Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
File: JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft (raw, json)
Hash identifier: 1ImNzme+Bl+uBrxlBIqyIJjY38pmXen3Cdn4hHGnj8w=
Subject key identifier: 46:AA:BA:78:82:AA:03:E6:3C:70:87:60:24:52:78:60:ED:DC:22:47
Authority key identifier: 24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
Certificate issuer: /CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Certificate serial: 019A7149BA8F369DEF4C6488479F73BBA8C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
Manifest number: 0E15
Signing time: Tue 11 Nov 2025 05:00:48 +0000
Manifest this update: Tue 11 Nov 2025 05:00:48 +0000
Manifest next update: Wed 12 Nov 2025 05:00:48 +0000
Files and hashes: 1: JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl (hash: XY635D/nMMIrtXl1zL5Gzk16FpasByEkM8DGR/PAvSc=)
2: VJR7Lo1LB0pD40S4fO2jLPEbihA.roa (hash: RbHjGHvWg7AGicrPJns6EGHLTa9+BO6JRpxrZNUyWo8=)
3: gX6AqUyGzqBuxo0ZWofHdJPozGo.roa (hash: tMyCIpNNOmtDo0tCmm/IacKiCjkSIun6I2dTk3wHLFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ba:8f:36:9d:ef:4c:64:88:47:9f:73:bb:a8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24a55bd68397566895b15ecb97fc1d65c0c879ce
Validity
Not Before: Nov 11 05:00:48 2025 GMT
Not After : Nov 12 05:00:48 2025 GMT
Subject: CN=46aaba7882aa03e63c70876024527860eddc2247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:2c:ed:16:b9:1c:c2:17:dc:c4:65:6d:e7:
9f:84:79:86:52:0e:32:85:4f:7d:2b:5b:29:3a:e8:
72:8b:27:b8:69:f1:f8:31:73:05:bc:37:ab:fc:85:
16:d8:1a:4a:d4:39:99:a5:91:39:11:07:54:f0:cd:
0a:aa:ce:a6:39:a6:5f:7d:29:80:0c:9c:81:c6:b0:
e9:c4:0e:ca:83:5b:3e:6e:a7:b7:7e:5f:22:94:bc:
96:a9:c4:38:cf:d0:44:81:24:f4:a5:59:75:23:32:
20:f2:b1:e3:03:03:4d:9c:b4:68:dd:f4:c0:e6:e3:
e7:cc:06:aa:17:3e:92:7c:45:3d:dc:14:58:b2:06:
f0:a9:2e:39:07:a6:20:36:c2:ce:42:b6:e7:7d:25:
10:b5:08:7f:5f:2a:95:2e:5a:59:04:33:9d:84:6a:
00:d3:62:aa:cd:ad:3e:fa:79:40:1e:ae:cc:97:47:
f3:db:55:9c:71:d9:6d:91:3d:6b:ff:87:94:21:7e:
5b:6b:9b:f8:b5:61:da:87:ea:6f:88:e3:c4:0a:75:
94:93:2b:1b:ac:20:ad:a3:c1:18:4a:74:63:21:ca:
cb:56:af:6e:ce:36:cf:da:d6:9a:f3:1b:59:0c:27:
a0:e3:97:24:85:b7:2c:fd:28:2d:2e:ed:22:03:37:
fc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AA:BA:78:82:AA:03:E6:3C:70:87:60:24:52:78:60:ED:DC:22:47
X509v3 Authority Key Identifier:
keyid:24:A5:5B:D6:83:97:56:68:95:B1:5E:CB:97:FC:1D:65:C0:C8:79:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JKVb1oOXVmiVsV7Ll_wdZcDIec4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0de899-22e1-463c-a4dd-c34e90d7f8ea/1/JKVb1oOXVmiVsV7Ll_wdZcDIec4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:45:b7:c3:89:0a:a3:c5:76:73:8c:31:e2:74:2c:d9:99:61:
ee:f2:07:7d:3f:8d:88:a2:16:1b:4e:20:37:7b:e2:5b:a8:74:
af:f7:68:7f:e4:8c:2d:65:df:61:78:25:a8:43:3b:b3:79:67:
3c:cf:7e:a2:a5:99:25:08:3b:b8:c2:4e:17:63:d7:c4:0f:f3:
81:4c:db:d7:24:35:83:1a:16:73:77:fe:f4:d3:79:67:8b:ba:
9b:0c:42:68:81:aa:21:8c:0a:f9:ba:61:c9:77:6d:89:5a:40:
62:32:b9:32:71:a1:1f:96:34:af:c0:eb:f6:38:06:82:f8:46:
01:2f:cb:f2:1d:8d:54:57:ee:1c:a5:36:f7:30:cf:f4:84:2e:
33:93:62:59:19:a9:85:5d:a5:92:05:36:41:d7:83:12:c9:b2:
29:6b:54:3a:21:1f:21:01:f5:cd:63:d6:b4:cc:ca:e0:30:af:
52:b8:5d:93:89:07:bd:9d:2a:b5:10:d5:76:d7:2d:6a:1d:d8:
cc:db:24:5e:f2:8d:39:53:56:9c:12:b5:c1:7c:bc:40:a4:ea:
a0:cf:29:97:b2:4f:07:49:48:b5:39:fd:bd:77:e7:6d:68:f1:
90:26:89:36:2e:d9:b2:5d:28:98:65:2a:b0:67:a9:cb:c4:3a:
c3:f1:10:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:59 2025 by rpki-client