Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
File: JwKaNvwMyi4KjQRfAi38gxpRcwg.mft (raw, json)
Hash identifier: icfnDBT+CD2dmKypi6y3AIs0XFVnyWTVWLOFRk0Qh74=
Subject key identifier: E0:0B:2B:B5:CF:A9:1D:29:EA:AD:EC:1C:0C:87:95:38:39:62:F8:93
Authority key identifier: 27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
Certificate issuer: /CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Certificate serial: 019A239BFE42FAFF4FC54C71338489F27EB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
Manifest number: 163E
Signing time: Mon 27 Oct 2025 03:00:17 +0000
Manifest this update: Mon 27 Oct 2025 03:00:17 +0000
Manifest next update: Tue 28 Oct 2025 03:00:17 +0000
Files and hashes: 1: JwKaNvwMyi4KjQRfAi38gxpRcwg.crl (hash: zN/+/VmR90UmweNLjIfANfj/6S+2+pxXu5HsYCJI1xM=)
2: gC97AQKQbgiW9Krq-_q2apqCHmc.roa (hash: IvEX/4r+S7SQha7hWBWTDBpux0NlV5BKH8odMNrPeJQ=)
3: g_n97b-ezr2pU8M_arTz7b0GI28.roa (hash: f/1b/CBZ/cmdffSZ/BO1Ow8CLoficDzJ57IxUPZ8+ZA=)
4: zhoAHh4wgcaK6VZRodYWCuN75nI.roa (hash: kV8XnwO8Zz8GVVhAZVUdjX5IeFTvNwptdgYC4YvJ97E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9b:fe:42:fa:ff:4f:c5:4c:71:33:84:89:f2:7e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27029a36fc0cca2e0a8d045f022dfc831a517308
Validity
Not Before: Oct 27 03:00:17 2025 GMT
Not After : Oct 28 03:00:17 2025 GMT
Subject: CN=e00b2bb5cfa91d29eaadec1c0c8795383962f893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:e2:04:36:a6:3d:bf:43:51:c6:83:b5:52:
71:30:20:79:d5:68:1d:f7:d2:9f:aa:db:b8:49:b6:
c7:40:93:6f:ec:08:a6:b8:ec:e5:2a:6e:e0:de:39:
41:ed:9b:92:2c:36:b6:c3:85:58:81:56:c9:cc:de:
94:46:26:ae:a5:91:7e:73:27:10:d5:b7:b5:93:dc:
39:36:d5:37:e0:a9:90:56:53:15:49:19:e2:89:2c:
5f:80:36:8a:5d:f0:60:59:a1:c6:b8:52:b0:2d:bf:
9e:57:ff:49:2a:51:77:6d:6e:05:96:b6:47:76:c0:
29:44:6e:eb:9f:53:85:6f:16:92:9d:7b:b2:b8:57:
68:cc:f4:f9:67:6b:79:c6:7a:f1:93:37:34:f1:97:
80:4b:7b:51:83:d9:5b:38:53:3f:be:16:43:be:d9:
83:78:fd:15:af:c8:13:6a:4d:96:7e:4f:58:06:0f:
2c:90:70:fb:4d:fa:7a:62:85:8f:95:c7:04:34:4d:
a1:6e:0a:d3:68:4e:9d:31:0f:2a:0b:67:77:4e:11:
8b:04:27:f6:7d:26:24:4f:c3:dd:26:da:b4:88:5e:
23:52:68:e8:1d:c8:ef:da:be:b0:82:d0:d7:d4:d9:
0c:47:6e:08:22:1d:5a:0a:ae:9a:18:4d:31:1e:25:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:0B:2B:B5:CF:A9:1D:29:EA:AD:EC:1C:0C:87:95:38:39:62:F8:93
X509v3 Authority Key Identifier:
keyid:27:02:9A:36:FC:0C:CA:2E:0A:8D:04:5F:02:2D:FC:83:1A:51:73:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwKaNvwMyi4KjQRfAi38gxpRcwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/53bb23-dfa8-4792-b317-50d0a5323641/1/JwKaNvwMyi4KjQRfAi38gxpRcwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:ba:7d:61:bd:69:f4:93:fe:a6:3b:d0:a8:3d:47:5c:22:7a:
c6:f0:0e:96:ab:83:d8:a5:52:63:28:99:5c:1d:80:65:a5:39:
b8:ef:f9:52:48:fe:01:ed:a9:90:5a:53:1a:fc:23:2c:7b:67:
89:f7:6a:1d:00:b8:c5:91:a8:39:4d:c0:96:e5:6d:03:c2:d7:
0c:9b:dd:c0:6c:ec:a0:fa:0b:e0:98:8d:f0:dd:7a:3d:74:51:
45:6d:03:43:a3:53:54:a9:99:7e:53:60:6c:49:f3:7e:ef:da:
2d:61:64:5e:58:21:ec:06:ec:6c:a8:be:d5:56:96:de:09:d1:
82:8b:11:45:36:88:e5:67:d0:b8:c7:78:84:e5:c2:d9:2c:88:
af:b4:51:9d:39:51:fb:f2:61:27:0d:d4:ce:bb:8a:01:62:a1:
ba:1b:2a:87:4e:8e:f1:13:18:9d:db:c1:8c:4a:9a:49:9b:cc:
f8:16:af:cd:6d:84:6d:5d:c1:5c:0e:f5:b9:d8:71:e4:e3:94:
a1:44:55:5f:2c:65:af:82:9b:51:52:8c:0a:91:f9:6d:37:17:
d5:5b:17:39:c4:11:db:46:4f:4c:1a:dd:87:cf:b7:09:6e:4d:
e5:39:f4:d7:f2:f4:89:dd:01:c2:c7:ec:36:26:77:52:71:7b:
55:2c:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:27:24 2025 by rpki-client