Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
File: J8Y3pwndvn9iN6-NWykTtCI3FXw.mft (raw, json)
Hash identifier: 5WqJZGYsSpBRCpOcX6zd4VGPSCF+py8bfhx8yJ9Uq40=
Subject key identifier: 0E:1F:80:89:C7:93:C2:35:BA:E1:EA:59:62:18:78:08:1C:EE:4D:9D
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Certificate issuer: /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial: 019A71B7734FF6E6C946732EEAE3ECAB4D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
Manifest number: 0E15
Signing time: Tue 11 Nov 2025 07:00:39 +0000
Manifest this update: Tue 11 Nov 2025 07:00:39 +0000
Manifest next update: Wed 12 Nov 2025 07:00:39 +0000
Files and hashes: 1: J8Y3pwndvn9iN6-NWykTtCI3FXw.crl (hash: jXcfVCCHXGoP2e7JwB0Sh+70/tDW7vaxwy4X9NwA2rc=)
2: dlmSMThgfzEt-EoGdzxxYyd6AvA.roa (hash: II2qv/R+riqTZycAWnh60efymgX6QJpKVeYxCLVnyks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:73:4f:f6:e6:c9:46:73:2e:ea:e3:ec:ab:4d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Validity
Not Before: Nov 11 07:00:39 2025 GMT
Not After : Nov 12 07:00:39 2025 GMT
Subject: CN=0e1f8089c793c235bae1ea59621878081cee4d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:a2:30:66:f5:6e:89:49:8b:2c:0f:71:36:
34:35:f4:44:35:01:e0:69:2f:63:bd:8e:a2:62:49:
02:1a:02:14:8d:67:60:93:0a:74:6e:22:5c:cd:81:
ed:51:35:f6:f5:09:cc:e7:38:c4:d8:e6:2c:9a:d9:
0e:cc:ad:1a:70:bc:02:c9:c7:c8:bf:11:a9:e5:db:
82:1e:43:e1:ad:3f:7f:db:03:d9:57:15:93:61:ee:
f2:88:9f:87:b9:48:63:d2:c4:57:44:6f:10:a0:87:
3e:20:25:79:58:b5:a5:18:7a:31:b1:dc:29:5d:fd:
11:7c:62:cd:85:99:f5:e8:0d:1b:de:00:61:68:0a:
50:6b:ca:99:ed:bf:78:03:85:26:1f:fd:9f:c8:a0:
84:ce:93:26:2b:b2:9a:37:91:f4:c0:3c:8e:e8:f9:
70:a2:cc:88:a6:68:db:51:00:d7:f9:bd:bd:91:c4:
77:62:42:c3:90:bf:4b:04:db:cb:a5:df:20:47:f3:
85:7d:81:39:1d:cb:eb:7e:e5:39:79:e7:51:2f:f2:
9b:3f:91:dd:d0:72:df:1e:a5:96:a7:da:20:b1:b4:
0a:40:52:f3:ab:76:48:4a:22:ef:bf:78:be:0a:ed:
bc:a7:da:9a:94:6e:20:fd:51:1c:52:da:49:83:72:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1F:80:89:C7:93:C2:35:BA:E1:EA:59:62:18:78:08:1C:EE:4D:9D
X509v3 Authority Key Identifier:
keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:03:16:47:cd:c5:48:cf:b0:45:e6:a4:cb:2a:0b:67:b5:48:
7b:0f:e4:65:39:6e:e5:e4:07:37:35:02:13:ca:a0:97:58:16:
8d:88:6b:60:e6:37:1a:1c:4a:60:1c:5f:76:cb:a6:5f:e5:60:
6c:d6:aa:be:95:bb:78:ba:f4:82:15:b0:50:c1:2a:84:1c:64:
3e:9c:98:1c:5c:e2:dc:f0:11:bd:25:93:a7:6b:8b:8d:fc:cb:
dd:b4:a6:a0:e5:18:07:23:a6:10:ad:cd:c9:39:96:2d:2d:c3:
08:0a:f3:4f:b5:13:de:0a:db:07:df:c7:63:fa:46:94:63:66:
7a:82:49:96:35:0e:28:3d:08:04:5c:d1:1c:c9:b2:ec:91:94:
a9:9e:76:8a:05:73:fc:af:6a:71:c4:db:2a:d9:4b:c5:3f:41:
2c:b9:5c:9f:9f:49:a4:72:3c:26:73:c3:d8:ae:b9:fc:48:7f:
5b:8a:ea:34:e4:5e:bc:a9:15:85:1a:37:c0:1d:d1:f1:79:90:
62:f0:7e:02:1e:bd:18:7a:13:fe:cf:a9:f1:04:fc:85:24:93:
c6:cb:8c:27:af:77:4a:6e:a8:be:86:0b:3a:48:2c:e8:f9:12:
43:42:ef:8e:63:4f:ef:8f:65:36:6e:c3:45:ff:f1:8c:bf:3b:
b8:2f:3a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:08 2025 by rpki-client