Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
File: J0iJxEELQxcvQcjBSuqJm7sq2r0.mft (raw, json)
Hash identifier: JG9gOpz4BciCNExEofccON2f8kXOaSto/LDuVviyQXk=
Subject key identifier: A3:0E:49:91:18:D2:22:CD:DB:B5:57:E2:A6:4F:78:F9:00:A9:B0:B6
Authority key identifier: 27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD
Certificate issuer: /CN=274889c4410b43172f41c8c14aea899bbb2adabd
Certificate serial: 019A73016754580EB4ED06D6C2583B162A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
Manifest number: 0D13
Signing time: Tue 11 Nov 2025 13:01:03 +0000
Manifest this update: Tue 11 Nov 2025 13:01:03 +0000
Manifest next update: Wed 12 Nov 2025 13:01:03 +0000
Files and hashes: 1: J0iJxEELQxcvQcjBSuqJm7sq2r0.crl (hash: 887AsW+6YEAQV8gtzgANre084Rp7mm0ocnV6rRMEWiM=)
2: gFEXxLFUU8a__opADc1vfw8jMw8.roa (hash: GCpDj9Bn6kn9jlHLv2Vqxyqzwpl4Us46FPPhGtO7UYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:67:54:58:0e:b4:ed:06:d6:c2:58:3b:16:2a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274889c4410b43172f41c8c14aea899bbb2adabd
Validity
Not Before: Nov 11 13:01:03 2025 GMT
Not After : Nov 12 13:01:03 2025 GMT
Subject: CN=a30e499118d222cddbb557e2a64f78f900a9b0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:d7:7c:54:38:6d:2e:d2:aa:7a:aa:1a:45:
d4:a8:58:75:a2:b1:c3:d7:88:f7:08:46:b4:ae:9b:
16:79:e3:bf:f1:96:1e:c4:3c:1b:af:cd:7e:26:1e:
47:f0:69:d1:ec:03:b1:89:ae:a9:5f:70:c5:31:bc:
0d:bc:61:c5:70:7b:d4:a4:ce:64:7e:2e:9c:60:f9:
85:44:56:1f:d1:f7:e4:05:54:4b:e6:79:fa:0b:63:
00:88:95:3b:14:c6:cc:39:4f:8e:2f:87:c7:e3:fe:
d4:93:a9:41:2b:2f:94:24:35:43:86:29:18:f7:16:
85:ba:97:87:fb:11:2d:92:58:d3:dc:43:e6:c7:e2:
d9:3e:99:cd:14:26:ba:d5:6f:16:32:71:51:2e:ce:
1c:aa:e5:77:0f:9a:4e:11:5c:d9:c7:b7:d7:3b:cb:
16:3b:e4:07:ae:17:17:9a:5e:e4:cd:b4:8a:30:50:
e2:c9:84:b7:84:e6:28:34:da:72:0c:22:5d:82:45:
9d:21:be:5e:c2:29:b8:3d:a2:ea:5c:dd:b9:fb:4f:
06:62:3c:14:6e:21:91:90:36:44:0c:7b:2a:2c:6c:
6d:d1:03:7e:03:37:ef:d2:de:10:d2:d0:a4:2e:e9:
66:2c:07:1b:a6:36:a6:00:4b:8a:c8:f8:26:8d:58:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0E:49:91:18:D2:22:CD:DB:B5:57:E2:A6:4F:78:F9:00:A9:B0:B6
X509v3 Authority Key Identifier:
keyid:27:48:89:C4:41:0B:43:17:2F:41:C8:C1:4A:EA:89:9B:BB:2A:DA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0iJxEELQxcvQcjBSuqJm7sq2r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/62bacb-a95f-430b-aff9-19a3eda0524e/1/J0iJxEELQxcvQcjBSuqJm7sq2r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:e6:b0:e5:38:43:66:a0:ac:be:cc:11:dd:7e:bb:e8:61:83:
ba:09:c3:2e:ad:cd:70:3c:9e:5d:92:e6:ee:5f:51:16:32:c3:
07:e3:d1:81:00:cd:4c:87:a0:26:2b:78:5d:19:d1:e4:c5:b5:
15:18:da:2f:a5:a2:64:87:fa:ce:c0:bf:38:77:56:2a:3a:bf:
73:f0:5a:17:c3:a7:6d:1a:66:5a:02:81:27:5d:74:b7:07:7e:
ef:0d:e6:fa:c8:8b:02:23:0d:eb:4e:a8:af:03:eb:50:1a:03:
67:e2:f2:d7:10:5a:fb:34:3a:dc:cd:d9:d6:c7:21:dd:41:38:
fe:00:1d:1c:81:b5:21:f0:c3:dc:4e:2e:54:ef:66:7a:5a:0f:
6e:af:df:55:aa:10:44:05:eb:b5:52:f6:18:56:29:69:9e:c3:
e2:ba:39:3a:c6:cc:78:da:52:4e:b5:0f:1e:a8:ee:a9:43:55:
e8:9b:eb:f8:f1:bc:32:1c:e9:de:7f:1e:0f:b3:63:f8:90:c2:
dc:3c:92:07:af:d9:a6:fb:d8:bf:aa:4f:25:fd:4e:c5:23:18:
85:5e:f8:60:2b:ef:c8:22:d5:39:cd:1b:ad:1b:ab:e4:10:26:
fc:a6:e3:4d:ba:4c:b5:86:50:ee:cd:fb:0b:bf:f8:53:0c:9d:
df:28:5e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:10 2025 by rpki-client