Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
File: JHQF6c7jnXGUTV4xSesBth-a2x4.mft (raw, json)
Hash identifier: 7XkqNcuH46mPxgByfyfrMPv8XBwmwJLoYS91iYCHxTg=
Subject key identifier: 78:43:A3:2D:2B:C4:48:64:91:CF:E5:52:1B:2B:02:1E:56:A9:98:B3
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 0199FC58C5496777635F71A020F689581C48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
Manifest number: 11EF
Signing time: Sun 19 Oct 2025 12:01:40 +0000
Manifest this update: Sun 19 Oct 2025 12:01:40 +0000
Manifest next update: Mon 20 Oct 2025 12:01:40 +0000
Files and hashes: 1: Ab1tskS4Q67Z2YctzJLxqj53W9g.roa (hash: AZCXpUJa1dgUBTX+Q3S9ZNI6U7aZKWGmwFCH40STagc=)
2: JHQF6c7jnXGUTV4xSesBth-a2x4.crl (hash: mfDKfvstTvlO5M7jh0Err3F0EyVREKkK2CUkbDJNZfA=)
3: ZwMecEU89iNwlEPNMqqdNK21CRk.roa (hash: FTqQ+R8RJ6dWUyPAN/1xgiMPp5vc51aB62sTFqdJ7bA=)
4: f_0cBwbRlTos3u7H8bwrPKcXUN8.roa (hash: xaHHsjfR8A17jN6pVVS9xdai2iZp05T7G1TibqlcLQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c5:49:67:77:63:5f:71:a0:20:f6:89:58:1c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Oct 19 12:01:40 2025 GMT
Not After : Oct 20 12:01:40 2025 GMT
Subject: CN=7843a32d2bc4486491cfe5521b2b021e56a998b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:97:91:66:1f:53:c8:34:b6:97:4b:f6:c2:
cb:c2:d4:9f:02:54:69:d0:f0:a9:63:cc:9b:cc:49:
2a:ca:4f:63:f8:c1:3e:e3:51:57:89:34:95:84:02:
57:20:8f:90:95:de:42:1e:ce:7c:9d:36:6e:d2:0c:
61:42:e1:6e:0d:47:ee:fe:38:38:6f:56:e6:55:88:
45:40:4a:a9:78:a2:83:81:06:f1:36:06:a7:4a:7c:
0a:1f:9a:25:9b:40:64:0a:d6:34:c4:f7:58:99:18:
ab:01:83:9c:bd:9d:3f:7b:32:51:2e:51:ab:2e:1e:
dc:33:1f:28:2f:2c:47:8a:5b:ad:2c:32:dc:2e:57:
00:48:3f:35:9b:18:67:b7:68:7d:57:01:ef:65:26:
3d:6c:ef:82:5f:a6:2d:fe:65:0b:e2:be:62:84:17:
4f:4e:82:77:86:d9:c1:cb:52:fe:f5:8d:1a:a0:db:
64:1e:ea:16:47:19:fb:b4:ed:10:59:97:5c:3d:25:
f2:3a:c8:21:02:56:cb:fb:8a:ac:d0:44:e0:08:81:
f9:30:e5:98:c3:ba:19:aa:5c:23:2f:ac:41:a1:d6:
63:74:ed:6f:e5:bb:de:ac:90:c7:90:10:73:a1:2a:
28:14:60:55:c5:b5:cc:2d:a0:4f:93:b3:ff:e6:81:
a5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:43:A3:2D:2B:C4:48:64:91:CF:E5:52:1B:2B:02:1E:56:A9:98:B3
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bc:42:ac:ed:48:2c:01:70:85:60:e4:bc:38:26:88:2c:8f:
07:26:eb:4a:40:12:db:ae:c5:80:5e:a6:ea:3c:1f:e7:13:ff:
b1:c7:c1:28:3b:47:f5:ba:68:8b:14:84:52:4e:a9:2a:60:87:
f4:65:bb:2d:65:d2:bc:ea:a3:6f:4d:8e:3b:c7:17:e6:6b:43:
d7:58:f5:3f:81:08:b6:6d:f5:55:53:b1:42:3f:58:05:33:4e:
c0:83:60:d5:a8:f9:f4:0d:dc:5a:29:ab:d6:67:64:11:a4:3b:
37:02:57:ac:da:a7:8b:79:62:b4:f9:a6:20:d2:02:2a:db:a0:
ce:dc:52:9e:6d:52:95:a1:9f:c3:92:89:77:a8:33:d9:7c:5c:
72:cf:36:b0:58:31:54:b5:ff:a5:21:54:8a:c5:13:73:6e:77:
aa:88:9e:c6:29:77:0e:8f:22:a5:f3:80:94:33:c8:6e:7a:ef:
de:7b:bf:5f:90:46:a5:f5:95:64:41:60:cd:61:af:13:bb:04:
4c:7d:bc:bf:0c:96:94:48:da:87:c7:fe:30:fc:aa:25:05:7e:
e3:78:b4:e2:9e:1d:a2:5c:fc:d9:9c:80:6c:0a:2d:5d:2d:ea:
ca:cb:4f:9a:2d:3e:68:5f:95:f8:c0:38:84:b7:30:c8:8a:65:
66:0f:b9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:41:57 2025 by rpki-client