Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
File: Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft (raw, json)
Hash identifier: 18/wqN5U6JyHVuVX6W6025UumGd4X8aqsZuDZIExm3Y=
Subject key identifier: F0:3A:0C:DA:6B:DF:4E:3C:47:0D:86:94:EF:84:C4:2F:0C:64:FE:59
Authority key identifier: 26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
Certificate issuer: /CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Certificate serial: 019A70A57DE8344E09DB1F6A10F6D7F510EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
Manifest number: 094F
Signing time: Tue 11 Nov 2025 02:01:25 +0000
Manifest this update: Tue 11 Nov 2025 02:01:25 +0000
Manifest next update: Wed 12 Nov 2025 02:01:25 +0000
Files and hashes: 1: Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl (hash: anpsFVD+ZlE3uSSoenRkXcPdDhlFHwguu93up5HJJCY=)
2: ajGVT2wMT_DA-qwpbPbVP8c_jy0.roa (hash: GrnSfoc+sA7GUobf1ORT86tQoZJGPO6xDsTsTxwitnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:7d:e8:34:4e:09:db:1f:6a:10:f6:d7:f5:10:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Validity
Not Before: Nov 11 02:01:25 2025 GMT
Not After : Nov 12 02:01:25 2025 GMT
Subject: CN=f03a0cda6bdf4e3c470d8694ef84c42f0c64fe59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:87:0c:39:87:2c:59:66:35:97:69:b8:51:9e:
fb:69:2a:04:ed:7e:e9:35:a8:08:ba:15:4b:1a:95:
13:91:81:6f:8b:76:49:b0:d4:b8:f4:94:a6:4a:97:
b9:0e:95:a5:c7:a6:32:db:82:8c:46:2f:3a:8a:0f:
44:3f:4b:5e:ce:59:1d:2c:ca:22:ec:03:87:0b:ee:
e3:23:6f:0d:04:ae:ea:ae:1e:38:67:69:54:28:91:
75:56:1b:b8:e4:1a:08:2c:a1:6e:5f:8c:ae:3e:6a:
af:4a:96:ce:18:65:b6:7a:60:c4:44:97:33:91:b5:
45:a9:ac:63:aa:f6:d6:02:8f:0f:6f:c5:cd:a8:30:
dd:88:5d:cb:cb:9a:67:9d:c0:52:f7:80:ae:30:45:
d1:ec:d7:e9:34:f8:5f:76:32:9f:9f:94:10:e7:eb:
4e:1f:30:fd:96:55:b3:b3:93:83:9d:d5:52:5a:67:
83:9d:23:41:7e:fb:cb:ae:b3:f3:52:65:e5:6c:64:
8a:d2:9d:1f:c9:9b:e8:91:e4:7b:1f:14:52:02:c0:
44:ba:af:52:a1:58:0a:c0:57:7e:7d:5f:f4:6f:b1:
8d:d6:ba:5a:1d:d7:d4:02:1d:5e:90:8a:ed:2b:96:
90:83:f6:74:ac:41:ef:a1:a1:9e:2f:92:49:97:a1:
df:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3A:0C:DA:6B:DF:4E:3C:47:0D:86:94:EF:84:C4:2F:0C:64:FE:59
X509v3 Authority Key Identifier:
keyid:26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:7f:e9:a9:59:c4:6e:fe:bf:8c:49:b7:72:a4:57:8b:0a:45:
80:e0:74:c4:e6:ca:04:ac:31:fb:1b:61:3c:cd:69:eb:c0:46:
d3:1c:fc:60:b5:29:57:f3:a6:5e:51:f5:29:f6:de:2a:f7:56:
28:cf:1e:bd:41:20:da:a5:9c:5a:38:1f:c4:77:81:aa:3d:49:
96:09:fc:69:63:50:07:37:da:d0:0e:40:e1:c2:ea:d3:88:db:
31:88:43:06:9b:e9:80:bc:df:57:95:26:57:34:0f:bf:91:85:
a0:04:5a:5e:1d:8c:84:01:74:e0:02:e4:69:94:0c:ab:09:7e:
c2:b8:c3:15:42:c4:36:d7:17:2b:2d:40:bf:b0:72:98:cf:e9:
ef:1e:1e:55:bd:64:43:20:12:dc:b3:65:84:4d:ec:05:e3:17:
2e:87:45:7e:32:2f:6a:ab:8c:fc:f7:23:35:9c:d3:44:63:49:
1d:12:5b:fd:70:24:6d:6d:b9:d0:fe:2c:fb:87:e1:31:97:a6:
9c:b0:8e:60:da:75:1a:bd:6c:b8:c0:62:75:75:53:66:71:b3:
88:48:48:72:5d:de:8a:57:4f:4d:dc:7c:14:3f:28:5b:8f:a4:
4d:df:6e:3a:06:cc:a3:0d:cb:4d:ba:85:29:96:66:bb:6b:b7:
10:41:02:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:50 2025 by rpki-client