Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: 1ACZ2AT7Hg9Paux2HqjSbUlR/Xrr6+ACoZg61vr7v+E=
Subject key identifier: 4F:BF:00:9C:B7:FF:67:F4:3F:77:D1:13:CD:36:C8:5A:EF:90:80:75
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 019A4F2B7C968AF89B96A33E190D6F454ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 14:00:41 +0000
Manifest this update: Tue 04 Nov 2025 14:00:41 +0000
Manifest next update: Wed 05 Nov 2025 14:00:41 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: 3Zxjg2K+eHUpRsXf9FNGfCGI9g1WgeScf1aoTlDqnpI=)
2: UimTjYOP0EzrCaiSFBeZrUyW0Nc.roa (hash: ICMmUQQ3EZmWfRi2Atl6bpgSoSc4L6nW+n1fJyzn1Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:7c:96:8a:f8:9b:96:a3:3e:19:0d:6f:45:4e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Nov 4 14:00:41 2025 GMT
Not After : Nov 5 14:00:41 2025 GMT
Subject: CN=4fbf009cb7ff67f43f77d113cd36c85aef908075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:fa:bc:ec:73:f3:a8:ac:a0:ba:7c:04:00:
34:ff:a6:cb:63:85:85:d7:bf:0b:f3:f8:a4:b7:a9:
3b:f5:2c:26:f2:1d:93:16:58:69:74:13:82:52:f8:
6e:35:27:eb:52:75:23:7f:fe:b8:5b:66:30:6a:21:
70:7f:67:4c:3b:18:d5:19:cc:10:bf:bd:b6:5f:1a:
4f:ed:17:d1:cc:ff:11:82:dc:f1:34:67:25:0f:d3:
86:89:2f:c7:1a:49:f0:ae:78:4d:29:5b:5c:16:cf:
d3:94:44:a4:cd:40:a0:df:f5:b7:21:40:42:48:1f:
59:35:3b:89:3f:69:18:42:8b:4a:54:d3:82:39:82:
7d:9e:ba:45:dc:64:e7:6f:f9:fc:74:81:54:56:b2:
53:b1:a9:82:f3:49:99:18:eb:19:f3:b1:3d:2c:2c:
cc:8b:6e:8d:59:9a:c6:8a:36:05:8c:c9:27:c1:16:
e2:55:cb:32:0e:f0:1f:28:e2:9a:32:4f:3f:e8:5a:
24:70:1f:ec:ce:f1:0e:ad:aa:fc:43:de:84:f8:32:
f3:34:89:e6:b8:0e:60:e7:ac:5b:1c:65:19:46:be:
63:d0:03:fe:23:d6:4e:c8:e0:b5:03:0d:2c:68:25:
32:52:41:2b:8c:62:37:b5:29:d8:4e:91:82:77:b3:
f1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BF:00:9C:B7:FF:67:F4:3F:77:D1:13:CD:36:C8:5A:EF:90:80:75
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e5:06:25:3c:37:eb:51:95:35:00:95:a0:8b:53:3b:71:f4:
6d:7e:89:97:fa:9b:93:8b:96:ae:09:cd:71:42:f4:d3:a5:c2:
95:92:85:62:57:b4:af:f1:c2:f6:3d:9b:b9:03:0d:0d:74:12:
dd:7c:3b:25:57:be:3f:07:71:74:1b:c4:55:aa:aa:c2:37:6a:
59:5f:87:07:49:42:78:88:81:00:56:12:a7:4a:d7:ef:7c:c1:
bc:e6:cd:25:92:75:1e:58:ea:6a:f8:a5:08:2c:e3:b4:0c:dd:
cc:31:d8:f6:cf:0f:f8:1e:88:ab:d3:7a:0d:b6:96:71:d8:32:
81:50:df:70:82:8a:d5:21:c9:f6:d3:2e:cb:c0:ea:5c:60:a1:
05:e4:67:31:a3:69:12:80:06:47:67:ab:68:e2:87:00:24:88:
a4:51:5f:90:2e:12:99:ce:b4:79:c7:cf:f1:44:d6:fa:b5:e0:
04:ab:5b:fb:04:9b:a7:42:9f:18:b1:12:3a:5e:e9:9e:52:ea:
df:2e:47:ea:12:2f:fb:4f:44:34:0c:2e:21:38:1d:db:00:e7:
f5:d4:4f:04:51:d7:6d:dd:0e:e7:29:de:b4:53:13:bb:b1:df:
57:7f:08:96:ed:fd:90:6a:31:a5:c5:3c:2d:ec:3a:13:ca:7a:
40:0a:67:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:13:07 2025 by rpki-client