Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: Fzaw6SFKWkVhfOSAkUElFpSkHknSchvI74WqW4XVP+E=
Subject key identifier: 55:DE:96:DC:7F:9B:0E:3C:67:65:45:C7:73:33:99:E3:1B:DB:7C:7D
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 019A1DD112EBF8B141859D1207B1C9700D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 1215
Signing time: Sun 26 Oct 2025 00:00:32 +0000
Manifest this update: Sun 26 Oct 2025 00:00:32 +0000
Manifest next update: Mon 27 Oct 2025 00:00:32 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: /ZtHWn2vWau77kIw2Qi+0zT9OtmEgUY7lSqpY9oh2uo=)
2: _pQtR1EJpgHMSOkTmSK_Er0tXsE.roa (hash: m5yMM2ApK+4Me2gJxPiOKP0gpYE7to93xl8Fx6CP7v4=)
3: qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa (hash: fwjzyDVkTfLPWzdH9pq6+z0fYQ+pKyYb7cgFc8eFsFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 20:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:d1:12:eb:f8:b1:41:85:9d:12:07:b1:c9:70:0d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Oct 26 00:00:32 2025 GMT
Not After : Oct 27 00:00:32 2025 GMT
Subject: CN=55de96dc7f9b0e3c676545c7733399e31bdb7c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:43:1d:b6:ac:b6:4e:39:60:5d:b8:d9:e4:31:
46:fa:41:f9:de:5d:d3:3e:68:7f:19:b7:e9:4f:8b:
6d:6c:4f:ed:91:6f:52:d2:7a:a4:6c:75:05:84:8f:
cd:e5:f3:05:53:9c:dc:b4:fb:99:44:82:4e:22:53:
4e:f5:41:fb:41:fd:03:c5:bf:e4:6f:70:3e:45:7c:
f3:4e:fa:50:9b:57:2e:f2:fe:1f:a0:32:58:2a:44:
70:b2:0c:3c:26:4b:b9:5b:93:1e:08:27:d6:3b:23:
b0:53:8c:33:7e:06:4d:b9:bc:7e:37:aa:3e:21:d4:
e5:54:58:d9:fe:d9:1c:20:a9:4a:ba:48:8b:63:db:
df:62:25:e7:d0:c2:b5:5a:a4:f2:53:40:ee:b0:ef:
a2:f5:1a:3f:f3:19:6d:6c:b6:d9:8a:6f:84:9c:f4:
c9:90:4d:7e:0d:00:04:2d:e8:54:4c:91:39:ad:b8:
1a:45:12:90:d6:64:29:55:79:a8:65:89:fc:bb:0a:
28:ea:14:26:cd:6c:ce:fc:7f:3b:92:a7:9f:d8:8c:
06:81:1b:b3:d6:90:5a:a2:bf:58:43:1f:f2:a8:57:
cc:31:a8:fb:fe:da:77:8d:01:17:7b:36:d4:f2:74:
40:7c:91:7e:44:54:42:4e:a8:f4:b1:15:c4:07:29:
7e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DE:96:DC:7F:9B:0E:3C:67:65:45:C7:73:33:99:E3:1B:DB:7C:7D
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:16:3f:2b:ac:24:b6:a9:5c:0c:26:c6:4d:57:9c:b5:09:5a:
b7:d1:eb:78:ec:72:a3:9c:e8:5e:25:a8:9c:ad:53:55:bd:79:
3b:a3:24:e7:55:2d:b0:31:76:9a:75:07:77:29:bc:bd:00:d5:
59:b1:a7:94:0c:37:c9:16:35:4b:80:e2:23:90:91:c4:ff:ad:
1f:94:a0:99:da:be:67:0b:02:ad:34:3b:67:50:a5:f8:51:05:
9a:13:71:58:0e:27:46:7a:79:cb:68:ba:33:a2:60:35:c2:ea:
b6:63:28:2b:8d:49:2f:28:7b:03:91:3d:b1:8e:5a:25:fc:51:
7b:93:22:46:3a:dc:d9:4d:87:a1:db:0d:a1:95:e8:6b:11:ec:
2f:f8:83:6f:ad:bc:9f:5d:2d:76:02:8d:91:d3:7d:33:55:3e:
5c:f3:d0:3c:0f:62:b0:d6:cc:7a:53:08:77:f0:3e:85:65:66:
36:f1:fc:7c:63:08:c8:32:1a:b0:b8:5c:e2:6e:4c:29:16:a0:
2e:b7:5d:74:f9:0b:72:74:e4:93:99:2a:a4:21:0b:3f:02:18:
45:a6:45:e8:86:37:67:a5:90:5e:7b:28:9c:dc:58:2d:be:47:
5f:eb:8c:66:14:bc:5d:e8:19:6e:20:00:51:f3:45:d8:78:4b:
b3:f5:cb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 06:14:06 2025 by rpki-client