Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
File: 1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft (raw, json)
Hash identifier: Z/WrM96J3KYRq7iXA0M/Hjw6tjs3yyuM0WNxR0M0+mk=
Subject key identifier: B2:F0:56:54:DC:75:D5:26:31:24:F5:B1:F5:8A:44:44:F3:ED:32:D1
Authority key identifier: F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2
Certificate issuer: /CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2
Certificate serial: 019A71809857B5F0AC0BCB5F1FC4B31B96B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
Manifest number: 24
Signing time: Tue 11 Nov 2025 06:00:44 +0000
Manifest this update: Tue 11 Nov 2025 06:00:44 +0000
Manifest next update: Wed 12 Nov 2025 06:00:44 +0000
Files and hashes: 1: 1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl (hash: TRv3JkYgSiiQgfS/nNv2qg5jdiK+ANtbHFYlhUS5ZYs=)
2: I1OEJUjpsj-SiuX_wnPiipgdS6M.roa (hash: dtbp2jtgsiSENLkAM8QnYEyE94lEGjUIdXIwmAKpZLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:98:57:b5:f0:ac:0b:cb:5f:1f:c4:b3:1b:96:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f898d89f925299b51f3bc82accd8c6b962dcc2e2
Validity
Not Before: Nov 11 06:00:44 2025 GMT
Not After : Nov 12 06:00:44 2025 GMT
Subject: CN=b2f05654dc75d5263124f5b1f58a4444f3ed32d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:84:38:e9:10:41:80:98:08:bb:ee:40:79:
d8:78:c2:7f:2e:98:34:3f:0c:93:90:a2:a1:13:29:
72:a1:59:11:b1:6f:c6:1b:06:6c:74:7e:69:2c:e5:
86:8e:37:a0:a7:e3:fe:41:49:e1:04:cd:cd:ec:77:
a4:06:83:27:87:21:a8:ae:69:e7:46:b5:55:e0:f0:
a4:56:8e:da:f1:1b:7d:f8:45:97:95:e4:7f:d1:e7:
5c:a4:eb:61:2f:fe:c9:e6:df:10:87:51:d7:d1:c1:
3b:67:08:55:8d:c3:02:5d:57:d3:52:e3:43:73:d6:
14:47:22:3a:68:d3:ff:0d:39:eb:50:f0:df:df:78:
b8:f1:b3:bd:57:88:f2:f3:9b:9f:43:c5:17:b2:b0:
cc:f7:4c:6c:3c:ec:5a:32:a0:46:08:32:5c:ee:e1:
03:38:fa:69:c2:a0:9f:da:5f:d9:93:4b:2c:21:5b:
70:9b:61:c8:92:c0:a8:53:12:14:b2:e5:8d:2e:04:
c3:3a:25:e1:98:5f:c9:bd:31:c5:14:64:27:2d:e1:
84:0c:25:9d:c3:a7:6b:49:78:0e:8e:e7:74:59:f8:
78:be:fa:d7:f9:22:6f:0d:03:11:b7:d4:9d:4a:f9:
2b:e1:55:22:10:1a:81:b7:c5:98:4b:65:17:f5:5e:
c6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F0:56:54:DC:75:D5:26:31:24:F5:B1:F5:8A:44:44:F3:ED:32:D1
X509v3 Authority Key Identifier:
keyid:F8:98:D8:9F:92:52:99:B5:1F:3B:C8:2A:CC:D8:C6:B9:62:DC:C2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b88a60-aaf4-491a-ab82-c59294991b25/1/1-JjYn5JSmbUfO8gqzNjGuWLcwuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:7a:95:ac:b4:98:32:bb:db:70:e4:67:0c:d4:05:2b:e2:d1:
ca:c1:8e:4d:bf:1a:27:02:5a:35:82:1d:80:bc:02:f4:f9:34:
7a:c0:d3:5e:ca:3e:87:b1:e1:65:08:1b:d9:1a:2c:19:33:0f:
96:f3:41:42:0e:4e:53:3c:9f:3a:b4:c5:57:4c:ae:97:67:a7:
66:9c:47:76:9c:cc:d6:34:98:f4:5e:02:2d:07:da:3f:54:71:
57:ee:2e:00:d7:bd:d5:f2:5a:90:0f:e0:99:21:3e:1e:e7:4b:
93:fd:c3:2d:9b:9f:83:cd:72:17:46:cb:f8:b5:af:82:a3:cc:
c1:26:06:a3:65:3a:09:b8:4c:a3:47:ed:2a:d6:a6:b8:5b:e5:
8d:2a:4e:ef:d2:13:28:ea:dd:22:73:0b:b8:a1:42:5f:eb:2b:
04:bb:94:11:c5:75:91:88:d6:42:df:8f:50:72:36:c3:9b:7e:
ec:ef:d4:1a:c1:8b:ec:17:18:e2:18:db:9f:9f:9b:67:6b:63:
e6:67:9a:d7:27:bb:fc:40:f6:05:ca:13:20:d9:d9:44:bc:7d:
68:f6:24:02:1d:d2:7e:75:a1:54:5d:f5:9c:1f:7a:af:26:45:
62:13:bf:59:a9:04:8f:e8:94:61:a0:1f:76:34:ae:f0:1a:39:
4d:19:29:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:16 2025 by rpki-client