Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
File: jCQMG5D38CAFP6CVMw_8-t71OZ4.mft (raw, json)
Hash identifier: nXZwbu7MYoaYUh1hG03PbYt3xIGYzxSU+UTHtTWZ9w0=
Subject key identifier: A5:74:F2:94:65:5F:4B:C7:88:76:29:13:27:2F:2B:84:08:56:22:D1
Authority key identifier: 8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
Certificate issuer: /CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Certificate serial: 019A71EE6BEA04F03F8F1C973334EEB92EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 08:00:41 +0000
Manifest this update: Tue 11 Nov 2025 08:00:41 +0000
Manifest next update: Wed 12 Nov 2025 08:00:41 +0000
Files and hashes: 1: AVv7KqsJQ7Zn0lKyZ4rdnlf-GJ4.roa (hash: NUdH+bGXaFI8uXmd6dLOR5WLJnhwd6mvan4jq3rAulE=)
2: jCQMG5D38CAFP6CVMw_8-t71OZ4.crl (hash: SqqREGdb6m1a6BQCfZlajXVZ5QuuYQ/y4e6wO3DOJl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:6b:ea:04:f0:3f:8f:1c:97:33:34:ee:b9:2e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c240c1b90f7f020053fa095330ffcfadef5399e
Validity
Not Before: Nov 11 08:00:41 2025 GMT
Not After : Nov 12 08:00:41 2025 GMT
Subject: CN=a574f294655f4bc788762913272f2b84085622d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:ae:e6:25:ee:00:f4:19:ce:23:6d:dd:21:
eb:81:20:40:66:ec:b1:2b:23:6b:a9:90:8e:8c:fe:
e7:26:66:38:68:00:ae:f1:4e:a6:ca:66:b5:2e:ec:
94:6a:ea:37:31:92:34:8e:d0:f4:fd:99:14:6f:ee:
d1:66:4b:6d:09:c9:22:49:1c:60:79:3f:d7:95:e4:
49:ab:c1:6d:99:70:b2:eb:5e:fb:f2:66:2d:fa:47:
e1:5c:f4:c7:97:ce:a5:e9:97:1f:56:21:40:05:44:
21:1b:1d:74:bc:5d:86:c7:63:0a:0d:7b:86:13:20:
d4:e4:fc:59:c9:d5:e9:42:67:6f:af:b6:3b:68:ba:
45:89:3a:e7:91:50:b4:c5:1c:23:fc:d6:4b:1d:ee:
34:ed:33:59:99:62:94:25:8f:34:8b:fd:e7:b4:8a:
fc:9c:42:bd:fa:13:fa:3f:15:d9:56:12:52:1c:41:
f0:01:5d:7b:56:84:e4:84:d8:c8:53:eb:b5:c0:f4:
51:54:ad:ec:bd:d8:a0:22:85:d2:9f:69:a0:8c:7c:
91:ec:c7:9b:9e:44:96:32:e0:e3:e0:56:f5:fd:ce:
38:a2:12:04:bf:c2:a6:99:86:ba:6d:ca:96:59:77:
c7:21:6a:57:64:f5:69:d5:a2:10:7c:c9:74:bd:a2:
0d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:74:F2:94:65:5F:4B:C7:88:76:29:13:27:2F:2B:84:08:56:22:D1
X509v3 Authority Key Identifier:
keyid:8C:24:0C:1B:90:F7:F0:20:05:3F:A0:95:33:0F:FC:FA:DE:F5:39:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCQMG5D38CAFP6CVMw_8-t71OZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d7c16a-9330-47f0-912c-87e36184c0b5/1/jCQMG5D38CAFP6CVMw_8-t71OZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ce:97:0a:43:45:ea:08:f1:2a:40:64:8b:d8:b9:c4:42:45:
8e:1a:86:e8:41:25:14:60:2a:4e:61:ab:67:56:23:4e:86:cb:
90:93:dc:a1:0b:d1:30:ea:18:94:dd:26:6f:84:79:d3:03:99:
e0:5d:8f:47:74:11:20:94:9a:cd:8d:98:b7:1f:56:58:bd:18:
00:de:59:29:f4:fb:24:70:b3:69:6d:78:97:5f:88:58:39:57:
5e:6b:05:5e:fa:e7:1f:5f:41:ff:12:f7:44:af:3f:16:e3:6a:
c8:38:26:95:f1:77:8a:67:f6:50:1b:e2:a8:4c:8b:09:f0:ba:
59:5a:09:92:27:ae:2c:4b:eb:aa:28:cf:85:d0:30:dc:01:70:
94:90:6c:c7:28:f8:b0:7f:d6:32:ff:fb:ee:5d:b9:55:82:ad:
f3:5a:ba:ac:e2:bd:32:f8:db:60:d3:13:23:17:f8:d4:71:64:
f9:ac:c9:98:4e:40:39:29:98:d5:15:ae:d0:51:a1:8e:2f:30:
22:6d:bb:76:b6:86:a1:e0:f5:80:ef:31:6f:44:5e:51:4b:eb:
ac:f3:f3:47:46:1b:df:ab:96:d4:ea:06:82:40:ae:97:0a:d3:
2e:9d:d1:1b:70:21:4a:dc:cd:bf:6e:da:44:71:e2:ea:91:3c:
9d:ba:df:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:12 2025 by rpki-client