Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
File: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft (raw, json)
Hash identifier: lB1tUqqr4IwWIxcY2XSbvICRv1Lfa0nb92pbMTqqnvE=
Subject key identifier: A5:F2:A2:F0:74:FB:77:E2:AE:EF:12:18:2D:86:79:F5:5D:8F:9F:72
Authority key identifier: 25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
Certificate issuer: /CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Certificate serial: 019A71B78C7A662BF3E5253E5AB37883A0EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl (hash: NRE+gKKDbHTSgZZ97/mASl1tLsE4J8bzABDcT8rFhTY=)
2: O7SXZPMFV3Am85txyKq-wzV0mJk.roa (hash: E3gQb/T8VdnvnhmQexSN7n2IkCaiiXjYdA/H9y6oGHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8c:7a:66:2b:f3:e5:25:3e:5a:b3:78:83:a0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=252cb35c3f56b2798ff61bd4d9a5ced0ee039fb0
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=a5f2a2f074fb77e2aeef12182d8679f55d8f9f72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:52:58:40:f4:d4:7e:f2:d4:d6:d0:db:f1:
38:ae:e4:05:45:f8:7b:c6:33:e7:47:61:39:9f:af:
34:77:64:a4:4f:30:ae:18:79:af:fe:25:e9:c1:f6:
3a:a0:c0:3b:8a:03:7b:be:6f:3f:5d:8c:02:e2:47:
e2:40:c6:a3:7b:e8:08:90:bc:e4:06:46:3d:ce:43:
6b:8f:63:30:d9:d5:8c:da:d7:4e:1e:71:6b:ab:36:
1c:f9:32:85:bc:f7:ab:51:6e:1a:21:18:25:1a:91:
8a:a6:75:b5:8d:63:0c:5f:b4:32:1b:10:f3:10:12:
02:27:ef:d3:37:dc:f8:86:79:e7:4a:27:ce:ea:12:
03:d4:49:84:81:4b:48:b0:ea:3a:27:59:af:24:e9:
ed:c4:8a:9c:32:d0:a8:ba:0d:8b:9d:46:0b:05:18:
b3:bd:73:c2:e7:35:bd:5d:cc:9e:42:32:27:12:be:
6a:ae:35:51:13:8c:3c:6d:30:20:8a:30:62:da:01:
f9:2c:d9:90:ac:b1:73:96:84:eb:d5:fa:37:5f:23:
d9:74:fd:48:aa:12:55:4e:91:c1:c7:a1:24:a0:26:
81:3d:00:92:f9:99:ba:51:c2:46:b4:16:17:ed:7a:
23:45:32:cf:bf:95:2a:67:fd:1d:cc:be:0b:e1:b1:
7f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F2:A2:F0:74:FB:77:E2:AE:EF:12:18:2D:86:79:F5:5D:8F:9F:72
X509v3 Authority Key Identifier:
keyid:25:2C:B3:5C:3F:56:B2:79:8F:F6:1B:D4:D9:A5:CE:D0:EE:03:9F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/77c6fc-8a99-42f4-ac23-56c6a1031dbb/1/JSyzXD9WsnmP9hvU2aXO0O4Dn7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:19:17:2c:68:bc:a4:9f:5c:34:65:06:5b:17:ff:bf:82:56:
79:05:04:4a:5c:cf:11:0f:62:c2:3e:7a:ef:51:d2:10:48:91:
d9:84:ee:12:79:32:73:b4:d3:c4:7e:f8:9a:db:d0:36:e7:97:
af:4e:9c:e8:d9:cf:8b:b7:e2:86:4f:81:9a:e3:7f:53:22:c8:
53:d8:95:fd:bf:64:3f:ca:38:db:26:d7:06:db:ff:09:74:ec:
fa:14:65:1f:cf:c5:ac:b4:2a:d7:4e:02:60:bf:4e:5b:97:8b:
fd:42:da:f3:7d:80:9b:33:de:39:e8:9a:4f:cd:0b:70:41:dd:
fa:70:f9:55:25:88:13:74:92:5c:05:ff:59:fa:85:00:eb:91:
d3:41:dd:fc:17:8c:39:19:cc:62:e2:a4:ed:c6:ae:93:36:a1:
bd:05:0f:c7:53:36:2e:13:b2:c2:7b:96:48:84:5c:91:66:a2:
a1:3c:8e:6a:f8:f6:a9:03:fb:ca:5d:d0:87:9d:0d:e3:aa:3a:
9e:ea:6b:50:fa:e6:3c:cd:30:c7:86:06:0b:33:50:65:8f:8a:
8f:1b:09:c4:06:89:aa:09:f8:49:64:4f:ca:e2:5d:27:86:f3:
af:05:76:25:7e:dc:c0:6f:94:45:61:e9:70:7f:88:3d:38:44:
e6:27:ef:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:23 2025 by rpki-client