Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File: J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier: RbwXoQLhNJw2q1vKdG+wGNqkmTl7tUS2oPQTwA9wSGI=
Subject key identifier: 0E:82:85:38:BB:68:10:9C:D7:9F:72:19:B2:CB:D8:6E:0D:B6:CC:D1
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer: /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial: 019A0D4C634B35030616F06539CEFDC73DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number: 1363
Signing time: Wed 22 Oct 2025 19:01:41 +0000
Manifest this update: Wed 22 Oct 2025 19:01:41 +0000
Manifest next update: Thu 23 Oct 2025 19:01:41 +0000
Files and hashes: 1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: jOIM/IGTPj2ElNkefG+5DCYfOwyXci2tpdnHw2dremw=)
2: M2Kelg9WxvDQBMzJqioPXlZdWcE.roa (hash: mQA6DzGnOtrnPFm8tdzPvg5lmx/E+CRmFPMNFXsiBjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0d:4c:63:4b:35:03:06:16:f0:65:39:ce:fd:c7:3d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
Validity
Not Before: Oct 22 19:01:41 2025 GMT
Not After : Oct 23 19:01:41 2025 GMT
Subject: CN=0e828538bb68109cd79f7219b2cbd86e0db6ccd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6e:c1:4d:02:b3:b2:f7:f8:b9:6e:f9:9c:b4:
f2:08:05:aa:23:e6:ea:6f:52:4c:bf:42:a7:87:85:
a0:56:42:1c:2e:c3:bc:f9:f3:a9:9c:0e:5f:eb:82:
df:10:48:ee:21:d2:e5:19:b9:ae:a4:34:98:21:80:
5e:25:51:5a:e9:ae:ff:f6:aa:7e:d4:6e:04:7d:f5:
5d:e3:ed:48:66:ad:e2:c0:5d:1c:7f:cf:7f:51:9f:
9a:55:22:b2:97:4b:70:e8:ab:4f:e6:5e:a7:de:06:
da:81:cb:52:05:9b:8f:4b:65:f1:8a:a7:c1:a3:ad:
58:1f:d6:4e:c3:81:4e:17:66:29:01:f4:71:7e:82:
62:2f:fa:b4:7b:8a:b4:6a:86:70:b5:a9:ba:17:6a:
06:2f:48:1f:6b:04:36:05:e6:f6:c2:22:04:2b:2c:
93:60:bd:1e:41:e9:33:9f:30:03:78:2d:25:ac:f9:
8d:01:c9:97:33:89:03:38:ba:ef:f2:c0:de:59:a0:
62:59:19:a6:d7:f6:e1:cc:fc:75:76:c1:1f:b5:b2:
e0:d6:cb:9c:d0:29:02:06:fa:9e:4d:f1:79:a9:8e:
dc:56:cd:05:5c:e5:f6:f8:50:97:33:46:8e:da:7f:
22:df:df:1c:09:ad:b3:55:c5:b3:1d:0a:e7:3b:5e:
cd:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:82:85:38:BB:68:10:9C:D7:9F:72:19:B2:CB:D8:6E:0D:B6:CC:D1
X509v3 Authority Key Identifier:
keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:09:49:95:9d:5e:c7:7a:64:90:b4:f3:c9:77:b9:0a:78:97:
94:54:ec:e1:a7:84:ec:fd:70:ec:51:2a:95:14:75:38:9f:bc:
90:7e:66:8d:de:35:b3:42:c7:ea:b5:f7:83:39:01:a8:be:5e:
ac:28:b3:37:97:66:c1:82:f5:f1:5c:12:3b:25:9b:99:44:fa:
1a:e9:39:2e:2c:27:fb:c7:32:3c:35:9e:14:63:13:9a:98:9c:
44:78:53:42:3f:d3:b2:19:f1:06:8f:9c:82:12:cb:d6:17:e8:
1d:4f:9f:7b:68:8e:b2:d2:5b:66:f9:d0:d8:bf:d9:a3:4b:60:
52:8f:81:16:3a:36:31:dd:f6:25:65:45:15:40:37:ce:74:d2:
c2:ec:31:02:a9:72:46:c0:e7:71:ae:81:6e:dc:36:08:a5:a1:
87:8f:4c:92:dc:32:0b:5d:60:e3:4a:d4:00:51:69:ec:23:30:
71:b0:80:2a:23:d5:d8:a5:22:87:54:71:1f:c0:64:a8:95:ea:
a1:cd:2f:a3:f7:e2:cf:b9:13:da:4a:02:e1:c0:62:fb:a8:40:
5c:ba:0c:8b:23:c0:88:a8:af:9c:aa:41:7e:c2:3e:2d:d4:ca:
50:a4:31:60:98:3c:b1:b5:e9:89:e7:c5:3a:93:9f:5c:9c:5c:
04:91:8c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 05:23:24 2025 by rpki-client