Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
File: JegnfR_qtSOH6rJvjcypJgwlij0.mft (raw, json)
Hash identifier: NBnRP/Mvc2RdIINoB4A64fd5r3JUn1h3Ggmbd/InSTs=
Subject key identifier: 92:0D:7B:8F:ED:ED:68:96:CE:06:E8:7C:3F:DD:0A:33:59:B4:1A:19
Authority key identifier: 25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
Certificate issuer: /CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Certificate serial: 019A71EE61519A092C9F4BD9AFCFDD8A756C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
Manifest number: 0A25
Signing time: Tue 11 Nov 2025 08:00:39 +0000
Manifest this update: Tue 11 Nov 2025 08:00:39 +0000
Manifest next update: Wed 12 Nov 2025 08:00:39 +0000
Files and hashes: 1: JegnfR_qtSOH6rJvjcypJgwlij0.crl (hash: W/dzPB2iLbF39Sn1+yEeTwyoJFvzlXVD7kK9LWifpbg=)
2: QJ-q4jY57XBPftq8mgfLyBux4KM.roa (hash: pgWu6jyyJTF/Q2y1mtLzh6qQQVUyFCHc0G6KZW7xtps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:61:51:9a:09:2c:9f:4b:d9:af:cf:dd:8a:75:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e8277d1feab52387eab26f8dcca9260c258a3d
Validity
Not Before: Nov 11 08:00:39 2025 GMT
Not After : Nov 12 08:00:39 2025 GMT
Subject: CN=920d7b8feded6896ce06e87c3fdd0a3359b41a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:6e:da:6c:f1:fc:b3:b1:37:15:52:de:96:
aa:34:e9:27:ac:a7:ce:b9:32:0d:2b:dc:18:00:3c:
95:56:22:ee:70:f2:86:22:34:ad:24:16:41:2d:79:
4c:40:76:dd:4a:e4:73:03:ee:d1:25:5e:f6:b3:6a:
5f:c6:0b:32:17:a2:6e:c1:08:3c:e8:bb:c8:5a:23:
53:9d:3e:b9:12:e9:fe:cb:57:d8:f2:8e:83:cc:ab:
9f:57:1b:57:fb:04:bb:dc:05:06:9f:cc:85:85:bb:
6b:b2:7c:4d:7e:bb:f6:3b:5b:c7:d1:ed:c2:7b:e3:
be:d9:37:2e:dd:89:21:33:a5:de:ea:ba:24:88:95:
73:9c:22:3a:2c:3b:98:2a:82:fa:e5:3b:86:05:46:
83:4b:f6:34:34:26:72:40:29:cb:6f:06:ed:7e:fb:
70:ca:3e:cf:06:f4:1a:57:35:ff:cf:ac:bd:8a:f8:
4a:b7:26:25:2b:d1:84:52:80:b9:13:eb:f0:01:4d:
19:48:70:95:04:6f:d6:b5:f6:a1:e5:84:46:ff:01:
16:dd:b7:31:de:11:f1:ac:1b:bb:78:87:e5:19:a7:
f7:04:37:1d:4b:d5:5a:22:1f:60:cb:52:42:95:3b:
76:be:da:ff:e5:c3:3e:37:96:22:71:0a:09:1c:22:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:0D:7B:8F:ED:ED:68:96:CE:06:E8:7C:3F:DD:0A:33:59:B4:1A:19
X509v3 Authority Key Identifier:
keyid:25:E8:27:7D:1F:EA:B5:23:87:EA:B2:6F:8D:CC:A9:26:0C:25:8A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JegnfR_qtSOH6rJvjcypJgwlij0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ce0edd-80d4-4af6-baec-baf2572e8093/1/JegnfR_qtSOH6rJvjcypJgwlij0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a0:2e:4a:5d:e5:4e:c0:a1:6e:d4:02:00:28:41:15:08:7f:
f6:86:b3:73:a6:c6:38:fe:7b:e6:f9:ac:3f:b7:3f:fc:d5:90:
c7:d2:84:2a:96:66:c1:7b:6b:5c:11:2f:5b:8f:a9:2a:b3:ec:
b2:5b:73:fe:af:01:38:53:b3:84:ea:ba:23:ac:08:8e:d2:1b:
f7:bb:d7:2c:ba:36:76:a5:fb:67:f8:36:b2:ac:ef:3b:ed:32:
21:04:50:a1:14:4e:49:c6:32:95:3e:b3:49:e9:ad:4b:1e:86:
94:d0:85:5d:7a:41:ef:33:4c:05:80:16:02:37:09:0a:df:43:
97:a7:54:1d:ef:85:ad:cb:5e:02:e9:3d:27:1e:ea:98:00:16:
78:a7:af:a2:a3:20:52:be:2b:f3:45:93:6f:04:a7:66:a2:41:
6a:0f:d1:04:8f:a8:e0:3a:00:f5:25:e9:f0:12:63:c0:20:e9:
d8:dc:5a:23:3a:59:40:55:cf:c9:93:bf:ea:8f:e8:ab:be:26:
48:f1:3e:d3:13:67:a5:b6:76:28:93:61:92:2e:61:f7:d6:48:
9a:29:03:fb:5f:76:75:5b:82:4d:b0:5b:9f:69:98:d6:19:f5:
22:e0:71:31:3e:4a:df:ef:56:31:af:5f:e2:bf:9d:44:0c:a2:
a1:f1:23:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:09 2025 by rpki-client