Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
File: JClc5xJHPQ4-bap3fbiQb4AB33A.mft (raw, json)
Hash identifier: mqvRqd04B/1bsf3FcgqJc8agLAhJhZ9sLRzupQo4ju0=
Subject key identifier: 14:4D:26:F3:FE:83:EF:A3:50:FC:56:E3:A8:18:F7:4F:D1:8E:B0:D1
Authority key identifier: 24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
Certificate issuer: /CN=24295ce712473d0e3e6daa777db8906f8001df70
Certificate serial: 019A73016A95C4CF7B8B7B42C4B166A58D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
Manifest number: 12D7
Signing time: Tue 11 Nov 2025 13:01:03 +0000
Manifest this update: Tue 11 Nov 2025 13:01:03 +0000
Manifest next update: Wed 12 Nov 2025 13:01:03 +0000
Files and hashes: 1: 2f42Ui-pru7wNiS6tvX-43aKjFs.roa (hash: mtpDrlYTTPVwbZc60pOa8NtALeV5Jm4wS3DacId4T/Q=)
2: JClc5xJHPQ4-bap3fbiQb4AB33A.crl (hash: RU7B07GLE/hc1q9ECjck/Kko1U9MWps2+Lx/yiaBheQ=)
3: Xhs8fAc0SGAyN4KDD0cOKWAqtow.roa (hash: 0rR/+YP0FGlnVR+donPj6Q3O2XueDV+VyXKsGyjN1KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:6a:95:c4:cf:7b:8b:7b:42:c4:b1:66:a5:8d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24295ce712473d0e3e6daa777db8906f8001df70
Validity
Not Before: Nov 11 13:01:03 2025 GMT
Not After : Nov 12 13:01:03 2025 GMT
Subject: CN=144d26f3fe83efa350fc56e3a818f74fd18eb0d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:0b:a1:7e:97:24:23:d1:f0:08:33:f2:cc:
2b:3e:2b:86:fb:4a:97:ff:17:87:b3:dc:da:98:92:
aa:07:f5:c9:b1:67:c7:c4:a5:50:51:03:f8:f2:26:
20:2c:d7:a1:da:10:9c:b1:8e:ba:ac:bc:7c:1d:2b:
28:af:c8:0c:5f:ec:21:d2:27:cb:5f:96:86:79:95:
f1:6b:fb:46:f1:27:6c:dd:fc:1a:59:20:59:37:8d:
6f:bf:3a:68:4e:52:5e:2e:83:53:76:84:91:9a:a0:
0d:a6:93:61:77:63:4a:79:a7:e6:80:6e:c8:cf:fa:
04:88:a1:13:bd:e9:11:86:af:4c:cd:45:24:cf:88:
57:70:e2:ff:76:a7:08:9f:23:d5:d5:21:41:5d:b8:
df:29:ac:01:d6:2c:38:4d:a1:5c:fe:ad:d1:b5:c1:
24:44:a4:84:a6:e5:02:33:f0:55:23:71:22:df:9e:
31:6c:e5:37:a6:99:b0:8b:b9:03:e4:f4:b5:4d:91:
73:67:05:0c:ef:c5:48:49:f5:c8:80:13:8d:1d:a7:
2f:1e:d2:07:c7:33:c5:52:a3:0f:51:f2:ab:27:62:
33:73:5a:28:69:a9:33:72:c7:95:39:b5:d7:f9:80:
f8:f2:5f:12:0d:bb:65:04:c3:76:5d:f5:83:9a:05:
4b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4D:26:F3:FE:83:EF:A3:50:FC:56:E3:A8:18:F7:4F:D1:8E:B0:D1
X509v3 Authority Key Identifier:
keyid:24:29:5C:E7:12:47:3D:0E:3E:6D:AA:77:7D:B8:90:6F:80:01:DF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JClc5xJHPQ4-bap3fbiQb4AB33A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/1a0c6a-1a5e-424b-9a69-995531862419/1/JClc5xJHPQ4-bap3fbiQb4AB33A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d0:ad:fc:ca:2b:9f:b1:9f:5c:8f:56:7a:7c:bc:f5:3f:1f:
ae:72:13:ed:d4:1c:f4:0e:ba:96:84:91:cd:28:b5:73:17:e5:
28:9b:6d:7f:d2:3b:56:b0:35:81:a6:85:0d:dc:01:34:f4:27:
1d:c3:41:42:5f:7f:40:26:36:81:88:20:d4:f9:65:34:e7:d4:
5b:77:c2:2d:f2:e3:e9:4d:69:36:20:4b:a0:f7:c7:72:17:b9:
ae:31:26:5d:2b:56:76:c5:c0:fd:53:bf:77:86:23:0d:c0:8d:
16:81:42:6d:d3:83:26:66:2b:c0:a9:52:89:4a:ec:c6:29:ac:
39:85:8d:ec:fc:1f:e2:41:7b:23:38:7b:26:5d:68:83:9c:3c:
ce:a6:82:c0:aa:d4:e6:64:b4:a7:05:b9:6a:d0:ff:4b:75:02:
c0:96:f8:22:29:79:14:1d:86:0d:fd:ea:aa:8a:33:cd:b5:aa:
7f:56:20:ce:9a:db:1b:7d:21:b1:f6:1f:00:69:e5:fe:8f:dd:
80:73:0d:ab:d3:9e:4f:e9:59:91:47:8e:d7:f8:8d:2f:bd:11:
6d:6b:17:c6:64:f5:c7:86:e7:f0:23:32:18:d2:c1:d8:f4:3a:
74:ad:61:3f:f2:73:4a:f6:e0:f7:a3:70:46:c1:a2:d1:7e:a4:
03:7f:5b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:12 2025 by rpki-client