Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
File: RJRpaPL33ZUOpJuHc33x9q69u1M.mft (raw, json)
Hash identifier: Bz09sjjeCY5+UEEiBF41ywqsdjNBOe+JzL1HG9tbAHg=
Subject key identifier: 1D:BE:1B:CA:37:1C:07:31:89:AD:5A:1B:0B:4C:06:90:DE:AD:D1:4C
Authority key identifier: 44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
Certificate issuer: /CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Certificate serial: 019A722599E267A9B7458E21C3413F8352A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
Manifest number: 0879
Signing time: Tue 11 Nov 2025 09:00:58 +0000
Manifest this update: Tue 11 Nov 2025 09:00:58 +0000
Manifest next update: Wed 12 Nov 2025 09:00:58 +0000
Files and hashes: 1: PoLYxkMVycTNzRpiJblUxxrqJt0.roa (hash: Lw/mDGQLMZUq6fBec8pNWkJSbSgJOh8v7cZOSqwybpw=)
2: RJRpaPL33ZUOpJuHc33x9q69u1M.crl (hash: pXIgp8h7STlfVZutskiMNfXLCUZi1NvgtuFP/ONRzEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:99:e2:67:a9:b7:45:8e:21:c3:41:3f:83:52:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44946968f2f7dd950ea49b87737df1f6aebdbb53
Validity
Not Before: Nov 11 09:00:58 2025 GMT
Not After : Nov 12 09:00:58 2025 GMT
Subject: CN=1dbe1bca371c073189ad5a1b0b4c0690deadd14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:4b:2c:0a:a9:d2:3b:4a:90:03:bd:75:25:
fb:d5:37:70:5f:5e:ad:0c:65:e7:cc:6f:72:56:c8:
f7:3e:1a:fe:e4:d7:08:8e:95:c9:d5:bc:43:53:30:
9f:31:b6:32:cc:1e:2a:58:6b:b9:a3:f6:05:fb:c3:
93:a4:20:a2:a5:8f:0d:e9:a9:12:12:3f:bd:c7:c0:
08:2b:86:8c:a4:e1:82:5d:db:7e:20:e5:77:ba:ce:
43:11:76:be:32:a2:4e:d2:d8:3f:0d:87:df:d9:07:
43:d7:70:76:10:ab:05:34:f8:7b:ac:33:ca:53:b7:
9a:5c:da:40:66:9f:0a:0f:2d:eb:5c:76:67:f7:55:
b0:c0:b3:cd:e0:6f:85:a0:b6:82:50:40:f3:b1:b5:
98:17:a8:44:70:2f:ac:06:96:9c:9e:d0:62:1a:ac:
9f:84:12:e7:f6:63:20:4e:ca:e3:51:88:8f:af:a5:
9d:af:1f:ac:06:a0:98:70:fb:b8:f9:a3:7d:ad:95:
06:21:f4:74:a2:56:2b:b3:67:37:e0:7e:7c:31:b2:
e8:83:b3:3f:d6:11:af:c3:be:63:07:bb:df:ec:4d:
32:0e:10:76:dd:23:26:2a:9f:47:ad:a2:54:9d:02:
cb:89:f5:1b:30:7d:66:93:84:79:2b:ec:d4:86:3f:
7b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BE:1B:CA:37:1C:07:31:89:AD:5A:1B:0B:4C:06:90:DE:AD:D1:4C
X509v3 Authority Key Identifier:
keyid:44:94:69:68:F2:F7:DD:95:0E:A4:9B:87:73:7D:F1:F6:AE:BD:BB:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RJRpaPL33ZUOpJuHc33x9q69u1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e81e9a-74d9-4ca4-9f46-8f0f4d6b8939/1/RJRpaPL33ZUOpJuHc33x9q69u1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bd:ae:81:c9:64:7e:1c:80:62:26:4e:a2:09:eb:70:16:56:
f5:d8:c1:f0:47:b7:8e:5f:98:fe:8e:17:1a:87:83:ea:e3:d7:
b9:0d:39:2d:47:bd:8e:36:87:b1:4f:c9:5f:86:f0:5f:f0:13:
5c:4d:a4:c5:2a:5b:ef:8a:27:46:24:31:d5:47:37:e3:47:60:
ad:eb:6d:39:d5:6a:84:d5:45:ef:ff:06:b7:6b:1b:32:40:c0:
67:ec:a8:ac:ae:04:ab:a0:72:49:2e:67:da:eb:12:6f:60:a1:
bc:82:a4:b4:cd:f4:f2:5c:88:fc:4e:cf:cf:9c:49:0e:05:99:
9d:21:91:ce:14:1d:f6:16:c9:5b:ae:cc:e6:29:50:2a:98:2f:
89:02:a6:0e:6f:d6:6f:80:96:d7:98:77:ca:3d:e9:88:70:c7:
e9:80:f9:2d:e3:85:e0:a4:15:16:46:1b:a6:6e:e1:66:3e:5d:
57:f7:75:35:3e:9e:1d:8f:dd:da:b0:08:11:a8:eb:2b:26:9f:
11:69:49:68:3d:9a:ad:8f:a7:d8:88:6c:32:18:43:1e:03:dc:
de:e6:92:c7:5f:26:4c:26:73:b6:ab:a5:83:3c:81:46:14:7d:
b8:de:e2:d6:d0:88:ce:04:aa:e0:8d:f4:b9:8b:2f:3a:81:c8:
69:cb:49:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:57 2025 by rpki-client