Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
File: J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json)
Hash identifier: o9QjWWcVKvj9CAbidPa2xGU76wuKVmdgdROhSHQkmk0=
Subject key identifier: 48:7B:18:36:5D:B5:24:28:5D:23:9B:12:45:F1:25:30:94:FC:C4:11
Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
Certificate issuer: /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Certificate serial: 019A22F74452D975798D0A7FAA0880442724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
Manifest number: 106B
Signing time: Mon 27 Oct 2025 00:00:21 +0000
Manifest this update: Mon 27 Oct 2025 00:00:21 +0000
Manifest next update: Tue 28 Oct 2025 00:00:21 +0000
Files and hashes: 1: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: Pjt9l472DOqbN3AuAa/EojulhRkxZOlTJcZh+M//m7Y=)
2: vdjx6mVJjB2A5HRAp4zCXF1WOmI.roa (hash: nZy4/J4/xAAVv0Nm8r/1Dh/36Nz5IhwHl0WfPkQGlFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:44:52:d9:75:79:8d:0a:7f:aa:08:80:44:27:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Validity
Not Before: Oct 27 00:00:21 2025 GMT
Not After : Oct 28 00:00:21 2025 GMT
Subject: CN=487b18365db524285d239b1245f1253094fcc411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d0:5f:f2:4d:3c:5e:14:19:64:85:1e:fd:68:
25:42:bd:15:36:ad:04:21:5b:ab:51:02:14:4b:52:
b0:8d:78:b9:f3:b3:20:77:eb:dd:1d:e4:2f:ef:bb:
f1:5a:1e:de:88:38:9f:8e:99:b8:3a:e4:52:e7:49:
2b:0d:d8:e5:9c:3c:58:6c:79:f5:62:7c:ac:ff:39:
f5:cb:b6:0a:37:a3:f5:40:82:82:93:d5:e5:63:d2:
4f:30:a7:04:3a:52:cf:dd:2c:78:8b:80:59:9a:2d:
43:fb:b0:d4:aa:12:ec:eb:fb:50:99:0d:36:78:e3:
b2:8f:a4:18:89:0d:e6:34:33:80:77:81:17:f1:8e:
05:de:66:72:99:c3:25:a1:1b:05:e9:ac:33:a2:6d:
55:40:9b:f9:6f:52:22:2d:da:32:92:33:53:7d:e4:
4f:23:ff:6d:66:e9:b8:59:74:fa:6d:36:5e:64:79:
b2:a1:d0:7d:0c:95:ab:a6:22:aa:c3:24:98:86:1e:
33:00:ab:c0:b7:ba:93:8a:2d:ed:48:1a:1f:c7:d1:
f1:53:8f:fa:a7:1b:f3:e8:0b:e1:28:ac:65:b4:15:
b2:a3:74:1a:b5:66:8c:31:04:19:f4:e8:b4:8f:76:
b2:3f:75:ed:5a:a9:77:14:71:cf:68:a1:8d:ae:3b:
32:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:7B:18:36:5D:B5:24:28:5D:23:9B:12:45:F1:25:30:94:FC:C4:11
X509v3 Authority Key Identifier:
keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:bf:bc:a4:52:63:b2:e3:45:5c:12:67:ee:cb:bd:2a:c9:d9:
22:f9:72:df:df:1f:51:f7:23:0f:8e:c4:cd:e5:a2:cd:75:5e:
06:45:18:b1:2e:19:7c:f5:c9:53:0f:30:98:af:5d:70:ac:98:
c1:e5:ae:29:47:b6:16:56:ad:92:09:ef:ef:3d:7e:9b:3d:b1:
4f:3e:25:7d:84:17:65:e4:a7:6f:0b:e6:88:ef:ef:63:69:9a:
86:cd:88:12:de:59:d8:44:03:12:0b:fd:6a:76:9e:8e:d1:f3:
d5:c5:05:3d:d7:68:18:6f:d8:85:c6:92:ad:3e:ca:1f:0b:25:
61:ca:bd:d2:0c:f0:ec:15:18:a8:14:fa:06:2f:cb:d4:14:fd:
b5:ab:8a:e5:a8:84:5c:39:15:42:f9:7b:78:0a:75:88:cf:5a:
c5:4c:02:78:4e:32:af:9d:36:4d:0e:3a:a5:20:62:53:ee:9f:
26:8e:60:3d:81:a1:1d:cd:d4:30:6f:2b:35:89:0b:86:de:b3:
1d:94:67:9c:b7:f5:a9:34:f5:62:fc:96:78:b1:d8:ec:ac:60:
9e:eb:97:e5:3f:f9:0f:1d:9a:a5:6a:b4:2c:38:63:c5:ac:d4:
b4:63:26:17:69:9d:5c:a4:b7:42:cc:8e:79:96:80:0e:e5:7b:
a0:ec:aa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:38:22 2025 by rpki-client