59 +0000
Manifest next update: Wed 12 Nov 2025 13:00:59 +0000
Files and hashes: 1: As6vwkWGZxruqh4uQQnrE0_5Wkc.roa (hash: +uKniDECqLf36Ns+Ibc2IgSroQKNM4uwIuCwreWx2Qo=)
2: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: o2nJKjUoFrvxHwYj6RwQwf99u018S/G7Sr8B/h0fjfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:5b:4d:e0:a3:f5:65:1b:52:ca:86:35:b8:f2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414
Validity
Not Before: Nov 11 13:00:59 2025 GMT
Not After : Nov 12 13:00:59 2025 GMT
Subject: CN=209a3cbc945ad9c40edb204890d557cd7f4f6bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:34:22:04:b3:3a:45:9b:1e:d7:9d:af:3c:4d:
c8:bf:1b:f4:ef:e1:d5:47:db:9f:0c:3c:a3:7e:f3:
a8:2e:46:58:3a:c1:8c:4f:95:d2:24:15:da:1e:10:
a5:08:9d:fe:9a:e5:0a:76:ed:db:64:6c:13:30:32:
db:de:e9:11:67:96:1e:2c:a3:73:bb:cb:eb:e1:18:
d7:2d:6e:5b:48:18:9e:81:46:7d:46:1e:d4:8f:2c:
45:45:f6:36:92:8d:eb:f5:ba:c3:8d:51:75:31:e5:
0f:ed:26:6e:b1:d7:a6:dd:82:ee:7f:bc:72:0b:9f:
52:a8:5d:63:37:16:14:ce:d1:72:d8:22:a6:85:3d:
88:01:d1:3e:fc:54:5c:ea:dd:3c:26:77:ce:cb:01:
50:f4:8d:81:08:c5:15:87:ad:d0:aa:fe:da:41:ad:
5d:a5:1a:1c:17:5e:d3:20:ca:b5:2b:f2:c5:a9:29:
0a:1f:72:ea:62:79:7f:3e:57:0b:cc:16:ad:cb:a9:
90:82:f4:b7:41:9a:6e:43:82:2a:0b:2e:08:07:3f:
85:8a:20:0f:2f:95:02:d1:1c:e6:c6:64:39:2a:45:
cb:80:b5:49:e1:72:38:bb:fd:02:88:85:e9:aa:c9:
13:da:e2:72:53:35:c6:37:95:b8:0a:0f:50:4f:af:
fa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9A:3C:BC:94:5A:D9:C4:0E:DB:20:48:90:D5:57:CD:7F:4F:6B:F9
X509v3 Authority Key Identifier:
keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:65:dd:71:4d:df:0b:e0:d0:08:87:61:64:09:94:64:bb:f2:
e5:3f:9b:46:98:15:0c:df:58:84:78:96:a2:68:ea:93:89:91:
06:e0:ce:b8:04:4b:91:8d:e0:d9:82:47:4c:2d:aa:4b:88:f3:
56:03:df:1a:bd:00:86:c4:c6:66:71:20:05:e0:d9:72:36:e1:
af:6d:ba:a5:5b:50:c5:1c:d5:fe:b8:08:1e:9e:11:6e:49:f9:
49:38:25:9e:0a:cd:c0:79:78:6a:61:47:2e:7d:f2:84:b9:eb:
b7:38:66:b5:eb:02:12:0d:be:cd:3f:b5:53:be:e6:6b:3d:54:
21:f2:ef:9d:31:5b:9b:48:48:f0:ba:e3:93:06:64:ba:70:65:
ce:c9:0f:b5:1c:45:f4:5d:17:42:60:d5:63:22:12:05:6d:24:
47:63:67:95:bf:fd:52:7b:d7:a7:2e:9f:96:eb:ba:67:05:25:
d8:83:4e:cf:cf:95:b6:2b:03:ac:5f:0f:0f:6f:36:c3:69:49:
d3:a3:40:c9:59:16:ff:ce:d9:b0:2d:30:ed:7e:36:d3:e8:ef:
27:fa:03:bb:a6:97:35:98:52:f3:b4:be:14:6f:91:d0:4c:3f:
6d:58:3c:8f:fa:7d:85:85:72:58:35:f0:5a:45:b4:71:98:b3:
a2:ca:d7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:52:58 2025 by rpki-client