Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
File: JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft (raw, json)
Hash identifier: WAR4G2Jdiw+Et/NAGRG8OL0amBhliPfWYcqN6UHJHaM=
Subject key identifier: 37:41:F7:B3:30:7D:C1:A9:36:A6:C2:CB:3C:3B:31:D9:9F:EE:9A:56
Authority key identifier: 25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7
Certificate issuer: /CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
Certificate serial: 019A7149B973877AD8AF8BB330D51708A212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
Manifest number: 1252
Signing time: Tue 11 Nov 2025 05:00:48 +0000
Manifest this update: Tue 11 Nov 2025 05:00:48 +0000
Manifest next update: Wed 12 Nov 2025 05:00:48 +0000
Files and hashes: 1: BQcLEt_fhF3T8cK9G4llL9qzCF4.roa (hash: HsXDiNZ/6cIaXPnh2ptBxpxCA2P5yT/9b+aknpD6TWU=)
2: JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl (hash: dVSmu2VXrTrJyJuqzG6Q7Eg+UBNQSDRMeXsg713mr1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:b9:73:87:7a:d8:af:8b:b3:30:d5:17:08:a2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2557fa956f0f53980d79c32ce1e6e93efd488fd7
Validity
Not Before: Nov 11 05:00:48 2025 GMT
Not After : Nov 12 05:00:48 2025 GMT
Subject: CN=3741f7b3307dc1a936a6c2cb3c3b31d99fee9a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:2b:0a:23:2c:bd:6a:93:74:1c:f9:43:35:
d1:c6:34:7e:d2:3b:26:15:27:18:3d:c4:03:41:51:
75:03:4c:9b:e5:c1:10:bd:96:e4:61:5f:a9:ae:54:
f0:5d:66:13:1c:2e:ee:f2:9d:aa:1a:29:2d:1e:5d:
d2:c8:22:3f:87:98:eb:9c:66:eb:94:41:c4:d9:01:
31:75:a1:3f:da:34:91:b9:4c:30:5e:9b:57:cf:f9:
08:85:2a:6e:bc:dc:b7:da:fb:30:d5:ac:48:9c:02:
f0:e3:b4:3c:17:bb:0e:5d:7e:c6:e5:3c:c5:db:52:
f0:e2:96:64:2e:fe:52:a8:9b:5b:1e:a7:37:01:13:
e5:a5:60:83:9d:34:f5:13:06:b2:78:ac:87:5b:f8:
ca:43:71:d1:ef:c7:6f:bc:2f:a6:7e:5c:8c:4a:39:
3b:eb:b8:d2:d3:50:90:9d:73:ed:9b:a7:46:5e:b0:
47:f8:27:f0:10:db:1d:a6:c1:d2:5f:fc:c4:d3:67:
a2:23:78:d8:e4:36:fd:b6:1e:4a:f6:46:7f:f6:26:
a9:4d:c5:06:02:d3:34:d3:24:7a:82:cf:28:f2:37:
96:23:c3:db:4b:d8:1c:6f:f3:70:3b:54:f1:75:13:
e6:7b:ed:d4:63:a6:4b:cd:1f:b8:22:3a:7d:08:71:
12:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:41:F7:B3:30:7D:C1:A9:36:A6:C2:CB:3C:3B:31:D9:9F:EE:9A:56
X509v3 Authority Key Identifier:
keyid:25:57:FA:95:6F:0F:53:98:0D:79:C3:2C:E1:E6:E9:3E:FD:48:8F:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVf6lW8PU5gNecMs4ebpPv1Ij9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/820fea-3c8d-4977-8000-6d7163442244/1/JVf6lW8PU5gNecMs4ebpPv1Ij9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:62:d9:a2:f2:9c:77:ef:57:66:bf:9e:cb:78:d0:b2:98:b2:
09:a6:f7:0b:01:c9:2f:68:d6:a1:79:fe:3c:7f:df:8a:e3:ea:
7b:ea:c0:0c:5c:70:ec:70:e6:c5:5c:02:9b:d3:a7:ee:16:e4:
fe:04:ee:bd:aa:4a:75:b8:17:f3:74:54:af:ae:53:aa:19:57:
0a:9f:43:12:8f:75:c8:bb:35:82:7c:78:2c:47:5c:f3:b7:e7:
b8:c0:44:6f:ac:9d:2c:55:3f:b8:eb:44:3f:75:f0:f7:fe:2f:
df:63:86:a0:06:bc:5c:f2:7a:b8:f1:e7:24:87:81:fe:09:38:
6d:e7:13:49:68:e6:2d:e1:32:b9:85:72:84:79:e2:6e:e4:c2:
3e:7f:31:66:6a:69:4d:7e:72:6f:4e:7d:e6:90:8d:d9:b3:72:
e7:63:75:89:ec:63:93:b2:f6:97:d7:ba:ed:01:c1:0a:a2:c5:
69:5b:6b:ee:03:95:f3:f7:8f:2a:93:68:d5:bf:a8:2e:01:df:
aa:de:e5:db:2d:69:af:26:a3:af:92:af:e5:85:d3:b2:a1:95:
b3:4b:a2:75:97:f4:1b:48:05:ee:75:cc:cb:58:0d:f7:6d:69:
0d:a0:08:69:a0:e1:9b:08:65:c5:dd:d7:65:df:90:55:9f:ae:
6d:41:0f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:33 2025 by rpki-client