Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
File: jxLb_EZr00gJDtwa4yklIunXO9k.mft (raw, json)
Hash identifier: mIYVyeYbVf0Vs5SQZpKtpqmTNYHHV5hyLYGMooK/8Rs=
Subject key identifier: 9B:47:F1:C9:47:6E:C2:AF:67:B0:72:C6:B9:AC:7C:8C:F8:70:DB:95
Authority key identifier: 8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
Certificate issuer: /CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Certificate serial: 019A1AD0A7147056460AB3DC9585E8BE695B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
Manifest number: 0DD9
Signing time: Sat 25 Oct 2025 10:01:13 +0000
Manifest this update: Sat 25 Oct 2025 10:01:13 +0000
Manifest next update: Sun 26 Oct 2025 10:01:13 +0000
Files and hashes: 1: jxLb_EZr00gJDtwa4yklIunXO9k.crl (hash: Gio41MkBHLjDcKYgY9TczY6rfU3rmym8s6jEz+QNni0=)
2: yo4e6Dd_pcrThs4Ucnd01TxRwfY.roa (hash: zRJvfuooLD1ukObnKFMb0zFwDQ9keCDuprZkYYzC4qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d0:a7:14:70:56:46:0a:b3:dc:95:85:e8:be:69:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f12dbfc466bd348090edc1ae3292522e9d73bd9
Validity
Not Before: Oct 25 10:01:13 2025 GMT
Not After : Oct 26 10:01:13 2025 GMT
Subject: CN=9b47f1c9476ec2af67b072c6b9ac7c8cf870db95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9a:e8:f3:91:fe:fa:12:1c:f4:e7:f0:c8:5d:
9f:d3:2e:ea:05:4e:9a:7c:15:6e:eb:ae:ed:55:21:
7b:22:a6:21:e5:33:9d:31:52:8c:fb:a0:fa:61:42:
67:bc:8d:dd:6c:90:4b:86:1d:67:97:fd:e0:4c:eb:
49:f8:6d:c0:7e:fb:6f:c2:7e:5b:5b:b5:c3:6c:6d:
9e:03:f5:8f:e4:08:0e:16:d6:99:f9:91:e2:ba:d2:
bd:ff:ef:ef:bf:1a:42:d7:2a:4b:b9:2e:01:b5:64:
f3:75:7e:c5:d9:ca:4c:43:9d:d1:48:16:89:d4:0a:
62:35:79:f7:56:98:23:85:9a:3f:11:a2:b3:c1:c4:
1e:56:77:d8:ee:2d:ef:c8:61:bb:dc:f7:db:6d:83:
d5:ef:e9:fe:96:05:a4:53:b2:fe:1d:d2:3a:48:da:
55:cd:3e:53:6e:ac:3c:61:40:7e:8f:ba:b4:7c:64:
a7:24:70:f7:49:d1:ca:b9:61:49:b3:9c:21:50:ec:
76:0d:3f:c3:7d:0e:36:8e:42:70:49:47:3f:03:a7:
93:33:d6:24:b6:04:85:4c:f9:5c:dd:2b:8d:34:81:
d3:ce:03:74:0a:7d:ef:df:12:8d:b1:30:71:c8:ea:
b4:df:c8:1b:37:34:60:58:c2:a1:a5:50:5e:0b:89:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:47:F1:C9:47:6E:C2:AF:67:B0:72:C6:B9:AC:7C:8C:F8:70:DB:95
X509v3 Authority Key Identifier:
keyid:8F:12:DB:FC:46:6B:D3:48:09:0E:DC:1A:E3:29:25:22:E9:D7:3B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxLb_EZr00gJDtwa4yklIunXO9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/39b509-a67c-463b-9688-4b09bd8ed04a/1/jxLb_EZr00gJDtwa4yklIunXO9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:39:dc:85:de:75:95:4d:de:c2:f5:31:64:bf:22:b4:82:b2:
52:13:1e:68:e5:bd:32:4d:77:3d:bd:11:ef:8a:1d:4a:24:7b:
4e:46:04:ed:59:b5:e3:9c:14:2a:87:91:4e:c4:98:b0:8c:c9:
07:f3:cb:13:b6:4a:d8:94:22:d8:45:f6:78:ef:d5:65:0b:a3:
bb:01:08:52:09:89:ba:19:15:5d:c0:11:19:9c:b8:58:dd:87:
ee:95:91:52:61:c4:b7:8d:b5:a4:bb:42:70:66:52:c6:5e:6f:
a9:14:b5:e6:01:8c:81:6c:7c:df:81:b2:83:0d:30:ef:8f:f9:
39:3a:e4:86:a1:3c:23:67:9a:02:d4:79:ff:7c:74:e2:88:74:
ec:f1:92:c8:9b:3a:f6:0a:c1:63:da:2e:8f:b4:d1:45:85:71:
cc:9c:3b:0a:50:c4:0e:23:9f:38:c4:1f:fc:31:4a:05:74:d2:
01:0b:8f:76:ec:62:90:36:64:e8:d4:18:73:15:73:aa:bd:fd:
ed:c4:eb:1f:96:e9:02:39:9f:9d:0d:71:9f:d1:f9:a2:7a:1c:
a4:e5:23:d0:d1:2f:77:f5:0a:a9:06:40:bd:11:a6:df:ba:77:
89:f3:33:9c:a5:29:bf:f9:bd:40:d2:1f:00:5d:78:9c:fd:78:
6c:6d:5c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 19:57:33 2025 by rpki-client