Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
File: JPS59IVkIInzaxdNlkLcSDf_TSQ.mft (raw, json)
Hash identifier: s8Oj1gRzVWWyV7hdLfqz1xl72/DXZnVyFRNNhSoXaaA=
Subject key identifier: A7:D3:9D:5C:BE:30:98:2E:64:DF:29:75:EB:E3:37:F0:32:F0:89:4C
Authority key identifier: 24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
Certificate issuer: /CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Certificate serial: 019A7225B37F094B7B953AC7D3A79360EAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
Manifest number: 04A6
Signing time: Tue 11 Nov 2025 09:01:04 +0000
Manifest this update: Tue 11 Nov 2025 09:01:04 +0000
Manifest next update: Wed 12 Nov 2025 09:01:04 +0000
Files and hashes: 1: 2-HRD6bwoabjO9Qn710S3v32VoI.roa (hash: kexWRD+OmA3dG4m2fY8icqYNslO76EO40+SSv1pEbyw=)
2: JPS59IVkIInzaxdNlkLcSDf_TSQ.crl (hash: YrFEnV1z618yV7PVN4TpgFgGhHxYmBtG6if/hz0AIik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b3:7f:09:4b:7b:95:3a:c7:d3:a7:93:60:ea:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24f4b9f485642089f36b174d9642dc4837ff4d24
Validity
Not Before: Nov 11 09:01:04 2025 GMT
Not After : Nov 12 09:01:04 2025 GMT
Subject: CN=a7d39d5cbe30982e64df2975ebe337f032f0894c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fc:8d:c2:31:ed:47:f0:4f:4d:bf:be:a4:55:
5a:88:c8:6d:98:8d:97:3a:2a:fc:f1:01:35:67:8f:
52:6b:35:95:f1:26:bf:dc:f3:f3:95:04:ba:1c:c2:
cd:62:26:37:ea:4e:2a:69:39:79:9d:80:38:f4:c4:
db:9f:46:7e:aa:c3:d9:5a:5f:71:ab:07:3f:84:d2:
c2:fe:e3:02:11:ee:d2:25:89:29:2b:28:80:00:2a:
57:38:44:49:d6:b3:d2:aa:8c:61:23:ca:9f:aa:2c:
db:3b:9a:7c:50:25:e7:47:ab:0f:92:e7:42:a5:61:
4b:86:69:64:01:8d:02:2e:85:c4:8d:6d:5c:69:a4:
be:3f:fd:54:08:75:72:53:9f:f0:48:a3:fb:0c:7d:
d3:aa:1f:95:aa:be:1b:d6:85:b8:2e:d7:da:1e:1b:
8b:14:ba:ee:bf:57:2d:2b:e4:61:ed:9f:21:1a:15:
a8:d7:02:f6:ba:df:a5:fb:c0:bb:00:7e:bf:3c:03:
39:dc:1b:f5:d3:72:a3:a1:f0:00:15:86:bd:72:39:
52:d1:72:21:8f:4a:b8:84:e0:10:d9:d7:d6:bf:88:
09:4e:fc:28:63:fe:fb:34:1b:61:53:ce:62:dd:ac:
89:15:e6:a8:c5:52:b5:09:b3:de:fe:70:ad:1f:0f:
c1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D3:9D:5C:BE:30:98:2E:64:DF:29:75:EB:E3:37:F0:32:F0:89:4C
X509v3 Authority Key Identifier:
keyid:24:F4:B9:F4:85:64:20:89:F3:6B:17:4D:96:42:DC:48:37:FF:4D:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JPS59IVkIInzaxdNlkLcSDf_TSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c47e90-0f08-463b-8810-c07b98f6e765/1/JPS59IVkIInzaxdNlkLcSDf_TSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:79:f5:b0:0c:2a:d3:af:24:6e:f8:48:90:1c:7d:57:80:af:
ed:7a:da:8d:a3:ce:58:ad:93:51:a1:b2:57:09:81:d2:d0:28:
8e:9a:89:49:91:06:ed:ee:64:92:5b:82:0d:ed:f4:aa:be:f7:
42:9a:9f:4b:3b:85:e4:14:ee:e1:4a:b1:60:98:9f:ea:89:7c:
e9:27:78:c8:8e:de:8e:05:3b:1c:ec:f4:14:ca:69:20:24:47:
42:b4:27:34:99:2e:ca:0a:d1:ac:1c:f8:61:6c:b1:67:6c:95:
65:06:b2:cf:1a:ac:0b:f4:c3:11:f8:b3:2c:f7:a3:dc:7a:c6:
5a:a2:c0:3a:36:5e:c4:b5:6d:5f:57:57:c0:91:41:50:04:f8:
bc:61:c7:ba:a5:fa:73:20:48:62:4b:09:a2:e7:6a:1c:f2:6d:
2e:5d:79:88:d7:db:fa:6c:60:c2:0d:1a:ed:b7:6d:6a:99:bb:
3f:45:b1:eb:9c:23:d5:2f:bf:4a:26:6e:77:fa:2d:fa:ef:7c:
39:59:36:c2:58:eb:ea:a3:54:98:c1:8b:f3:3e:39:fa:ee:7b:
5b:10:26:3f:02:e4:f6:28:8e:9c:86:e4:61:2d:ba:8c:d7:23:
71:f2:05:7d:61:b9:bc:04:13:c6:02:75:51:93:6e:b2:96:75:
12:06:89:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:18:59 2025 by rpki-client