Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
File: J4dqqRe20B2U_yVmKwj7IT8P570.mft (raw, json)
Hash identifier: Mr4s26IFY/IGna2VDI6JtQUxRPa67X/w2UtY+OTfONI=
Subject key identifier: 7E:1E:C8:CB:88:DA:B5:8B:93:B3:0C:60:ED:8A:F5:CC:86:64:DC:20
Authority key identifier: 27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
Certificate issuer: /CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Certificate serial: 019A71B84F4BA518385056D944C7B6DDBDA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
Manifest number: 10AB
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: J4dqqRe20B2U_yVmKwj7IT8P570.crl (hash: cIIHYWnhRv67prHOYTC1a4eLl6XNTuHGRcMdy1KrPmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4f:4b:a5:18:38:50:56:d9:44:c7:b6:dd:bd:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=7e1ec8cb88dab58b93b30c60ed8af5cc8664dc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f0:82:bc:09:7f:c3:1f:c8:d5:f0:71:04:4c:
f3:1d:58:bc:23:39:45:44:41:7f:70:c6:d1:86:57:
bc:da:47:21:42:44:a9:a7:4c:a6:11:db:ee:04:e2:
4b:f4:34:2d:c7:9b:55:12:77:fe:2a:e5:c7:f7:64:
1e:09:33:ce:b3:d3:f4:89:46:2f:11:05:59:08:d2:
89:00:4a:7f:06:55:a7:4d:f7:f1:c0:f7:d8:ff:2c:
20:f8:92:4a:a3:ca:63:be:3c:d8:44:8c:23:49:05:
75:cb:fe:66:4e:6e:00:ce:23:d8:07:de:90:56:cd:
28:19:b0:2a:fd:a1:f1:60:38:f5:f8:2a:4d:fe:ae:
c4:86:34:11:45:11:2e:b7:d4:95:49:ed:26:b3:ca:
b1:b3:28:be:25:3e:8f:88:be:5f:04:57:5b:0c:53:
ae:80:f8:08:39:a3:bb:e1:09:e7:fc:d4:e8:98:65:
90:35:ea:2f:ba:85:c0:be:53:32:aa:09:20:35:58:
b0:a8:56:96:b5:b3:f9:c2:57:ce:61:b3:49:23:1f:
31:38:7d:c0:3d:14:b0:af:e7:6e:e7:58:31:de:37:
fb:43:ff:c9:6c:b5:23:c2:e4:74:9d:0b:ca:5f:51:
70:38:ab:76:a4:1d:06:97:29:7d:3d:6e:2d:45:81:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1E:C8:CB:88:DA:B5:8B:93:B3:0C:60:ED:8A:F5:CC:86:64:DC:20
X509v3 Authority Key Identifier:
keyid:27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:bb:a9:f9:93:63:b8:a4:68:c0:da:80:b5:f2:7e:60:a1:ee:
a5:3c:f6:da:fe:27:3f:71:18:cd:42:ef:d1:6c:37:e2:f1:e0:
7e:f0:5c:7a:3f:64:74:4c:d9:7f:f2:b8:99:df:cb:a1:7b:50:
b9:ba:63:20:d4:d1:43:92:2a:5f:27:c0:80:67:ed:48:65:2f:
e6:4b:b3:d4:21:9b:c6:9c:51:d2:b1:b2:1c:82:09:c5:67:6d:
dc:80:93:e4:dd:6a:32:4a:17:54:af:38:d5:d0:7b:ba:57:a9:
1a:33:c5:55:78:43:82:2a:d1:12:7b:ad:3d:78:3d:a1:6b:44:
56:84:59:3f:81:69:c0:fb:2d:8c:fe:5a:02:5b:ef:b4:9f:46:
67:8c:b7:73:fd:8f:c5:40:4a:b3:74:63:ff:b4:44:be:dd:4c:
32:15:e5:e6:85:40:21:03:ab:d2:f0:43:f6:06:ac:b5:68:53:
3f:e8:22:69:82:6f:52:a2:b8:e4:4c:30:af:6c:7e:7f:f9:d2:
be:b2:cf:15:52:71:b7:59:ce:b6:2a:bf:98:06:7b:de:cf:27:
43:13:fe:43:96:50:c0:d1:59:95:58:18:6f:46:a8:0f:66:ce:
4c:56:da:f7:88:bb:df:3f:01:6e:d8:8d:c0:d2:35:e3:2a:ee:
88:6b:b1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:56 2025 by rpki-client