Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
File: Js9NU-1cCkvT_iQiAalmZVyAzA4.mft (raw, json)
Hash identifier: Zw60UKenTz0sCRBzRjS9ZVEWQ+nsyXja4HvboVBqXH8=
Subject key identifier: A5:3E:A6:23:5A:21:79:86:92:B5:2C:B8:3B:C7:70:8D:4D:5F:5A:1D
Authority key identifier: 26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
Certificate issuer: /CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Certificate serial: 019A70DBF3636EC04680BBFBACBD922325A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
Manifest number: 13B0
Signing time: Tue 11 Nov 2025 03:00:54 +0000
Manifest this update: Tue 11 Nov 2025 03:00:54 +0000
Manifest next update: Wed 12 Nov 2025 03:00:54 +0000
Files and hashes: 1: Js9NU-1cCkvT_iQiAalmZVyAzA4.crl (hash: D+JDwaIQyiPLBysfe4ceruraM1S8zXHKH3F7HXLzsXY=)
2: MWBaP-HM3jMW5Yk6FgbmWZoD5R4.roa (hash: lV/XwmUehafjM9liZirbeuWxwquOHdPb1htNl8VM0b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:f3:63:6e:c0:46:80:bb:fb:ac:bd:92:23:25:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cf4d53ed5c0a4bd3fe242201a966655c80cc0e
Validity
Not Before: Nov 11 03:00:54 2025 GMT
Not After : Nov 12 03:00:54 2025 GMT
Subject: CN=a53ea6235a21798692b52cb83bc7708d4d5f5a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:2e:0f:47:cb:33:c1:69:ab:e5:f5:52:8e:
b4:e5:a4:83:40:00:c9:9c:73:5b:25:21:f8:17:78:
44:e7:4d:7d:cf:a4:14:79:92:77:e0:ad:e4:94:b7:
c3:5e:e0:f1:5d:72:99:c4:29:e0:ca:81:64:6e:41:
08:22:e7:f6:55:db:ea:57:e6:1f:80:68:36:a3:95:
35:82:07:43:87:cb:70:4b:c2:7e:e9:3b:73:76:0b:
3d:58:93:39:34:a3:2d:83:79:3d:98:1a:37:85:d4:
a2:e3:11:89:a1:c8:41:89:32:1d:18:df:bb:97:d6:
c5:28:41:64:33:2e:26:bd:1d:44:8b:f9:e3:47:0a:
39:74:35:0d:ca:ec:c0:c8:de:64:e0:99:29:4f:77:
00:89:ed:de:f8:45:8e:55:e9:d0:52:36:02:01:03:
73:9a:26:96:83:da:c3:a3:9e:7b:bb:1a:43:a6:31:
3f:98:eb:89:e8:03:a5:79:55:81:49:bc:c9:47:cd:
a9:73:b4:4d:02:87:71:c7:78:2f:2c:1d:6b:d6:c4:
0c:ed:86:d5:13:cf:a5:21:d5:b0:3b:7b:3f:70:61:
c6:6a:7f:f1:8e:3c:ad:ec:90:e7:7c:dd:a9:e1:27:
77:3e:26:66:b1:f1:9d:2c:53:ae:98:00:79:e8:16:
a4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3E:A6:23:5A:21:79:86:92:B5:2C:B8:3B:C7:70:8D:4D:5F:5A:1D
X509v3 Authority Key Identifier:
keyid:26:CF:4D:53:ED:5C:0A:4B:D3:FE:24:22:01:A9:66:65:5C:80:CC:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Js9NU-1cCkvT_iQiAalmZVyAzA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3ebce5-73e3-4e3e-83b0-a788fdc70948/1/Js9NU-1cCkvT_iQiAalmZVyAzA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:25:8a:9f:d8:28:30:f9:a6:34:b9:de:7e:be:b8:8f:ac:38:
7c:b1:44:9d:d2:7d:f6:cc:0a:08:97:e4:9f:f8:ac:79:42:d0:
a8:46:fa:cd:de:d6:f7:75:b9:9c:f9:75:fb:37:af:5a:b5:91:
92:c4:1a:e9:77:52:c5:ba:30:56:6e:fb:24:1b:d9:e2:a4:d2:
71:08:95:a7:c2:86:e8:76:93:3e:0b:56:de:f5:88:80:fa:5d:
e3:d5:2c:5e:47:16:1c:f1:28:ea:4e:1a:12:10:d4:75:ae:a2:
52:f4:c6:5e:0c:1b:07:c1:8f:b3:d8:68:00:ca:5d:54:23:09:
2f:c2:e9:e1:27:dd:ba:f3:5a:af:ec:a1:b5:5a:9f:7b:82:aa:
8a:4f:41:4a:59:82:2d:04:25:02:c1:e8:38:e7:89:68:e9:d9:
f7:7c:3f:f9:9e:5f:44:a6:c3:c5:df:d2:d6:cb:41:80:45:7a:
de:c8:2a:8c:19:98:70:61:19:72:c5:10:00:14:68:66:19:f4:
de:b3:aa:29:fc:bd:00:fb:af:7c:c8:39:6f:77:ad:00:22:0f:
3f:e8:05:0e:c5:3d:60:76:a6:97:4b:b0:bf:76:f2:46:04:be:
64:c7:49:95:ca:db:51:41:d5:f3:49:53:54:59:cb:5a:b5:29:
06:2b:c1:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpw2/NjbsBGgLv7rL2SIyWlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2Y2Y0ZDUzZWQ1YzBhNGJkM2ZlMjQyMjAxYTk2NjY1NWM4
MGNjMGUwHhcNMjUxMTExMDMwMDU0WhcNMjUxMTEyMDMwMDU0WjAzMTEwLwYDVQQD
EyhhNTNlYTYyMzVhMjE3OTg2OTJiNTJjYjgzYmM3NzA4ZDRkNWY1YTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e8uD0fLM8Fpq+X1Uo605aSDQADJ
nHNbJSH4F3hE5019z6QUeZJ34K3klLfDXuDxXXKZxCngyoFkbkEIIuf2VdvqV+Yf
gGg2o5U1ggdDh8twS8J+6Ttzdgs9WJM5NKMtg3k9mBo3hdSi4xGJochBiTIdGN+7
l9bFKEFkMy4mvR1Ei/njRwo5dDUNyuzAyN5k4JkpT3cAie3e+EWOVenQUjYCAQNz
miaWg9rDo557uxpDpjE/mOuJ6AOleVWBSbzJR82pc7RNAodxx3gvLB1r1sQM7YbV
E8+lIdWwO3s/cGHGan/xjjyt7JDnfN2p4Sd3PiZmsfGdLFOumAB56BakuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKU+piNaIXmGkrUsuDvHcI1NX1odMB8GA1UdIwQY
MBaAFCbPTVPtXApL0/4kIgGpZmVcgMwOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnM5TlUtMWNDa3ZUX2lRaUFhbG1aVnlBekE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8zZWJjZTUtNzNlMy00ZTNlLTgzYjAt
YTc4OGZkYzcwOTQ4LzEvSnM5TlUtMWNDa3ZUX2lRaUFhbG1aVnlBekE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8zZWJjZTUtNzNlMy00ZTNlLTgzYjAtYTc4OGZkYzcwOTQ4
LzEvSnM5TlUtMWNDa3ZUX2lRaUFhbG1aVnlBekE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCWKn9go
MPmmNLnefr64j6w4fLFEndJ99swKCJfkn/iseULQqEb6zd7W93W5nPl1+zevWrWR
ksQa6XdSxbowVm77JBvZ4qTScQiVp8KG6HaTPgtW3vWIgPpd49UsXkcWHPEo6k4a
EhDUda6iUvTGXgwbB8GPs9hoAMpdVCMJL8Lp4SfduvNar+yhtVqfe4Kqik9BSlmC
LQQlAsHoOOeJaOnZ93w/+Z5fRKbDxd/S1stBgEV63sgqjBmYcGEZcsUQABRoZhn0
3rOqKfy9APuvfMg5b3etACIPP+gFDsU9YHaml0uwv3byRgS+ZMdJlcrbUUHV80lT
VFnLWrUpBivBDg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:51 2025 by rpki-client