Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File: J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier: 87pe1pokdoboDd4y7tnpHBfFbMhUuHGIk1UyasaVT3c=
Subject key identifier: B3:DE:F8:2E:62:88:87:2E:CD:A9:93:DE:99:A7:FE:4A:AD:1D:14:7D
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 019A70DC2BD7F73A504F278FC49B803DE89F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number: 0BFA
Signing time: Tue 11 Nov 2025 03:01:08 +0000
Manifest this update: Tue 11 Nov 2025 03:01:08 +0000
Manifest next update: Wed 12 Nov 2025 03:01:08 +0000
Files and hashes: 1: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: XAjk/gseuhaEmwqe+3gBi6tVEtBnvplVhMgmMMu0kGY=)
2: XfoYu50NheNzs0VtCSRCooYU-SU.roa (hash: jh91aUsS01TW33r2YJfBHj2Cr7ZQFr1/RMMxWf8OtR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:2b:d7:f7:3a:50:4f:27:8f:c4:9b:80:3d:e8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: Nov 11 03:01:08 2025 GMT
Not After : Nov 12 03:01:08 2025 GMT
Subject: CN=b3def82e6288872ecda993de99a7fe4aad1d147d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a9:8b:a8:4c:59:00:40:11:cf:5c:70:88:da:
8a:1b:b7:64:25:69:24:24:57:42:2e:cf:71:24:0b:
63:a7:81:70:b8:13:0f:60:bc:cb:94:6c:d5:e6:ea:
cb:ed:ef:44:00:22:77:fc:d0:b9:7a:09:44:a9:63:
5b:c0:31:4e:37:0e:44:19:54:ce:a9:68:59:2c:6d:
2f:45:b3:64:d2:a1:bc:7f:f0:42:78:d2:28:51:3a:
9a:6d:4d:1f:a7:7d:6c:25:db:2d:e1:a5:84:f8:e5:
42:16:e7:3c:a5:a3:3f:76:cd:86:0a:4e:a2:56:23:
87:69:47:71:63:52:29:19:e5:d0:85:30:0e:e6:d2:
a7:cb:99:2c:3e:0a:53:9e:c3:95:00:e4:e8:92:b5:
50:fd:6f:d7:8e:1a:28:9f:91:78:4d:fd:6b:7e:cb:
31:06:f0:6f:0f:6d:63:09:8d:46:aa:c2:79:53:56:
05:44:bd:57:b2:34:1f:9b:25:94:61:d2:f9:7a:5b:
48:5c:5d:80:40:41:0f:88:48:98:3a:3e:86:dc:61:
d7:72:12:f2:19:0b:00:36:8c:05:42:11:83:48:36:
e2:e1:e5:91:d0:4d:d4:db:d9:82:04:44:4a:05:a3:
42:90:8d:5a:f1:79:34:d1:84:df:b2:81:29:73:7d:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:DE:F8:2E:62:88:87:2E:CD:A9:93:DE:99:A7:FE:4A:AD:1D:14:7D
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:0d:2e:eb:45:e2:60:03:d0:db:8c:5a:76:78:27:8b:ed:a6:
1c:3d:95:bf:68:30:20:53:bc:c9:a9:28:fe:6b:db:2d:0d:48:
03:d1:67:52:92:89:74:ab:52:c0:a0:82:fd:ea:98:4d:5c:9c:
1c:18:af:cf:e5:53:66:1e:83:45:b3:d8:a1:ca:ec:00:62:93:
70:89:fc:a6:e7:32:22:0c:83:8d:72:d2:e8:2f:af:5c:54:a0:
40:aa:43:45:ca:b2:05:58:0c:7a:9a:a5:4b:e2:06:34:f7:26:
c3:8b:99:2c:f7:23:10:96:20:ed:9f:fa:8f:b2:05:a5:6b:02:
14:f7:cf:6a:e2:64:4e:69:dc:12:4d:1e:d1:3f:d7:11:0e:a0:
02:3e:41:ad:03:27:a1:7e:98:9f:f5:39:b3:47:f6:07:79:52:
65:66:29:e4:41:42:d4:39:47:4f:53:0c:aa:c0:8d:31:cc:80:
1c:a4:af:f1:87:7d:19:1e:a0:d6:07:e5:ef:26:a4:fa:ac:dc:
a8:35:f1:86:ee:75:f9:ed:12:a1:f5:b2:c7:15:45:5a:d7:35:
51:c0:53:c9:ce:91:2d:7b:aa:32:34:c5:6c:c0:2a:49:e7:e8:
36:ed:04:dc:15:f5:54:56:09:35:e9:1e:0b:a7:ec:71:58:2f:
59:f9:33:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:40:34 2025 by rpki-client