Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
File: JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft (raw, json)
Hash identifier: yqiqDsQ/IyKQnrf9gmKCv8sOnHm7fDiAiv/a+8aPBsI=
Subject key identifier: B0:1D:89:6E:2A:C5:62:C9:EC:8B:65:88:FF:B5:42:04:9F:62:53:D4
Authority key identifier: 25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
Certificate issuer: /CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Certificate serial: 019A7301622064D9B35D235C81969BC8E0F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
Manifest number: 1F
Signing time: Tue 11 Nov 2025 13:01:01 +0000
Manifest this update: Tue 11 Nov 2025 13:01:01 +0000
Manifest next update: Wed 12 Nov 2025 13:01:01 +0000
Files and hashes: 1: 1-O-D5pri3mmR8booyMgtZ5-BGW4.roa (hash: jb6YU5fT/HqK2xKc/LbLrArBSelpTLeT7YITNpvV0to=)
2: JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl (hash: UCAQ8Q4/MV0Wf9gNydj9Nu4soqLCFWhIGhWQuhSjU9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:62:20:64:d9:b3:5d:23:5c:81:96:9b:c8:e0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2594a8b3d75c5b220ed99cf2e72004f6ec11aa97
Validity
Not Before: Nov 11 13:01:01 2025 GMT
Not After : Nov 12 13:01:01 2025 GMT
Subject: CN=b01d896e2ac562c9ec8b6588ffb542049f6253d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:3a:5a:3e:5d:95:b7:12:8c:a1:7b:2b:48:
b1:a9:53:f0:2d:d2:40:0a:e4:a3:9e:4a:f6:11:16:
ab:99:0b:91:a8:3e:b6:ac:88:75:8c:1c:b8:3d:5e:
ee:62:1b:22:1b:d6:c1:dd:24:91:72:d9:f3:f0:e6:
35:74:40:11:22:1c:13:e5:c2:7a:09:59:5f:b6:83:
26:fd:91:bb:4b:30:0a:28:f8:a9:a9:42:be:3d:e3:
58:69:b5:ba:0f:a2:4e:95:13:4f:6a:2d:e1:9a:a1:
a4:29:a4:e3:7f:75:8f:e8:b9:ab:35:34:8b:a2:9c:
f1:74:d7:29:0d:b8:7b:9e:76:d4:d0:0e:4b:4e:84:
67:cc:fb:d0:59:81:ae:37:f6:36:6c:7a:80:61:39:
19:91:9d:22:ab:4b:ff:da:21:a5:e0:24:94:fd:50:
58:df:f0:d2:bb:cb:0b:9a:c7:59:ae:ad:ca:36:ca:
45:8a:2a:65:42:4f:74:80:8c:cc:67:83:43:8a:2b:
f1:b1:27:9a:ea:5b:ff:97:17:43:04:76:35:99:01:
fd:fc:ad:14:ee:80:41:75:3b:dd:ee:26:37:1b:5c:
83:3c:77:62:8e:22:c9:74:50:92:e2:ba:c9:b9:f0:
12:d8:ce:50:bc:40:e2:7f:f4:ca:a4:ad:01:ed:96:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1D:89:6E:2A:C5:62:C9:EC:8B:65:88:FF:B5:42:04:9F:62:53:D4
X509v3 Authority Key Identifier:
keyid:25:94:A8:B3:D7:5C:5B:22:0E:D9:9C:F2:E7:20:04:F6:EC:11:AA:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZSos9dcWyIO2Zzy5yAE9uwRqpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b4cde-1aa6-4e88-9a3c-1ca9c262ce73/1/JZSos9dcWyIO2Zzy5yAE9uwRqpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:bc:42:eb:f1:c8:65:db:80:b5:0b:5b:5b:a7:9a:9e:4f:9c:
6a:cf:fd:dd:ef:7e:1a:b8:10:62:d4:28:9c:e0:ae:a3:ca:48:
83:9e:c5:f6:30:fe:cc:6d:e0:9b:f1:d3:93:38:7d:7d:06:75:
0b:b7:42:e2:fc:4f:4d:35:c0:6e:50:8f:05:34:ed:9d:fd:19:
52:d6:69:cb:bc:50:a1:0a:6e:07:6f:d9:13:d0:14:13:d3:b7:
7a:bd:df:88:0e:ef:18:8b:d6:ab:97:af:cb:40:72:b1:5d:56:
ed:28:f1:2e:83:d2:eb:90:8e:20:ab:91:11:9d:e4:9d:a8:69:
67:38:02:41:b2:bf:f0:5b:71:1d:d8:ba:ba:a6:a4:e3:cb:f0:
ba:a4:4f:12:4e:fa:02:a5:e7:05:89:43:9c:48:ca:81:38:6c:
66:d5:f9:15:c4:32:64:b7:ce:e1:0e:d1:55:a1:f1:99:b4:4d:
ac:fa:7a:f0:05:65:3d:12:4e:14:15:7b:74:da:48:12:2b:4f:
9e:3b:d1:6a:7a:72:d7:1b:11:10:a3:1b:52:ac:72:c6:ab:16:
2b:43:e9:54:2c:4d:4b:a9:68:28:82:04:82:13:cb:96:0d:33:
fc:0a:11:2d:57:ad:1c:c8:c2:6a:8e:61:11:19:4a:19:28:1f:
76:5f:f3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:10:19 2025 by rpki-client