Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
File: JtOCk_Zp20i20L0QNq3972vT03U.mft (raw, json)
Hash identifier: BPm2yPrKYSauuaOLVizZDKQ51i9vMjUGhWykBrUYOHE=
Subject key identifier: 76:90:DA:8B:FA:E1:3D:1E:6C:D4:09:8D:EA:BF:FA:A0:E3:ED:15:6C
Authority key identifier: 26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
Certificate issuer: /CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Certificate serial: 019A725CB12339ACF9C98DF6EEED90C1794A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:01:08 +0000
Manifest this update: Tue 11 Nov 2025 10:01:08 +0000
Manifest next update: Wed 12 Nov 2025 10:01:08 +0000
Files and hashes: 1: B5YSYjeYr4Sz9pWORRaMRNqbLdo.roa (hash: fM1qwPfPzh4uHHiPxXWA1vmQEzz1cIIEo/UJMyl+wj4=)
2: JtOCk_Zp20i20L0QNq3972vT03U.crl (hash: p1iyYoAau17/xaU8cp160KLGq1/Z8yKEmNBqPitCVwY=)
3: MKzlSHA5umAqwVeARbcnAeXl1jc.roa (hash: 4blSnw7gE5YpxzhFPmztaW8X3UNRRgK5gE8sJ2PE3n4=)
4: cChfPDptNzofN1E4iRkTKdK8OBE.roa (hash: nK1tdIlf/7RX3LJe2ABcu++XCwANrpLFYC4ADhoObCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b1:23:39:ac:f9:c9:8d:f6:ee:ed:90:c1:79:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d38293f669db48b6d0bd1036adfdef6bd3d375
Validity
Not Before: Nov 11 10:01:08 2025 GMT
Not After : Nov 12 10:01:08 2025 GMT
Subject: CN=7690da8bfae13d1e6cd4098deabffaa0e3ed156c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:69:e6:43:c4:94:28:91:84:42:8e:3e:0a:
38:9a:57:53:47:3f:cc:48:28:32:d4:2f:17:1a:9d:
2d:a4:11:59:51:e6:3e:f3:95:4e:e0:8c:10:a9:88:
9d:fb:a5:36:2c:4d:fc:53:37:d6:ab:90:a9:c7:51:
5a:23:0b:06:c8:16:9b:39:7a:69:32:1a:53:c0:d9:
6d:e6:c7:95:ea:e2:16:77:73:06:3d:b7:d6:2b:e6:
1d:cd:52:ab:f6:37:8f:20:30:b1:5e:00:1a:30:f9:
09:21:9d:cd:e0:5e:ac:83:dd:66:5f:4e:64:78:8d:
0d:fc:72:ed:bb:fd:d9:ce:80:c1:48:fc:79:ef:7a:
d0:70:ba:00:9f:e4:62:b7:20:92:1d:0c:b8:42:ca:
ed:b6:30:9f:4c:1c:08:d6:bd:06:2d:5f:99:20:a3:
e0:45:e5:d9:cb:69:1e:01:7a:06:30:ed:23:03:b4:
04:c1:44:a4:e8:0b:b4:66:97:4b:2e:ec:41:18:08:
8a:cd:1a:a7:4a:4a:18:7c:5e:e0:fe:e4:69:b9:f6:
3a:8e:c2:8b:22:04:28:11:0d:d4:0d:20:b2:78:f4:
53:ed:67:a7:fe:68:da:2f:09:8d:96:51:a5:1f:57:
54:bc:1e:75:a3:cd:ba:16:32:06:40:3c:6d:6d:79:
58:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:90:DA:8B:FA:E1:3D:1E:6C:D4:09:8D:EA:BF:FA:A0:E3:ED:15:6C
X509v3 Authority Key Identifier:
keyid:26:D3:82:93:F6:69:DB:48:B6:D0:BD:10:36:AD:FD:EF:6B:D3:D3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtOCk_Zp20i20L0QNq3972vT03U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07cc25-8597-430b-bc52-448b9b95b09e/1/JtOCk_Zp20i20L0QNq3972vT03U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b7:3a:a3:2a:06:b5:67:c3:d2:53:87:4a:9b:d1:9f:3d:e4:
98:73:92:a4:18:6c:00:ab:67:3e:4f:0a:3d:d9:fa:db:0b:3f:
aa:4c:95:0b:c0:48:75:19:28:8f:28:f8:a9:fd:22:05:91:6e:
0c:fa:35:c0:10:31:37:d0:a4:14:26:df:bd:ad:e0:2a:4d:6c:
28:dc:24:1a:13:47:8d:73:10:c7:ba:bb:fd:0c:66:2a:f6:3b:
8c:3b:da:ca:b2:f6:68:64:03:93:d7:6f:e2:1b:93:a1:fa:77:
e5:3c:64:43:e2:15:e2:57:3a:48:66:8e:5a:c7:d4:ea:da:2a:
d2:6d:6b:ae:0f:81:cf:42:f4:e3:e8:81:e2:82:1a:85:44:3c:
77:26:ee:f4:95:15:0f:0a:19:82:d3:31:ec:eb:ca:77:c8:85:
c8:01:0c:d7:f5:3e:91:15:69:0e:95:fe:61:7b:54:00:be:da:
cc:b5:8c:6e:bb:31:7e:5e:86:9f:4d:9c:19:c0:7d:97:13:f8:
0e:0d:85:20:39:17:07:a8:1f:ee:5b:65:8c:76:c2:21:a3:b5:
a3:7a:fd:24:cf:32:26:0c:fd:57:ce:22:06:c9:33:12:de:b3:
76:75:13:56:d6:90:78:d8:6e:18:d6:f7:48:91:18:f0:6c:72:
de:32:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:31:17 2025 by rpki-client