Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
File: J97R2QxNUraHECO8cSltCKmMTNs.mft (raw, json)
Hash identifier: hMd20bQXbf+8EIduivGvoTobEN18FjdefKDggTACPh0=
Subject key identifier: 37:CF:AA:3D:02:3A:12:79:F3:E6:A7:87:87:CF:FA:23:A6:54:1A:B8
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Certificate issuer: /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial: 019A01B5786A19B7FF28C8046FF0D07031BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
Manifest number: 0CA6
Signing time: Mon 20 Oct 2025 13:01:01 +0000
Manifest this update: Mon 20 Oct 2025 13:01:01 +0000
Manifest next update: Tue 21 Oct 2025 13:01:01 +0000
Files and hashes: 1: J97R2QxNUraHECO8cSltCKmMTNs.crl (hash: i9lKPgKnqJxRROX7xNjV0PLiCmiAFOpkNCcg/EnpHrk=)
2: X3QMt1fmV4wTFAQPHZ4zsROv8I0.roa (hash: Whnqs1Wwvsp0OIKAaEg9kGiqf108NquKFQHaJWKxLGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:78:6a:19:b7:ff:28:c8:04:6f:f0:d0:70:31:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Validity
Not Before: Oct 20 13:01:01 2025 GMT
Not After : Oct 21 13:01:01 2025 GMT
Subject: CN=37cfaa3d023a1279f3e6a78787cffa23a6541ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:5f:e7:8a:ae:d2:4b:04:0b:3d:22:1f:99:
4a:3c:53:39:f9:aa:18:34:67:d7:fc:3b:b4:86:50:
cb:8e:aa:78:68:50:7d:df:08:27:91:23:46:5d:16:
ec:23:dc:2f:58:1b:86:a4:90:2b:5c:1d:9d:34:80:
21:a1:f9:8f:61:1e:f8:b2:3a:d2:16:da:ae:b8:6e:
2e:aa:23:40:27:e0:14:92:08:06:ef:d7:b7:17:b1:
cd:3e:91:0e:43:3a:f5:71:2e:23:88:bc:35:6a:eb:
e2:e4:e0:6d:5b:12:e4:9c:46:5f:49:04:1d:04:2d:
79:b0:3d:a6:73:ee:63:39:03:80:0a:0c:e3:9a:37:
76:39:f0:1d:97:b4:5a:9b:25:40:e7:a1:b9:2a:a8:
19:4d:5f:dd:8f:0b:c3:4a:59:66:c7:2c:34:cf:17:
25:4c:8d:bf:a0:e0:fe:eb:2d:43:b5:60:4e:44:50:
17:79:61:b1:e8:7b:68:74:19:8c:b7:7c:a8:f5:73:
df:14:56:85:5c:aa:f6:f2:5b:4f:67:a2:56:c5:47:
4d:be:8c:4f:b1:59:61:d3:bb:7a:e5:0b:cd:f3:f1:
0d:4e:83:10:dd:23:98:ef:c0:65:ff:24:5a:e3:4a:
ff:dc:37:17:73:b1:2f:f0:4e:f4:48:0a:1d:4b:97:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CF:AA:3D:02:3A:12:79:F3:E6:A7:87:87:CF:FA:23:A6:54:1A:B8
X509v3 Authority Key Identifier:
keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:8e:9f:78:b0:8d:2b:d0:01:24:1b:2b:ca:0b:ec:b8:ae:7d:
d0:1d:d4:e6:2e:bc:7f:e7:7b:93:28:99:9c:92:73:0e:a0:cd:
41:99:17:fc:84:97:09:a2:cd:aa:95:c1:7f:c6:0a:38:e4:07:
2d:d1:e0:b2:5f:7b:ac:f2:e6:95:4c:74:db:b7:ec:f0:89:71:
f9:46:56:87:78:f7:d0:ca:ba:c3:60:6e:51:08:8c:3c:fa:44:
34:40:c3:13:cf:0e:24:0f:87:a2:70:89:34:f5:52:a0:2c:a1:
d4:27:fa:7a:bc:7b:56:fb:10:a3:51:9d:72:95:6e:ba:f2:b8:
ae:49:2a:0a:89:6a:34:7b:66:27:34:db:11:3c:50:b5:d1:f1:
e6:f5:d5:54:1a:95:ea:38:0a:67:90:84:9b:3f:47:5a:79:ea:
32:47:9a:7a:98:46:2f:b7:dc:fe:15:b1:5d:c4:1c:b9:54:22:
bd:f5:e7:8d:34:27:45:40:29:b0:64:3b:20:1e:de:1c:2b:7e:
27:59:28:50:a1:ad:fe:9e:be:44:f1:a9:0e:01:bc:79:fd:be:
f6:92:71:88:39:3a:80:ff:c6:f6:32:92:af:d5:15:68:54:db:
f1:4c:03:4e:72:c3:73:00:41:16:5f:7e:bc:23:39:df:dd:51:
8a:ae:c6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:24:02 2025 by rpki-client