Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
File: JnK5-1RrNl4yMjDc6puoyfvt_rg.mft (raw, json)
Hash identifier: pBahetqDJ4ya46/f3Pn07GeNlQOGiJ0iiL5pC15AY5w=
Subject key identifier: E7:4C:DB:2B:86:0B:8C:B8:84:31:D6:37:A8:12:BB:C8:A0:9E:40:B2
Authority key identifier: 26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
Certificate issuer: /CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Certificate serial: 019A123AAD1B0D5C5667FB1E54B711263A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
Manifest number: 0B67
Signing time: Thu 23 Oct 2025 18:00:26 +0000
Manifest this update: Thu 23 Oct 2025 18:00:26 +0000
Manifest next update: Fri 24 Oct 2025 18:00:26 +0000
Files and hashes: 1: ITb_XVl2tA11J6nAknkJ07xuM_A.roa (hash: Te0z4RiC3nV17xojwnpgYVjVq9us6VbZr6q0RMM9u2o=)
2: JnK5-1RrNl4yMjDc6puoyfvt_rg.crl (hash: YphE1PmlUvJpFDV0zWdrn926ecdqxJGMqCP6nSDzTVs=)
3: WyMoFYnAIn1sAAAmnPjWInPKCN0.roa (hash: 1MKnjj6EqbU+hUr91/B+f0YJrJKMU7mmnJwoLcY6nt0=)
4: y9KTYkCcz9X-wHblp6V4OiKB-A8.roa (hash: MiEzpatVp+ndU9E4bxMOGWBIiRH8JujeOmOr6aRsU1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:3a:ad:1b:0d:5c:56:67:fb:1e:54:b7:11:26:3a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2672b9fb546b365e323230dcea9ba8c9fbedfeb8
Validity
Not Before: Oct 23 18:00:26 2025 GMT
Not After : Oct 24 18:00:26 2025 GMT
Subject: CN=e74cdb2b860b8cb88431d637a812bbc8a09e40b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9b:0d:7f:0f:73:ac:0d:98:7f:47:92:e4:b4:
95:a7:87:eb:3a:e5:d8:1d:ca:4b:af:21:6f:29:fc:
44:01:e0:c0:9d:80:12:7b:54:e9:e8:8d:05:b7:b9:
05:f1:3c:82:c8:f4:8f:88:97:9d:f8:91:d9:25:61:
77:e8:89:3c:22:20:ff:ff:34:2b:71:5f:03:25:e3:
f0:a3:47:a6:34:29:a7:9b:7f:0f:6a:87:b5:22:87:
58:43:91:48:d1:fa:7d:da:2d:1d:27:16:01:02:e8:
64:6c:aa:69:d5:f9:39:c3:1c:1b:7c:20:29:f3:c2:
b8:8f:a7:60:03:5d:b2:53:e1:a9:d6:d0:6d:6f:e2:
78:cf:19:4e:2a:12:6d:18:86:f4:84:1d:19:1a:dd:
ea:f1:7d:d9:82:15:55:8f:db:e0:f4:c5:0e:65:b4:
c2:21:68:66:ba:bc:51:97:3d:d0:22:7e:d9:0b:51:
7d:e6:c9:32:43:fc:be:3c:23:de:6d:70:36:f5:bd:
47:ae:18:c3:9e:28:16:55:cd:2c:6f:d0:de:77:8a:
c5:1b:21:42:f7:77:94:b5:48:d8:a8:36:ce:e1:51:
46:76:df:ca:5c:32:5f:a0:f2:6f:88:5b:3c:81:f7:
85:f3:f0:79:1b:93:10:ae:fd:2e:34:d5:98:d5:ed:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4C:DB:2B:86:0B:8C:B8:84:31:D6:37:A8:12:BB:C8:A0:9E:40:B2
X509v3 Authority Key Identifier:
keyid:26:72:B9:FB:54:6B:36:5E:32:32:30:DC:EA:9B:A8:C9:FB:ED:FE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JnK5-1RrNl4yMjDc6puoyfvt_rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/b13b55-1288-45e6-8876-a70db58280fc/1/JnK5-1RrNl4yMjDc6puoyfvt_rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d2:a7:cc:27:f9:c9:ce:8c:7c:4b:c2:c8:ce:9a:5d:b4:3a:
44:80:b1:4e:61:5b:61:74:f9:9b:43:49:6f:86:48:30:56:f2:
e4:2b:43:e3:b7:50:b8:3f:65:b4:f9:d6:f4:a6:6d:59:48:84:
e5:42:a8:8f:c6:a0:df:67:5f:34:1a:10:9e:c5:04:a3:75:18:
37:38:51:be:f5:a9:88:2f:bb:49:2b:3d:5c:b0:eb:76:5a:05:
0d:fb:b6:e5:a9:fc:c6:4f:50:46:a0:38:54:77:d6:ac:0e:29:
58:8d:3e:46:12:ba:66:cc:fe:11:da:33:31:54:e2:6b:c9:1e:
41:8f:4a:c0:73:5a:bc:96:77:fa:0e:41:a4:59:10:3f:37:4e:
6e:e2:ca:d0:bb:82:b1:47:51:76:c2:e0:77:a5:46:20:8b:14:
5c:83:dd:66:c3:ca:7a:5d:52:8d:eb:10:bf:3c:f6:07:8e:3c:
00:60:64:cd:ca:53:0b:2e:ff:af:71:d7:b4:d2:7c:fc:80:b8:
1f:8e:c4:ac:25:11:89:4d:47:4d:7c:c1:0c:3d:e0:ce:76:bb:
54:bb:39:18:ae:6d:50:25:af:29:7c:c3:8d:ff:cc:2f:65:e7:
d2:cd:f0:60:47:3e:b9:f4:e6:c3:a9:d2:e7:d4:32:9b:de:ca:
d9:c9:88:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 21:07:46 2025 by rpki-client