Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
File: JiditzviJrFxmZQSYlrMcnAkQ0M.mft (raw, json)
Hash identifier: 9j69IlnX6lN7qPbpUvdsBvqylzrPvNU1SCemQ+OYIUc=
Subject key identifier: 0C:13:88:69:00:B2:EE:23:6B:FA:08:78:E0:74:AB:7C:BD:55:A4:A4
Authority key identifier: 26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43
Certificate issuer: /CN=262762b73be226b171999412625acc7270244343
Certificate serial: 019A7149DA42633501FB2D7358B86B3973E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
Manifest number: 036D
Signing time: Tue 11 Nov 2025 05:00:56 +0000
Manifest this update: Tue 11 Nov 2025 05:00:56 +0000
Manifest next update: Wed 12 Nov 2025 05:00:56 +0000
Files and hashes: 1: JiditzviJrFxmZQSYlrMcnAkQ0M.crl (hash: x8J4j4hVuBCy7T7UVN6kCu/T/VI9s9eqPfKYY7BKqrA=)
2: SW0NmgN1MfeImMBLkTet_og-k3A.roa (hash: NuBlZaeVdzU+Qx3vpR2cHPvzMF2hd3qV04JT0+dx0Ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:da:42:63:35:01:fb:2d:73:58:b8:6b:39:73:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262762b73be226b171999412625acc7270244343
Validity
Not Before: Nov 11 05:00:56 2025 GMT
Not After : Nov 12 05:00:56 2025 GMT
Subject: CN=0c13886900b2ee236bfa0878e074ab7cbd55a4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:82:ce:3b:58:2a:2a:e3:8c:10:78:ab:79:16:
90:74:ed:be:fe:2d:ba:3f:c1:ae:4f:a7:d9:67:5d:
ee:1c:38:8a:19:c6:89:74:54:16:f3:b8:4a:29:9e:
30:36:d4:a4:90:40:89:04:55:56:51:fe:8d:55:36:
27:85:6c:a5:b7:09:8b:7c:5f:b0:35:0b:d1:41:b0:
22:e3:c9:9f:9c:84:94:8d:6c:14:33:0a:46:dd:fc:
28:f6:1e:b9:8a:bf:d9:0d:e2:c7:26:ca:79:cb:15:
86:5d:7e:e6:4c:05:04:0c:3b:f8:7e:39:fd:00:5a:
f7:8c:ce:0e:ee:83:01:36:e6:6d:7b:5f:77:8b:46:
de:6b:8f:8b:ca:de:22:9c:31:eb:98:22:0b:1c:cf:
2e:67:77:df:41:40:c2:5d:68:13:4f:07:80:02:76:
6f:d7:9e:ac:55:a2:2d:7d:9b:1e:1c:eb:9a:ba:bf:
65:14:61:3b:0a:81:5b:6c:ef:29:fa:28:68:65:c3:
8c:4f:2b:46:8a:c5:d8:d4:fb:99:39:b5:c5:e6:e5:
7b:e6:0c:49:ff:c7:5b:0b:38:30:23:15:1c:6e:f8:
ec:09:8c:b7:02:5a:4c:69:c2:20:cc:30:9f:1c:2d:
3e:ba:5d:20:21:f8:6d:81:7a:48:64:e0:09:f3:12:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:13:88:69:00:B2:EE:23:6B:FA:08:78:E0:74:AB:7C:BD:55:A4:A4
X509v3 Authority Key Identifier:
keyid:26:27:62:B7:3B:E2:26:B1:71:99:94:12:62:5A:CC:72:70:24:43:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JiditzviJrFxmZQSYlrMcnAkQ0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/db547e-f431-4d78-9f38-2c4c066fc291/1/JiditzviJrFxmZQSYlrMcnAkQ0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:1a:87:7f:31:2c:4c:ef:9a:13:66:64:88:24:c9:f8:4a:33:
d2:9c:e7:1d:e5:6c:dc:92:b5:44:ae:cd:07:d8:3c:78:e0:d8:
5a:e2:46:c5:8f:4c:e1:9a:8e:e4:d1:bc:2f:f6:1c:06:8e:81:
af:88:35:dd:43:1c:06:cb:93:f9:e4:e9:13:2d:e7:ac:46:10:
d0:d8:a6:03:b6:41:26:65:38:f3:af:ea:1a:7f:21:31:60:49:
1d:0f:ed:b8:6b:b6:16:b2:ee:f0:43:f8:fd:5e:fc:01:73:10:
c5:c6:51:de:e8:01:0e:f5:01:f3:8d:c5:4d:73:f2:3f:39:47:
ef:ea:cd:dc:9b:a4:d9:af:c2:0d:e6:73:dc:a8:e9:50:8c:83:
2c:a9:1c:79:64:21:4b:4b:39:b0:3b:10:c4:68:73:81:93:f6:
34:39:23:25:a9:67:58:2a:65:d4:c4:8b:29:2c:8e:48:df:f0:
ae:58:28:56:54:07:a9:34:83:8e:4a:6d:d4:61:10:b3:df:e6:
7d:89:a7:c0:d5:37:06:8f:0b:18:35:60:6e:a6:71:d0:5a:89:
20:b4:dc:95:dc:93:69:e3:8e:05:5b:cc:0e:e0:c4:97:38:e0:
b7:29:97:44:3b:c3:cb:e6:33:a1:4a:06:78:22:b8:16:de:b6:
9d:c2:59:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:05:27 2025 by rpki-client