Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
File: JsymKjWIHK6NLFgSrFjKBxCNcK4.mft (raw, json)
Hash identifier: MBiVAzfDKCvhNV+DMc/mefcS3kKpy0ZZBJa2QSS0qy4=
Subject key identifier: 4F:AA:D5:B8:5A:40:5E:1D:A5:C6:91:96:2E:89:BC:A9:BD:47:A7:80
Authority key identifier: 26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
Certificate issuer: /CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Certificate serial: 019A7225FD45592589320A5C1D2612BBFA4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
Manifest number: 0E15
Signing time: Tue 11 Nov 2025 09:01:23 +0000
Manifest this update: Tue 11 Nov 2025 09:01:23 +0000
Manifest next update: Wed 12 Nov 2025 09:01:23 +0000
Files and hashes: 1: JsymKjWIHK6NLFgSrFjKBxCNcK4.crl (hash: h5nNY/yGK8Z7fVaqKD6GFdSr/WmdK9O5eN7wTQSv87A=)
2: TI2sUvWDSUpJ-tuAKDLzGHYWcDc.roa (hash: +KTdwKTz1o8gs9Nib2fmPFoQlxElWxBwjFIadXb85TE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:fd:45:59:25:89:32:0a:5c:1d:26:12:bb:fa:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26cca62a35881cae8d2c5812ac58ca07108d70ae
Validity
Not Before: Nov 11 09:01:23 2025 GMT
Not After : Nov 12 09:01:23 2025 GMT
Subject: CN=4faad5b85a405e1da5c691962e89bca9bd47a780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e8:cc:b1:c0:78:a2:34:d5:4a:14:c5:ad:6e:
24:ae:1f:37:e0:c1:0a:84:9f:7c:09:84:38:cf:63:
eb:91:c1:91:81:08:72:87:3a:25:36:bf:9f:01:e9:
2e:6b:44:93:80:a3:90:7d:7e:21:0a:14:cf:d4:16:
7a:88:74:63:b4:af:e1:dd:ee:43:2b:19:77:5c:46:
3f:6b:b6:9d:a9:01:71:2a:7b:55:25:8d:8f:bd:f9:
e0:eb:1f:db:ad:f4:55:2e:12:83:d8:e7:5e:50:f1:
4c:c9:8e:4d:60:42:01:2f:6f:45:d6:3f:b6:8d:04:
3b:f1:18:c5:7a:21:8c:21:16:01:90:6c:9a:d2:1a:
31:4f:50:77:a3:1f:a1:71:77:a9:2a:5a:14:b8:e8:
f8:10:4b:e5:e5:a2:9c:4e:48:29:9a:b6:e7:ed:7d:
23:d5:eb:b8:20:9c:95:73:56:08:60:88:6c:8a:31:
2c:cd:2c:c7:09:85:c7:84:e2:69:43:8c:5d:b0:98:
66:18:0b:d3:fd:1f:58:11:8a:38:ca:db:0e:13:d5:
ab:bb:c2:5d:30:61:5b:a0:7a:18:2c:68:c3:8c:83:
6a:22:cf:c8:cd:d8:ec:0a:57:89:e0:6c:3d:18:fb:
58:9b:a7:4b:50:80:29:3d:ca:88:f1:c0:c8:fb:9a:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AA:D5:B8:5A:40:5E:1D:A5:C6:91:96:2E:89:BC:A9:BD:47:A7:80
X509v3 Authority Key Identifier:
keyid:26:CC:A6:2A:35:88:1C:AE:8D:2C:58:12:AC:58:CA:07:10:8D:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JsymKjWIHK6NLFgSrFjKBxCNcK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/53375d-0c9b-453e-9ff1-bb7bb5bf00b1/1/JsymKjWIHK6NLFgSrFjKBxCNcK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:76:4c:f8:2e:29:5c:e4:bf:ad:9c:3e:b8:da:bd:ac:c2:31:
16:56:50:8a:16:3d:e1:17:61:8a:88:c6:a0:35:e6:90:ed:46:
1e:33:b5:5a:08:ff:92:92:1c:b2:b7:3e:fc:aa:be:8c:c7:e6:
72:e5:0c:bf:5a:ea:33:be:fc:d5:18:84:56:13:aa:b2:c6:bc:
b5:43:17:c6:3e:ed:c2:6c:98:58:31:a5:36:c3:05:f1:93:8a:
56:73:56:f3:9b:4e:7c:1a:34:6c:41:21:5f:e5:b5:d4:a3:b4:
6d:5d:42:5d:55:8a:19:20:2c:e7:41:1a:41:78:14:8d:93:1f:
d9:bf:2c:c1:eb:4d:6b:2a:9c:7b:50:9a:02:62:6f:41:c1:a1:
06:20:9a:c4:d5:eb:e8:29:c1:3c:8a:98:d7:9c:af:9f:00:a1:
65:b0:66:3c:74:f2:86:43:37:3c:48:6a:38:45:46:80:3b:df:
cb:da:09:99:ee:65:e9:b2:a4:48:e9:fd:f5:18:8d:63:78:08:
1b:85:3f:ef:5f:b3:46:82:93:f1:75:68:98:18:7d:b1:81:23:
fe:5f:bf:72:be:0b:cf:f3:1c:c8:f5:87:54:24:bf:bc:f0:8d:
e1:55:6f:03:9e:20:bd:39:e6:d4:d0:15:4f:3c:81:cf:dc:5d:
11:fb:a6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:11 2025 by rpki-client