Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
File: J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft (raw, json)
Hash identifier: JdzvRn0uKfZmJkq6TkeZ0cpFgXjwhkVOhwoCqOIsn/w=
Subject key identifier: 7B:9B:FD:58:E5:2C:EE:B3:A3:F2:44:55:A6:7E:94:35:03:23:68:DC
Authority key identifier: 27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
Certificate issuer: /CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
Certificate serial: 019A2F323A56EF8658974FFF214A470F2C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
Manifest number: 05B2
Signing time: Wed 29 Oct 2025 09:00:12 +0000
Manifest this update: Wed 29 Oct 2025 09:00:12 +0000
Manifest next update: Thu 30 Oct 2025 09:00:12 +0000
Files and hashes: 1: 0PYcltmJzMja0dvWKhNEIn2h5wU.roa (hash: yxrc3TyRtsqbuJQwsd58p+Gp8bj83VKuug5ZZ8u6nJI=)
2: J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl (hash: vJ1F1pqYA3mGR+v2+CItOAMZIelGox3QFrhJqHDGUdQ=)
3: Qn3X5MY5K3ykqnmnbumI2xxV95w.roa (hash: +yROVQDwj+ut6F9Jj7DUoe7vy2IatzZdxg+R94Am18E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2f:32:3a:56:ef:86:58:97:4f:ff:21:4a:47:0f:2c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
Validity
Not Before: Oct 29 09:00:12 2025 GMT
Not After : Oct 30 09:00:12 2025 GMT
Subject: CN=7b9bfd58e52ceeb3a3f24455a67e9435032368dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:20:2b:94:e0:e8:62:69:f7:3d:2b:dc:f2:
66:a6:40:e5:99:87:64:8f:88:cd:99:7a:3e:3b:10:
8a:f3:7f:e5:98:37:c4:41:2f:03:04:d2:89:da:de:
15:31:ef:b1:c1:96:45:27:85:4c:6b:30:c3:5c:eb:
dd:a8:a3:b9:fa:c1:2b:a2:ac:cb:aa:05:81:a4:aa:
cf:a6:8f:16:b2:4a:47:8b:54:54:5c:08:27:be:6c:
81:e0:0d:bb:b3:a0:d0:a2:66:50:d1:7d:09:f6:ca:
fd:dc:31:f9:a1:89:b6:d1:44:82:ed:92:9c:ea:f7:
bc:0b:8a:bc:16:13:75:35:a6:77:d0:2e:87:08:d1:
b7:68:1d:2a:7c:f7:48:67:d9:25:f5:3e:88:e6:47:
41:d5:f9:37:02:29:39:57:8e:9d:fe:56:2a:45:5d:
c3:4d:6a:64:d4:4b:dd:35:4d:72:bf:0e:7e:f6:fb:
8e:22:c3:23:03:70:45:21:c1:5d:99:56:ed:3c:c4:
2c:11:32:91:96:71:38:33:9b:7e:72:43:92:90:dd:
9b:72:6e:b3:16:a9:79:a3:fc:da:11:d6:74:fb:48:
45:9c:e6:25:40:0a:4f:f9:d1:b1:10:b8:7c:e7:63:
4a:5e:99:c9:7b:91:72:9c:1a:1a:cd:8a:04:70:84:
ef:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:9B:FD:58:E5:2C:EE:B3:A3:F2:44:55:A6:7E:94:35:03:23:68:DC
X509v3 Authority Key Identifier:
keyid:27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:95:9b:88:54:01:0f:90:b5:c1:ef:c5:47:19:3d:6c:e2:ef:
a2:3f:66:dd:aa:4d:d5:80:e8:93:09:e1:a8:2a:6d:28:b1:eb:
43:5f:bb:1d:ca:1a:dd:3d:69:9f:0c:1a:2e:9c:c3:17:8c:28:
cc:cb:6a:28:7b:ef:11:20:b1:a3:b3:ad:4d:47:7b:8d:78:ec:
1f:df:9d:59:d4:1c:46:c4:8a:69:0e:ba:83:1c:5a:74:77:c7:
77:31:94:e8:10:a5:ea:e8:2d:06:06:28:e2:a3:8d:27:54:1f:
c4:b7:d5:4a:c6:10:9a:25:7c:a0:1e:2b:ec:6e:e0:94:fd:c4:
18:7b:45:a5:79:11:59:49:7e:ad:ae:ac:20:39:48:28:40:e8:
b8:dc:4f:93:ee:fe:b5:d2:e6:9a:6c:cc:80:7e:b9:f0:00:b0:
46:e7:04:3d:02:1f:fa:69:e9:70:68:07:3b:f7:40:ca:c0:61:
64:f0:d5:6a:24:1d:b4:dd:75:2e:6e:e9:9d:e0:2e:7c:8f:a8:
f0:0f:fe:7a:d3:2d:d9:b4:1f:f2:aa:99:69:ef:b9:9f:9a:f6:
11:60:c4:81:56:b3:94:32:11:0e:e1:2e:a6:d2:c0:fb:9c:20:
0f:1f:f7:96:37:3d:fc:19:8e:76:a2:15:35:49:00:fd:fa:0e:
2f:13:84:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 10:44:53 2025 by rpki-client