Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
File: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft (raw, json)
Hash identifier: Ia4CKVPlqmxmH95ye3og+8KEwH2kk1u3gIj/SRhh6ds=
Subject key identifier: EB:E7:C6:03:7A:9E:50:FE:E6:F6:32:22:DC:A6:00:39:FF:3A:92:08
Authority key identifier: 23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
Certificate issuer: /CN=23f8c999b30ce248e6c468c784d64d72f963e938
Certificate serial: 019A71B845F423AE8B08D8E9EAB0D31C9B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
Manifest number: 0E72
Signing time: Tue 11 Nov 2025 07:01:33 +0000
Manifest this update: Tue 11 Nov 2025 07:01:33 +0000
Manifest next update: Wed 12 Nov 2025 07:01:33 +0000
Files and hashes: 1: I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl (hash: b/RuJ7uG1pGb3RJLeRD9pYeMldathNQFgPwkGblHJNo=)
2: lMtd9Et7sCIMnXubrUAx71SKNrE.roa (hash: m1edH+G4XaQspTL3esib0CDSyQxr91JPxRsi1poYwKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:45:f4:23:ae:8b:08:d8:e9:ea:b0:d3:1c:9b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f8c999b30ce248e6c468c784d64d72f963e938
Validity
Not Before: Nov 11 07:01:33 2025 GMT
Not After : Nov 12 07:01:33 2025 GMT
Subject: CN=ebe7c6037a9e50fee6f63222dca60039ff3a9208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:2e:ed:6c:2c:75:65:c0:6a:85:fe:4f:bc:
32:6d:ae:73:9e:ad:63:6e:24:88:e0:6f:95:a0:eb:
17:fb:be:ae:0c:3b:71:75:c8:a2:82:41:92:12:1b:
c9:2d:c7:7a:dc:ea:cc:5a:38:20:99:0e:88:43:82:
60:3d:1b:94:42:57:30:4a:d3:15:bc:b9:e7:8d:3c:
8a:89:11:fc:4d:71:eb:e9:45:d2:10:16:3d:fb:e6:
42:07:0a:b4:a6:68:c9:3a:56:37:5c:bc:61:19:98:
39:1d:1f:8d:21:bd:67:fb:3a:8e:80:50:94:42:2d:
05:5a:02:83:37:bd:bf:ec:8b:de:43:47:76:e1:06:
28:09:84:7d:26:73:ab:74:cc:45:57:16:b7:3d:de:
ab:ba:dc:1f:4c:9b:af:25:cb:0a:ca:a8:f6:2d:83:
8e:53:46:bd:4f:38:4c:2b:f9:2c:16:55:d5:65:95:
27:df:3e:fb:77:af:24:f2:ad:e2:f1:28:c2:dd:80:
15:b0:68:ca:5c:6c:d8:1f:ef:30:47:e4:92:5a:3d:
96:33:40:16:da:70:5d:aa:0b:83:10:dc:f4:00:ff:
14:eb:db:26:b8:9d:6f:a5:ed:2f:ef:5a:fb:3b:b4:
0c:2f:70:6a:a2:b8:36:59:3c:93:d8:82:cd:ec:37:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E7:C6:03:7A:9E:50:FE:E6:F6:32:22:DC:A6:00:39:FF:3A:92:08
X509v3 Authority Key Identifier:
keyid:23:F8:C9:99:B3:0C:E2:48:E6:C4:68:C7:84:D6:4D:72:F9:63:E9:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/853218-ac6e-4f9c-a959-3df549a06d5b/1/I_jJmbMM4kjmxGjHhNZNcvlj6Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:21:4e:b9:9f:54:87:a8:cb:65:62:72:3c:d5:9e:9b:6c:f8:
4e:d0:62:e8:17:3b:6e:92:f1:8a:02:17:af:9f:fb:e0:80:7d:
eb:36:84:01:5d:94:b4:c0:6b:79:57:bf:15:a8:32:e5:95:4b:
5e:ca:95:01:02:cf:46:26:93:61:41:ed:3c:20:f2:a2:1f:0a:
63:50:ba:99:f4:ae:97:26:38:17:e7:ff:16:0b:d1:5d:a7:2f:
82:de:07:31:67:46:62:f3:b7:4a:a4:cb:12:81:66:42:f8:ab:
e4:dd:60:ae:0d:57:bf:42:9c:98:0e:7d:6a:32:1f:ec:88:e9:
66:bd:1a:e2:e7:5f:cd:6a:af:d7:74:9f:ad:66:26:9c:d5:bc:
93:32:d7:28:e3:59:f7:a0:d5:f8:35:cd:58:9b:11:1f:28:8d:
a5:3d:6d:06:6c:ff:05:8b:b4:4c:da:ae:85:82:6d:89:4b:2b:
b6:ec:ed:ca:b3:30:de:c4:00:97:7d:26:08:41:3c:55:06:f0:
f2:34:b7:71:df:22:4f:ff:ca:9c:a8:58:af:4f:a0:b0:36:4b:
23:b0:b6:03:9d:8a:d9:4c:76:b0:93:c4:06:94:06:70:d6:87:
fc:71:32:3d:d4:e1:22:52:69:e6:1c:b3:27:bc:20:f7:f5:cc:
2e:6d:6e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:18 2025 by rpki-client