Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
File: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft (raw, json)
Hash identifier: wL0dfzvLgNmQOm5WNfSEdRbtoULRHj+jJfM0VhZWNXA=
Subject key identifier: DE:17:33:EB:D5:91:0C:61:3C:06:EA:43:E5:02:ED:71:47:7F:F8:F9
Authority key identifier: 25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
Certificate issuer: /CN=25717849a69ad8df87088da658b2305b8594c8c4
Certificate serial: 019A725C44B89F729ECD5CD01FFF7F818ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
Manifest number: 113C
Signing time: Tue 11 Nov 2025 10:00:40 +0000
Manifest this update: Tue 11 Nov 2025 10:00:40 +0000
Manifest next update: Wed 12 Nov 2025 10:00:40 +0000
Files and hashes: 1: JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl (hash: 2IXfBhxWsHn72VgRJWpgpguZEyUUs/ybHmJlpovAlEk=)
2: lBGL9p4jnzQMYNOwvgWWIRMR64U.roa (hash: 3FeAIvuJzpUiBU31icxKTzpDUG89bC33mLCDCqaCBw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:44:b8:9f:72:9e:cd:5c:d0:1f:ff:7f:81:8e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25717849a69ad8df87088da658b2305b8594c8c4
Validity
Not Before: Nov 11 10:00:40 2025 GMT
Not After : Nov 12 10:00:40 2025 GMT
Subject: CN=de1733ebd5910c613c06ea43e502ed71477ff8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:55:51:e3:41:9e:60:5a:ec:51:57:4b:5b:a3:
13:f7:08:93:eb:a5:4d:ad:1b:f4:1e:96:70:7d:f5:
a1:d7:13:aa:23:da:81:94:0c:99:3d:53:24:e9:71:
c0:f4:55:1b:c1:34:16:96:d8:18:7b:33:0d:a0:bb:
ae:bb:a9:22:8b:0d:5d:ec:60:37:17:c8:c6:e6:33:
9a:f7:2a:17:2c:35:a9:12:26:8c:f0:ca:fb:a5:66:
be:8a:b8:7b:e7:e8:34:9a:77:80:72:3d:0f:22:7a:
d0:25:07:50:39:93:e6:47:6d:39:de:48:40:40:2f:
55:d5:79:03:9e:8b:c6:5b:f8:04:de:1f:f6:bc:a4:
79:91:85:0e:9e:59:14:1b:cb:c8:59:79:d7:76:90:
c0:53:7a:84:d5:e6:0f:59:d2:ff:fb:44:10:76:f9:
77:9f:ca:b2:c1:76:91:3e:45:a7:87:8d:59:6d:f7:
e8:b8:cb:81:4a:84:fa:4f:08:0f:33:57:98:e0:64:
3b:ed:82:cc:39:70:11:2d:17:63:7e:9e:b6:31:59:
7f:e6:a6:bb:9c:29:94:e4:16:7e:ee:5b:c4:19:02:
69:b8:ef:1e:34:fe:0a:ce:36:75:77:82:d9:da:67:
d3:b6:b4:57:ca:aa:a8:42:9c:0e:5c:f1:30:1d:1f:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:17:33:EB:D5:91:0C:61:3C:06:EA:43:E5:02:ED:71:47:7F:F8:F9
X509v3 Authority Key Identifier:
keyid:25:71:78:49:A6:9A:D8:DF:87:08:8D:A6:58:B2:30:5B:85:94:C8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/095ecf-7d6a-4881-88e7-fe24ed2adcff/1/JXF4Saaa2N-HCI2mWLIwW4WUyMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:fb:45:59:74:1b:d2:17:7d:92:9f:49:9e:29:fd:16:0b:fb:
21:05:5b:9e:61:36:8c:e6:46:aa:a5:82:7e:de:b4:39:be:91:
6e:d3:56:8e:62:4c:0f:27:c5:c4:51:3f:fb:b4:af:84:b2:2a:
88:0f:d1:76:42:77:d4:ab:ea:5e:28:4d:e1:aa:8e:c4:df:9b:
70:af:a7:65:b4:59:79:11:82:d2:52:98:9e:fb:b3:f1:9c:a2:
ba:81:d5:99:b3:76:e1:27:34:10:f4:8f:72:e0:59:bc:cc:9b:
ce:d3:be:19:2b:1a:4f:59:3b:09:ea:a6:7f:ce:66:8e:bb:58:
92:e5:92:29:0f:0b:76:0b:01:0b:a4:bf:3d:f7:19:d9:78:1a:
66:7d:30:b5:0f:52:0d:55:e3:07:a3:67:17:3f:6c:82:85:33:
85:0d:9c:53:8a:1a:b7:f5:8a:92:58:8b:b4:2c:6f:1f:18:5e:
73:79:25:88:20:a4:73:0f:c5:12:1a:79:04:0a:9e:e5:8c:7e:
a6:56:cd:26:5a:56:07:d5:e2:2b:66:0d:e7:b9:79:df:61:39:
a6:0e:eb:51:29:b1:69:1d:ea:24:b3:9b:be:32:09:0c:92:d5:
48:4b:3f:29:82:ef:7e:d0:6c:94:8b:2a:fb:28:45:85:fa:f0:
b3:58:be:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:13 2025 by rpki-client