Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
File: JovHlTH32BXSsrUin5rJ9vi_68o.mft (raw, json)
Hash identifier: FFHCoMdzCs3dzLCHK0egCoeMwyJYWMGUAOEfuctwR3I=
Subject key identifier: F1:1E:2F:3E:A1:9F:96:03:A7:61:F0:FB:35:D7:3B:76:0C:62:3B:F4
Authority key identifier: 26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA
Certificate issuer: /CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca
Certificate serial: 019A73A6EDDBC33711761A8A9108A4D12C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
Manifest number: 01D5
Signing time: Tue 11 Nov 2025 16:01:50 +0000
Manifest this update: Tue 11 Nov 2025 16:01:50 +0000
Manifest next update: Wed 12 Nov 2025 16:01:50 +0000
Files and hashes: 1: JovHlTH32BXSsrUin5rJ9vi_68o.crl (hash: /5G//VFeB7Kv7kcVWK1DQMxFnhgo/1uOmhgsv3HNqg4=)
2: fbUeFXfkxWs40ix5vT2S2k90Z-k.roa (hash: UcP80IpCz9vBYWCvKMhbqTO9Etv9kTfCKFjSdIAUqCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:ed:db:c3:37:11:76:1a:8a:91:08:a4:d1:2c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=268bc79531f7d815d2b2b5229f9ac9f6f8bfebca
Validity
Not Before: Nov 11 16:01:50 2025 GMT
Not After : Nov 12 16:01:50 2025 GMT
Subject: CN=f11e2f3ea19f9603a761f0fb35d73b760c623bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:80:19:cf:9c:48:09:99:fb:61:03:3c:14:5f:
4e:8d:59:32:03:7b:d4:0a:fd:9a:9c:7f:ca:a6:cb:
d1:37:6a:16:c4:c8:47:0a:49:c4:de:e4:cf:e1:ce:
39:78:74:0f:c9:64:a8:16:dc:14:7a:cd:87:8c:53:
b1:04:fa:24:9d:9f:61:cc:fa:0c:b7:09:82:97:24:
50:38:b5:3f:30:cc:fe:d2:d9:59:c7:5e:17:29:91:
62:e3:37:02:09:7d:4f:3c:b7:b8:2d:14:94:7d:30:
0b:e6:2a:6f:a9:7b:42:74:8a:83:26:5d:22:f6:4d:
e4:49:81:94:a5:00:f4:6a:4f:fb:00:58:f4:ea:90:
7f:73:fb:77:13:e7:d6:d7:8f:65:8d:0b:bb:d0:0f:
e8:7f:f1:24:fa:74:eb:fa:06:f0:6e:f9:9c:f7:59:
d2:ff:e1:a6:5b:d5:46:ec:49:e9:4c:35:7c:15:6f:
2d:22:66:6e:2e:d6:19:25:3d:81:cf:02:38:5c:f3:
7f:cf:f6:a7:36:70:6b:9a:cc:dd:d1:1c:f5:33:fa:
a1:c0:e7:81:b3:16:2f:77:a0:b2:9d:dd:e5:80:cd:
d3:48:6d:91:66:2a:35:71:64:dd:c2:97:d3:dd:17:
60:5d:4f:64:d3:a0:10:81:e5:b3:98:ed:5e:5f:20:
d1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1E:2F:3E:A1:9F:96:03:A7:61:F0:FB:35:D7:3B:76:0C:62:3B:F4
X509v3 Authority Key Identifier:
keyid:26:8B:C7:95:31:F7:D8:15:D2:B2:B5:22:9F:9A:C9:F6:F8:BF:EB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JovHlTH32BXSsrUin5rJ9vi_68o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2f07e0-075d-4548-9c9a-155b357bd880/1/JovHlTH32BXSsrUin5rJ9vi_68o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e1:c0:93:48:e1:02:ae:37:ff:07:0e:cf:17:7d:98:1c:ad:
77:d2:92:9d:31:14:54:04:54:c0:13:a2:45:45:dd:47:1f:41:
b6:27:1e:5e:e1:f4:18:c2:97:78:9a:cc:35:e6:5f:aa:89:3a:
c0:4b:42:0c:e4:34:11:a8:0a:8a:69:e7:32:1d:8d:0c:a8:eb:
0b:55:40:4e:80:79:07:71:5e:42:6a:76:20:de:b4:20:91:a6:
56:e7:9b:49:dc:68:46:be:f2:67:5a:e6:9d:6a:c9:62:6b:db:
ef:ad:81:f0:ac:41:cf:a3:04:88:ec:63:57:f8:39:bc:f3:85:
fd:7e:45:6e:8a:2e:90:a1:80:b7:25:69:71:4b:aa:6c:74:ea:
ca:d3:38:cf:2f:9e:31:2e:4c:d9:76:f9:8a:1a:55:7a:a1:e8:
09:32:39:7d:8f:45:4e:fe:60:0e:94:81:ff:01:a4:48:84:78:
d5:20:83:71:18:8c:ff:2b:75:57:f1:2b:da:9d:fd:0f:7f:05:
76:eb:d9:21:96:67:b3:5c:a6:11:52:ef:14:df:f3:f5:0d:66:
df:6c:35:fa:22:d5:13:40:27:01:47:22:21:d8:c8:d4:c6:cf:
33:13:a9:81:b5:f1:92:1c:8c:c7:5b:2b:b2:0e:65:dd:c7:57:
ec:1d:41:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:36:38 2025 by rpki-client