Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json)
Hash identifier: jE0HoAt+fnvzpwUcqP+76vkQV4nEcRiiLNkU8PPiu5c=
Subject key identifier: 6D:B9:64:50:5E:AD:C3:A9:0F:66:2B:47:75:71:AE:79:83:C7:29:B6
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 019A71499AC866A007C2E895517CBE101C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
Manifest number: 1183
Signing time: Tue 11 Nov 2025 05:00:40 +0000
Manifest this update: Tue 11 Nov 2025 05:00:40 +0000
Manifest next update: Wed 12 Nov 2025 05:00:40 +0000
Files and hashes: 1: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: r2/wYzKJIqxlSshudLwns24hxUUa2ctQW7xNnhBpfKw=)
2: YmG5FcsW3S43XyijT62zmWMd610.roa (hash: Sh1sRBIDqrknsDPBNOeRI3CSuT41xnHIPduRy76n3aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:9a:c8:66:a0:07:c2:e8:95:51:7c:be:10:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: Nov 11 05:00:40 2025 GMT
Not After : Nov 12 05:00:40 2025 GMT
Subject: CN=6db964505eadc3a90f662b477571ae7983c729b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:ad:8f:11:4b:ae:83:15:47:e9:0a:45:e8:
47:e5:cd:08:39:5d:ec:ea:ca:12:f0:ed:6a:a7:5d:
ae:08:3c:e6:90:b9:33:b2:14:cb:5e:0f:de:b0:48:
b4:d6:c6:38:b4:0b:93:15:c3:55:9d:ba:aa:af:8e:
6e:9e:22:f3:2a:54:7c:2b:4d:0e:c9:b0:81:60:68:
ea:b5:8f:ff:68:5e:dc:ea:06:b1:c0:fd:01:81:85:
3b:19:1e:e6:5a:cc:80:9e:0d:46:63:56:52:79:2c:
3d:85:16:c8:0e:d9:e1:d3:eb:3b:98:f7:09:7f:7c:
f1:a0:1f:08:04:62:b8:70:a5:76:e0:57:6e:1c:b5:
27:01:34:9f:42:6f:41:b1:b7:81:e8:16:44:23:09:
ae:20:45:2b:92:99:69:d6:7c:e1:b0:9c:99:c9:e4:
9b:f9:2e:34:c1:08:df:a7:07:cf:a4:90:1e:bb:e1:
da:a1:8a:df:99:ab:8c:ac:7f:06:da:94:16:27:94:
ca:3f:90:78:44:29:57:fc:3d:b8:02:18:fb:5a:2a:
0f:3e:42:9f:bb:88:0a:24:92:95:22:50:6f:7b:be:
7e:31:11:f9:07:c5:60:2e:b1:95:c6:ed:5a:32:43:
a2:ed:64:b9:d6:38:b6:52:36:85:ee:2d:cb:48:15:
00:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B9:64:50:5E:AD:C3:A9:0F:66:2B:47:75:71:AE:79:83:C7:29:B6
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:98:73:cd:48:aa:b6:90:5e:c8:8d:fa:1e:ed:b2:ab:18:7a:
5d:72:99:66:49:89:31:32:d2:02:24:e6:0c:23:66:98:b4:9a:
30:5f:6f:fa:a6:44:06:32:06:bd:0f:f4:38:de:e5:ed:54:50:
4d:7d:96:48:11:b2:b7:60:7d:5c:16:94:8e:10:da:84:cb:60:
1f:4c:12:27:1f:e6:5f:a5:49:36:1d:6b:9c:00:9c:e2:24:9d:
b0:4b:a9:e9:e0:b3:13:13:a2:fe:9d:8f:66:bd:6f:ec:3b:7f:
94:50:3c:18:67:e9:35:c0:0a:00:b9:42:1f:e0:8f:7d:9a:87:
a3:f6:51:4e:31:9d:9e:29:b1:a8:eb:60:1c:9a:12:0b:2c:be:
33:56:0b:0e:fa:cd:97:b0:e0:81:24:70:42:15:16:a0:e1:11:
71:97:d9:7a:8e:ed:0d:25:96:c9:a0:5b:c3:33:8d:36:ba:d9:
09:39:7f:03:11:75:3c:12:44:cb:81:9d:25:0b:69:ca:b0:7d:
b2:e5:35:71:58:83:c3:a0:75:95:5a:01:26:4a:6b:ff:0b:36:
84:aa:a7:63:72:e8:40:ab:d5:ea:32:0e:74:27:ae:79:88:a6:
3e:bf:50:b3:7b:dd:47:7c:58:88:1b:da:c1:22:eb:9d:1a:d4:
9c:e6:e6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:55 2025 by rpki-client