Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
File: JA51lKriSk_Ww4VUUX2LnW-uBg0.mft (raw, json)
Hash identifier: PLxGzv6Zq2ZAShFWccgkqp6sEmLhaNEzMFDSeqeekMI=
Subject key identifier: F6:CA:5B:2F:71:34:DC:45:73:8E:0E:86:C2:8F:71:39:26:97:0F:94
Authority key identifier: 24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
Certificate issuer: /CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Certificate serial: 019A251CD132B07BEDDC1B50A88DCB06D115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
Manifest number: 1688
Signing time: Mon 27 Oct 2025 10:00:36 +0000
Manifest this update: Mon 27 Oct 2025 10:00:36 +0000
Manifest next update: Tue 28 Oct 2025 10:00:36 +0000
Files and hashes: 1: JA51lKriSk_Ww4VUUX2LnW-uBg0.crl (hash: NV+LPBKEZMwCeZQ8R9EEFEBVuOwSmWXnOxywhbuNQSQ=)
2: LkSjEtNw7y8FvIXezhAzO7bql6w.roa (hash: XWnh2LDRuVnV3zQSeTuxulNsHgB6C0TJ9AfUsOOpruk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 10:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:d1:32:b0:7b:ed:dc:1b:50:a8:8d:cb:06:d1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=240e7594aae24a4fd6c38554517d8b9d6fae060d
Validity
Not Before: Oct 27 10:00:36 2025 GMT
Not After : Oct 28 10:00:36 2025 GMT
Subject: CN=f6ca5b2f7134dc45738e0e86c28f713926970f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5a:1c:dc:35:9b:ba:25:db:39:5b:07:6e:8c:
51:32:3b:df:8f:64:d3:fc:7c:aa:26:db:ed:e8:65:
df:6e:75:7d:49:64:df:0d:5c:3d:6b:1d:44:47:5e:
ad:30:4a:c7:18:fb:a6:ac:ec:21:27:c9:7b:ba:c1:
ed:31:77:e4:d0:0d:45:7d:74:a8:91:c4:a3:93:ef:
04:1d:97:3f:46:67:48:e0:1c:1f:42:5d:45:7a:4a:
58:a5:f7:d1:f5:22:2d:a2:8f:63:c0:da:bb:27:f7:
ea:6a:2d:fe:60:f3:b8:47:c5:e2:06:bd:d8:28:54:
71:88:ef:74:fb:a6:a1:4e:d9:36:ff:a3:0d:29:49:
ef:29:66:06:d6:ca:34:88:54:57:6e:19:4e:57:c2:
21:54:87:68:32:cf:7e:41:be:b6:d1:2b:a8:f5:d9:
3c:03:7b:c8:45:d4:1c:96:0a:ba:da:1a:60:50:10:
4e:75:9d:74:fc:33:40:44:b5:ae:cb:98:0d:9e:8e:
25:50:ee:e1:e7:e9:98:e3:bf:27:98:26:42:96:01:
80:dd:5f:05:65:b1:ef:8a:22:ff:5c:54:6c:f0:b5:
10:a7:8f:91:cd:da:b8:dd:09:26:03:79:eb:d9:e9:
87:b5:20:5a:67:f5:30:23:22:2d:9c:a4:0e:11:71:
be:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CA:5B:2F:71:34:DC:45:73:8E:0E:86:C2:8F:71:39:26:97:0F:94
X509v3 Authority Key Identifier:
keyid:24:0E:75:94:AA:E2:4A:4F:D6:C3:85:54:51:7D:8B:9D:6F:AE:06:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JA51lKriSk_Ww4VUUX2LnW-uBg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5a260e-aec0-4e4a-aa85-4b8df098496d/1/JA51lKriSk_Ww4VUUX2LnW-uBg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:57:7e:a9:4b:3b:db:3d:05:72:29:96:2d:4d:be:d0:10:63:
0f:27:68:33:b7:43:d7:7e:86:ce:60:10:31:eb:a0:76:03:00:
26:d8:10:e6:fd:e1:b8:7d:c7:6b:0a:30:2b:7c:f1:b9:89:82:
f6:8d:a4:b6:20:42:4f:08:96:2d:ac:0b:ba:10:8f:22:cd:71:
ce:06:a8:29:c6:e6:8c:10:01:1d:18:d0:1e:d3:f7:4e:87:65:
3c:e3:23:a6:91:91:0b:b2:21:e3:7e:cc:9b:03:7b:f0:0f:ea:
b1:b5:41:5c:29:de:d1:51:08:96:9b:2e:17:02:1f:d6:16:fe:
bf:09:77:b1:51:a2:dd:38:9d:cf:88:e5:a4:d3:f6:51:43:3e:
46:b9:7f:55:22:22:35:53:92:7e:6f:97:fa:ed:15:ba:5b:24:
da:c5:2d:de:c6:e5:e8:fe:96:30:0b:4c:f4:96:72:b8:2c:b2:
cd:c0:ba:97:5e:ed:97:7e:c7:01:47:a3:3b:b3:79:50:b7:2d:
24:7e:d4:b5:e0:1b:03:31:76:7e:be:8b:e5:ed:41:72:6b:47:
d7:8e:7c:70:7c:6f:f5:df:73:dd:2a:ad:e0:8f:c6:d9:ac:d9:
15:38:07:77:12:b2:d7:f8:69:54:87:48:50:01:36:21:c7:6a:
69:27:91:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 18:22:32 2025 by rpki-client