Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
File: J_8gRAummKTcBDm8F5-zOj7hzJU.mft (raw, json)
Hash identifier: TOJdYD6AHrMjP3txyWvvJRG0IrogY23fc6zP6d1MySE=
Subject key identifier: 06:1A:73:55:51:CD:84:C9:80:CF:2D:A0:A0:23:8B:AE:27:EC:B1:41
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial: 019A71808B7A497D5FF669E28BCD21605193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
Manifest number: 0DF5
Signing time: Tue 11 Nov 2025 06:00:40 +0000
Manifest this update: Tue 11 Nov 2025 06:00:40 +0000
Manifest next update: Wed 12 Nov 2025 06:00:40 +0000
Files and hashes: 1: J_8gRAummKTcBDm8F5-zOj7hzJU.crl (hash: 6hqylcjFpR87cJ/ba2FyC3MFR8DwqMBUDhTbs4N59CU=)
2: _tUXooY9b06bDKDjgo1P9zjilGI.roa (hash: eyE2Sp1NPUfSOv01mHhVH2OIahlIo+oZSctInWb+NT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8b:7a:49:7d:5f:f6:69:e2:8b:cd:21:60:51:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Validity
Not Before: Nov 11 06:00:40 2025 GMT
Not After : Nov 12 06:00:40 2025 GMT
Subject: CN=061a735551cd84c980cf2da0a0238bae27ecb141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:18:8b:b1:b9:ae:86:22:95:a5:88:ac:43:f4:
e4:53:be:7f:f1:57:30:33:79:12:30:48:fe:ff:22:
73:7c:64:e3:a6:91:7a:58:35:9f:07:8f:6a:45:f4:
bd:b4:f1:e9:69:0b:45:87:c8:30:0a:62:5d:b7:81:
7a:e7:c2:c7:0a:b6:09:0b:e4:a8:ff:3b:d0:40:7e:
66:be:ef:e7:73:2c:e2:45:7e:3a:72:1e:6c:d8:82:
12:73:1f:5a:6d:1b:4a:1b:a5:b9:b6:a6:17:01:a2:
2b:c3:bf:1e:26:34:50:a2:d8:29:6c:13:f1:2d:d9:
69:32:92:fe:dc:1d:74:1d:64:28:62:dd:39:33:5f:
67:07:43:0a:ad:16:52:22:eb:e2:12:fa:60:f8:b5:
2f:73:bb:ce:ea:c3:f7:b1:95:37:d7:70:73:a2:13:
54:2d:03:48:10:30:81:f1:8c:2a:73:af:e4:71:35:
63:6d:04:ca:2b:9d:c6:ae:09:02:b8:a1:23:a0:07:
0a:6b:6c:13:47:9a:15:61:af:91:4a:1a:92:b9:24:
52:cd:4e:75:09:ef:7b:02:0b:c0:62:8d:95:d0:90:
bc:d4:28:8f:15:0f:f0:9a:24:60:6e:15:73:3f:a0:
90:cd:50:86:fd:b7:7a:3b:b4:25:92:8a:08:4e:ca:
9d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1A:73:55:51:CD:84:C9:80:CF:2D:A0:A0:23:8B:AE:27:EC:B1:41
X509v3 Authority Key Identifier:
keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:98:d5:b7:49:fe:5f:8f:fd:18:99:b5:96:c2:f3:fe:cf:1d:
29:ae:bd:6e:27:b7:65:bb:48:64:2d:51:f1:04:ac:d0:24:fe:
59:76:2f:18:ff:cb:6b:ad:99:75:20:30:52:63:c8:4b:4c:ea:
bf:bc:51:6e:d1:9e:c4:5e:aa:55:f9:c8:0b:3a:13:e5:5f:44:
f5:bf:b6:7a:01:2e:5d:9f:f7:a9:12:65:8b:c8:ac:5f:79:5f:
52:ad:20:f0:5e:65:4a:4d:b0:63:09:e7:cf:b6:99:41:0d:fc:
8d:61:a3:a9:c9:94:5b:d8:ac:41:f3:2f:21:e9:6d:8f:a5:42:
6d:f9:55:18:6e:84:a5:11:9d:55:02:ab:85:61:77:f1:45:b4:
5f:a2:d2:c9:07:7a:8a:bb:c2:63:8c:55:ae:75:f7:18:a0:58:
7d:5a:02:dd:fa:7b:c5:8f:f0:4b:e3:65:20:a9:85:6d:25:01:
48:c8:a1:a2:23:77:a3:8e:03:80:64:69:00:24:25:ea:4b:ca:
16:aa:de:fc:37:b0:c2:41:b8:10:c7:aa:b8:b6:c9:9b:eb:7f:
c6:df:42:08:9f:98:18:7f:07:81:a2:53:dc:09:2e:57:05:7d:
e0:41:a2:6b:c2:af:4a:ac:01:f8:42:5b:cd:51:7d:fd:3b:05:
63:fc:34:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:51 2025 by rpki-client