Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File: J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier: P9TJ3B2ntj4LuBxyV5yc5UBtlhemqHp4hLKXQG7RvPI=
Subject key identifier: DB:6D:2A:AA:07:CF:72:AA:2E:DB:5C:6A:6C:14:2E:CE:B4:92:29:9D
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer: /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial: 019A22899E2636C903475093EABC6EBF5D11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number: 0DD7
Signing time: Sun 26 Oct 2025 22:00:35 +0000
Manifest this update: Sun 26 Oct 2025 22:00:35 +0000
Manifest next update: Mon 27 Oct 2025 22:00:35 +0000
Files and hashes: 1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: xRLWF1h7QKJR2j8jQTVsJheVH3XV8L8H8Hncwg7lzKU=)
2: UEg2a8frOwQJ_ocv6mZt898VwKc.roa (hash: HhDZ6hinLTKa6qeDqW6QogtlJ6a4udPeZaa3rESZ/rM=)
3: zUk84pMkBH7qM-5eyE2RTVXesY8.roa (hash: 1Rye/GoMkKTXa8JBFflyaNlKfqeLYK+b0R1zK9MVT4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:9e:26:36:c9:03:47:50:93:ea:bc:6e:bf:5d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Validity
Not Before: Oct 26 22:00:35 2025 GMT
Not After : Oct 27 22:00:35 2025 GMT
Subject: CN=db6d2aaa07cf72aa2edb5c6a6c142eceb492299d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:17:19:fd:31:3d:59:8b:98:a4:15:cb:04:
6f:bc:fe:19:67:02:58:94:38:fc:8f:19:b4:f6:ba:
f0:c0:6c:f2:f5:30:0a:23:4e:56:df:ae:cf:cf:f4:
4e:af:fe:73:56:38:36:27:09:2d:ca:bf:07:97:d9:
ca:70:b7:2e:86:79:7c:ee:7a:38:66:23:8e:b2:64:
21:9e:a6:0c:3f:4f:5b:14:8a:44:fe:f3:d6:ef:e7:
46:05:ac:95:57:32:8e:1b:28:bb:1e:2b:80:04:d0:
d5:3b:f1:6a:07:52:42:2d:c3:af:4c:97:29:23:f5:
5b:21:16:f9:36:79:8f:41:09:4b:ac:d6:01:7a:cd:
81:90:3d:16:82:21:b2:cc:d3:d1:d7:a5:75:1d:b4:
d5:fb:db:d6:2b:a3:70:aa:75:28:d3:ba:ac:c8:8d:
4c:c1:fc:74:2f:73:55:a7:3a:b0:9e:0a:5c:79:19:
e6:53:e2:c8:df:2e:e4:c9:63:c6:d4:63:34:a2:63:
36:26:21:38:ab:a3:45:a1:31:2a:c3:f9:b0:38:07:
87:6f:8a:ba:08:36:46:a1:f3:e2:92:20:3c:6f:3e:
69:29:25:6f:9c:c2:25:03:aa:6b:89:6a:b2:e4:c5:
05:34:5e:56:d6:fa:03:0f:57:43:a3:78:78:0c:7a:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6D:2A:AA:07:CF:72:AA:2E:DB:5C:6A:6C:14:2E:CE:B4:92:29:9D
X509v3 Authority Key Identifier:
keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:28:c9:b1:c9:d7:b7:4d:6d:ab:a4:4c:58:29:8b:de:dd:d7:
a4:94:3f:fc:87:f7:5c:73:2c:4c:75:10:b2:b5:3a:e6:15:00:
6e:97:d5:47:8e:96:dd:ef:56:75:44:7f:fa:0f:84:d8:e9:8a:
22:72:12:57:88:1e:fb:a9:c9:e1:64:3f:3a:93:5d:72:e7:bc:
c0:44:dc:88:09:84:e4:f1:13:27:72:07:fb:fa:e7:64:c7:68:
20:e9:0e:f3:f9:3a:91:26:96:30:ed:70:9e:1c:7b:fd:e0:38:
3d:8a:78:cf:f8:8a:65:6d:01:cd:9e:55:ef:d9:15:63:bb:4c:
69:ae:67:e2:38:10:aa:ba:b6:80:10:74:6b:ce:24:7d:c4:40:
56:7c:e6:fd:27:46:fd:9e:24:3c:e0:33:fb:c3:91:16:e5:79:
9c:b1:a5:51:5f:b3:62:96:4e:60:32:23:67:ea:e4:d6:5b:b2:
4d:11:d2:c2:26:7d:ad:d0:27:9e:72:5e:d6:9d:76:c3:b2:20:
da:30:ec:a8:d0:2a:10:27:09:da:71:02:b6:d9:f8:00:64:61:
ec:37:f8:a8:16:df:8d:bd:9f:b3:41:94:79:24:38:bf:2d:ef:
d7:9a:4e:16:8c:22:97:fa:63:49:d6:58:1b:6f:37:62:dd:e9:
62:42:cb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:41:35 2025 by rpki-client