Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
File: JUn0XvILUG6o70y2gsLKJwGykLQ.mft (raw, json)
Hash identifier: oaUpoDhljpaqX6zP+EqX4sV6tUwHfN701Fi7zUCiwUA=
Subject key identifier: 7D:E7:6B:C6:67:7F:50:1A:CE:94:29:8D:8D:0F:96:10:BB:31:03:D7
Authority key identifier: 25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
Certificate issuer: /CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Certificate serial: 019A7149E7360C1DE0148B215E7B1A19188C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 05:00:59 +0000
Manifest this update: Tue 11 Nov 2025 05:00:59 +0000
Manifest next update: Wed 12 Nov 2025 05:00:59 +0000
Files and hashes: 1: IkDVoWMCW8T1OT9ORyQk9bDyazo.roa (hash: ezW06KpxDOFFcxPPKXXfQ4CRQ3FYkfmYYJN8bIHB94g=)
2: JUn0XvILUG6o70y2gsLKJwGykLQ.crl (hash: uTi//ZypexMHEOF3NXPejzEFT8GIgvvw5ZYh6H2lu+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e7:36:0c:1d:e0:14:8b:21:5e:7b:1a:19:18:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2549f45ef20b506ea8ef4cb682c2ca2701b290b4
Validity
Not Before: Nov 11 05:00:59 2025 GMT
Not After : Nov 12 05:00:59 2025 GMT
Subject: CN=7de76bc6677f501ace94298d8d0f9610bb3103d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:51:76:0c:12:02:23:3a:3c:38:6e:26:96:
6d:50:6a:4c:18:4d:cb:98:2a:02:c5:4c:69:4c:bc:
49:2a:f7:71:3a:8f:be:b9:2d:ae:db:97:5d:c3:50:
c1:26:3c:a0:69:40:aa:f8:39:70:a5:7f:7e:b9:9c:
81:fe:ab:67:15:69:07:69:8c:9d:49:d4:8f:7e:d8:
39:d4:d6:f0:0a:23:ab:da:bf:91:d5:0e:2c:fc:07:
12:c4:ff:c6:b0:03:7c:ed:74:6a:26:13:db:d5:f9:
27:de:ee:be:4f:de:4b:5f:c1:2b:4d:62:29:32:d4:
56:c8:69:36:d3:90:ae:86:23:c6:71:a2:2d:f3:1e:
9c:5a:8a:6b:58:bf:94:09:5a:e3:eb:28:17:03:b7:
2d:c5:6f:ae:4c:74:8d:b5:59:7a:7b:27:a0:3a:ba:
72:0b:be:2e:27:79:34:d3:86:17:81:2d:ae:96:01:
da:2f:70:4b:58:c9:e5:e8:84:5f:8b:75:6f:07:4d:
41:c6:0f:81:d1:ce:52:21:1e:3c:d2:c4:b0:63:d1:
92:52:16:ce:ba:13:59:bc:fe:0b:26:5a:eb:cb:24:
96:8a:7c:7d:c8:fa:91:68:ab:5a:c1:e0:91:30:91:
19:0a:dd:54:1b:f1:e9:ec:47:75:bf:96:c0:c0:7e:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:E7:6B:C6:67:7F:50:1A:CE:94:29:8D:8D:0F:96:10:BB:31:03:D7
X509v3 Authority Key Identifier:
keyid:25:49:F4:5E:F2:0B:50:6E:A8:EF:4C:B6:82:C2:CA:27:01:B2:90:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUn0XvILUG6o70y2gsLKJwGykLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e7c7f2-5784-4265-84b3-a5431b07d09e/1/JUn0XvILUG6o70y2gsLKJwGykLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:89:b1:1d:83:df:05:6f:ef:17:e6:38:8d:23:97:66:62:40:
c9:37:e5:50:1e:8b:25:4b:a6:5f:a7:7d:52:c5:4f:93:0b:d4:
d5:1c:49:b4:f4:fc:c9:01:80:a1:ab:10:1e:e3:3c:31:0d:28:
dc:ef:e3:39:da:97:c2:a1:e9:ec:05:b0:1a:ed:6f:85:8d:5f:
34:cc:98:fb:fa:28:a9:cf:09:45:9b:84:61:ef:3a:fd:a8:ae:
7a:8d:88:97:5f:d4:7d:4a:a2:21:9a:a2:eb:0a:69:30:e3:c2:
bf:35:22:bc:2d:01:52:33:2a:21:55:79:6e:04:a8:4d:d5:05:
ab:cd:b7:52:60:7a:6b:98:b4:3e:65:12:e2:23:34:ac:56:6a:
ab:bf:28:75:fb:cc:d6:f9:c7:ca:58:92:56:c7:d7:e6:de:92:
9a:b3:be:81:ef:1f:f0:61:53:74:40:6b:59:0e:1a:81:26:7d:
8a:0f:ed:a9:26:58:76:5b:f2:92:3f:e5:06:70:5f:29:87:f9:
e7:0e:05:90:ba:8d:7a:a4:36:dc:19:1f:84:3d:00:f1:e3:60:
79:3a:82:26:26:5f:c0:ca:a7:30:8b:24:dc:26:cb:91:25:2d:
84:e8:d7:24:fb:f2:96:0e:63:df:d1:51:ec:32:d6:b2:5d:06:
b3:37:34:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:28 2025 by rpki-client