Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
File: jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft (raw, json)
Hash identifier: OZ7EJzNYJRqCxLAnZhb6q+Ed3LHd6IXMvFDm4jILtlI=
Subject key identifier: FC:4D:7D:C0:3A:FD:34:D9:4B:52:53:78:27:36:A9:89:FC:A8:17:EE
Authority key identifier: 8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
Certificate issuer: /CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Certificate serial: 019A71136CB7734EAD8EF948FC18D1EB5565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:01:29 +0000
Manifest this update: Tue 11 Nov 2025 04:01:29 +0000
Manifest next update: Wed 12 Nov 2025 04:01:29 +0000
Files and hashes: 1: jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl (hash: xc7mSnlrTKnSXkgs5agGl8UyzqTs+nT1Ge/RlJsLzbk=)
2: zomoxdAdOPcJkTkRQBtLj8THS7E.roa (hash: HywlERnXGDkjWEHTc4UIBFSfO9/yrJ9UtEQjc3ctIXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:6c:b7:73:4e:ad:8e:f9:48:fc:18:d1:eb:55:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e7fced4f34e7f37e751b5b45f30b99c6311f97e
Validity
Not Before: Nov 11 04:01:29 2025 GMT
Not After : Nov 12 04:01:29 2025 GMT
Subject: CN=fc4d7dc03afd34d94b5253782736a989fca817ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:3f:86:d1:44:c2:9a:43:47:a5:c9:d5:af:
44:79:b5:d0:db:d2:f4:74:a4:dd:53:2b:22:58:35:
80:7f:2b:ad:3d:22:77:b5:9e:e4:af:d1:23:bb:9c:
07:dc:18:f7:fb:06:f4:e7:e8:99:7b:ff:c3:b3:da:
46:bf:ec:ea:22:de:1e:65:0b:55:80:0c:73:07:a5:
2a:a8:77:bd:05:73:c4:7a:02:e2:7d:3a:89:02:91:
cd:8b:f2:71:02:ce:2a:93:52:66:eb:15:ac:63:4e:
5f:7e:9e:d9:b3:d3:6b:91:1e:65:cb:96:63:48:23:
6d:74:e0:8c:24:4a:14:4c:1c:5f:30:05:9e:46:76:
c4:e4:5e:84:31:47:b8:3d:f2:79:5e:57:50:28:38:
90:24:a6:e9:4b:35:03:c9:6a:be:e5:71:2f:6f:22:
ee:26:bd:f9:03:f9:5f:9a:4e:a6:00:c0:11:fe:a6:
16:1d:07:64:6d:80:61:ee:a5:34:81:d3:77:df:c9:
db:67:3f:52:3e:ba:67:c4:0c:03:8f:69:73:a3:ed:
33:5a:fe:b2:fe:7d:ad:af:fb:e5:56:97:1f:55:db:
9e:ab:d0:c1:25:1c:b6:6a:d8:9a:06:1a:59:e9:6d:
4d:bc:01:59:f6:30:ad:fb:44:27:7a:68:f0:c9:ab:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4D:7D:C0:3A:FD:34:D9:4B:52:53:78:27:36:A9:89:FC:A8:17:EE
X509v3 Authority Key Identifier:
keyid:8E:7F:CE:D4:F3:4E:7F:37:E7:51:B5:B4:5F:30:B9:9C:63:11:F9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn_O1PNOfzfnUbW0XzC5nGMR-X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/913cd7-593f-4e99-b5ee-0d050358e656/1/jn_O1PNOfzfnUbW0XzC5nGMR-X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d8:6c:ed:2c:ed:05:ca:96:6d:ad:02:e4:f6:11:d0:77:3d:
17:58:6b:ee:a1:3e:95:60:45:6d:e4:55:c9:0b:e3:d4:ae:d3:
0d:ee:27:e3:22:f1:68:96:92:25:93:9e:22:e4:21:74:5a:89:
29:a5:ab:75:6e:ae:f9:e6:3a:60:1d:c1:85:5c:c2:a5:b6:dd:
8b:91:0b:14:19:68:7e:49:fa:35:43:6b:46:79:fc:a9:66:45:
9e:fa:1b:01:1f:b7:6d:ad:31:2d:01:43:dc:07:52:89:c8:56:
09:af:4f:ef:6d:e8:4b:21:09:60:97:65:e2:83:10:01:13:e8:
37:17:a8:cd:d1:9c:55:2c:eb:5d:46:f3:fa:66:65:5c:c4:fe:
8c:6c:ef:48:ac:11:36:cc:67:6d:4a:5c:f2:78:8f:cc:46:95:
ad:85:3d:7c:f9:2c:db:ca:78:41:99:46:b6:f9:08:fe:b9:47:
62:4c:53:ec:96:76:79:06:ee:36:17:7b:c9:d9:8a:ee:12:f7:
98:17:55:78:de:f9:07:0a:2f:53:48:73:6c:5b:91:f0:43:5f:
c5:0d:33:75:4b:49:6f:11:cf:22:81:66:9a:ec:d1:be:f3:b8:
6e:32:2f:16:64:7d:f1:10:b3:45:af:8b:7a:cc:57:b3:ec:c4:
17:d2:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:09 2025 by rpki-client