Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
File: JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft (raw, json)
Hash identifier: 0P953G2PJ1VXQfMNxa/fxWi4ed6r9Bdd8R2vDQ+3PJk=
Subject key identifier: AA:C9:DD:96:29:82:0D:AD:3E:B4:0A:7B:AA:A3:FD:F0:4B:64:CD:00
Authority key identifier: 26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
Certificate issuer: /CN=26a021d2587342c49453f151342208c8de944f2c
Certificate serial: 019A7112B28BF88FEF7AA8D13D258DB7F967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
Manifest number: 0270
Signing time: Tue 11 Nov 2025 04:00:42 +0000
Manifest this update: Tue 11 Nov 2025 04:00:42 +0000
Manifest next update: Wed 12 Nov 2025 04:00:42 +0000
Files and hashes: 1: JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl (hash: wRTTkMGhnST+ARY8h0wlSTJ/Il6oQkvEQlMyei+RNBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b2:8b:f8:8f:ef:7a:a8:d1:3d:25:8d:b7:f9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a021d2587342c49453f151342208c8de944f2c
Validity
Not Before: Nov 11 04:00:42 2025 GMT
Not After : Nov 12 04:00:42 2025 GMT
Subject: CN=aac9dd9629820dad3eb40a7baaa3fdf04b64cd00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:4f:0b:2d:19:a0:c3:1a:af:b5:07:46:14:
d5:14:c4:db:c2:04:42:b1:22:60:e8:19:2a:4a:6e:
8a:fe:77:d6:1b:ac:38:a4:10:cd:23:3a:cf:01:77:
7f:d2:41:59:40:35:eb:b9:b8:db:d9:7f:04:11:a6:
29:84:b3:81:ee:c5:75:0d:69:66:3a:52:76:18:7b:
36:2e:85:1f:b2:46:04:b2:4c:d4:e8:0e:c8:f0:4c:
8b:78:78:5f:be:0f:47:ee:d4:66:c2:cf:c5:15:bf:
df:d9:ba:54:c3:74:64:81:56:d5:d0:6f:6d:c1:fc:
bb:c0:10:4f:4c:01:ea:ac:27:9a:f4:fa:04:0e:ad:
32:02:2b:b6:8f:e0:c3:8a:cd:54:e3:5f:3f:79:8b:
c3:c8:93:05:68:57:1c:52:4d:18:48:59:96:d8:65:
f8:59:b5:02:de:d2:58:27:0b:1c:c2:64:ed:68:f4:
24:0a:9e:e9:44:d1:c1:ff:bf:47:56:80:a7:1b:92:
de:90:f9:a7:6f:c3:f9:d0:61:5c:89:30:d0:18:57:
88:9e:ad:bb:8b:a9:7c:d8:7a:84:1e:f9:aa:7a:18:
4a:8e:3b:7f:cf:e7:58:db:3d:d8:71:18:eb:9c:b5:
1b:03:bd:70:5d:41:3c:50:d4:f9:9d:c1:98:9e:50:
d2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C9:DD:96:29:82:0D:AD:3E:B4:0A:7B:AA:A3:FD:F0:4B:64:CD:00
X509v3 Authority Key Identifier:
keyid:26:A0:21:D2:58:73:42:C4:94:53:F1:51:34:22:08:C8:DE:94:4F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqAh0lhzQsSUU_FRNCIIyN6UTyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a726a8-79f6-471f-b974-4a33bf51801e/1/JqAh0lhzQsSUU_FRNCIIyN6UTyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:4e:bb:00:65:b8:e9:4f:30:ae:36:57:f9:c5:d5:b5:a5:3f:
a3:dc:ca:f6:45:e9:40:4d:9f:87:a1:4c:92:5f:bf:d8:83:f5:
8b:ed:8e:5c:25:5c:0b:3f:18:60:66:cf:c9:a8:3a:ff:ce:e5:
ba:ae:bb:da:d9:f3:90:32:71:2d:41:db:11:bc:5d:f9:8b:d9:
50:73:10:ea:cc:a1:d0:19:b8:2e:ae:0c:ae:8d:3e:86:10:fb:
41:5e:7a:49:3b:58:41:e0:bc:c6:63:18:69:50:40:28:31:2c:
05:8b:b0:43:94:ee:52:c5:e4:2e:71:27:3c:1e:b3:6d:b3:51:
74:80:c2:67:60:c6:1e:21:f1:45:d6:7c:4c:8f:4d:42:4f:79:
77:75:02:52:15:2b:71:f1:bd:a8:bb:3b:78:82:8f:d7:df:b4:
c8:c6:8f:f0:21:6c:92:4a:30:03:6f:f2:64:19:ed:af:ca:94:
4d:45:7c:f4:ba:ee:d6:e3:66:ea:e1:58:67:2b:d4:f0:93:3d:
17:fd:9b:fd:2f:b6:6c:8a:50:89:34:a3:a2:68:4f:5c:78:7c:
bb:14:30:9a:6b:0f:6b:d3:f4:64:00:66:ab:8e:83:0b:ee:66:
cb:69:0f:68:80:4e:c2:5f:d7:df:50:69:82:e0:96:81:4c:d5:
f6:49:fe:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:55 2025 by rpki-client