Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
File: JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json)
Hash identifier: lksSoAnWA36d0QVje/MGSSUAA+ZG/8fBb1wPIluJsn8=
Subject key identifier: BF:25:14:0C:A8:0F:BA:3A:9C:27:4B:0D:72:17:90:74:A7:50:A0:D6
Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
Certificate issuer: /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Certificate serial: 019A240A456E08F8B58D0913AAA77453E56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
Manifest number: 017F
Signing time: Mon 27 Oct 2025 05:00:43 +0000
Manifest this update: Mon 27 Oct 2025 05:00:43 +0000
Manifest next update: Tue 28 Oct 2025 05:00:43 +0000
Files and hashes: 1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: XZDj1ya5VII7NBmnEbiSr7cLaeBGdhdGejjgBfcJe/0=)
2: tSgs3XUIsHh7rxyC6KI4dfFcjtI.roa (hash: aP/8w3eyX9ywh3RSZ1FyfaCe/EGfUTND1DeYuxP49kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:0a:45:6e:08:f8:b5:8d:09:13:aa:a7:74:53:e5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Validity
Not Before: Oct 27 05:00:43 2025 GMT
Not After : Oct 28 05:00:43 2025 GMT
Subject: CN=bf25140ca80fba3a9c274b0d72179074a750a0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:8b:00:30:db:96:16:d4:10:3b:df:83:50:
0a:d1:4f:66:76:4b:a3:84:1d:fc:7f:16:7c:76:b9:
88:75:20:b6:26:55:68:57:f1:64:6d:f2:34:c7:90:
9d:f4:0a:c1:bd:2f:4c:42:ac:f6:25:19:5a:6f:cd:
31:62:3a:94:a4:2c:b0:a6:54:0c:aa:74:8f:27:c4:
cd:35:34:a7:0e:67:ea:b5:da:98:94:c4:6c:ee:6f:
0a:dd:ba:ab:97:35:11:17:68:90:1c:5e:f7:e3:c1:
ba:a9:f0:54:ea:77:21:64:8c:f9:ae:fe:45:99:ff:
6f:3d:98:93:e2:67:bb:40:68:66:ca:59:2f:16:95:
9a:0f:f7:41:f0:f3:c4:d1:d6:bf:46:ad:7f:08:71:
dd:1e:bd:5a:ab:30:0a:6f:ee:8f:10:1b:cf:26:97:
ed:1e:f6:ef:32:a5:80:f6:76:cd:a9:20:de:fa:9c:
5c:54:b7:9b:f5:1a:1a:51:d1:70:4b:d0:3d:60:49:
e4:e7:7f:ba:01:71:5f:b8:a6:1a:4a:f3:63:ec:41:
68:71:a6:e7:3a:e5:ba:a7:07:d0:79:5d:ad:cd:88:
4d:42:50:0d:d9:59:40:b6:3d:72:99:aa:03:e3:41:
da:58:35:80:01:eb:46:27:6f:bc:1e:e7:55:81:d1:
fa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:25:14:0C:A8:0F:BA:3A:9C:27:4B:0D:72:17:90:74:A7:50:A0:D6
X509v3 Authority Key Identifier:
keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fe:59:ef:d2:aa:c8:0f:24:1a:42:d8:6e:b3:a9:47:e8:ac:
a0:65:3b:c6:81:ce:09:93:db:50:42:12:9d:56:80:cd:a3:5c:
58:0f:67:81:9f:fd:aa:c4:11:47:10:3a:a7:f9:d1:74:29:67:
06:fe:bf:6f:c9:11:c6:8b:b2:61:c4:f1:d4:f7:df:e1:5a:58:
64:ef:ec:39:9c:94:ea:f8:13:2d:1a:db:5a:86:eb:5f:61:b7:
3c:4d:a4:3b:b7:79:1e:2b:df:11:06:f7:b6:40:de:0c:8f:a3:
d2:7e:62:26:fa:d8:b7:5d:f5:d1:e5:01:bd:d1:07:1e:b3:1d:
e6:42:29:ea:79:0a:56:22:e6:ae:d3:5b:1a:5d:e6:b7:5d:36:
63:91:68:a4:37:00:98:72:43:54:89:34:18:2d:93:b9:82:fe:
e6:31:37:3a:37:ce:2f:94:ca:a0:d2:29:65:33:db:c9:17:53:
37:dc:5e:0d:3a:c1:5e:cc:03:96:2b:c9:56:f7:5f:9c:50:cf:
ae:24:7a:5b:62:48:ae:61:94:e6:22:62:6d:12:0e:da:ae:92:
fd:e4:3d:3e:50:fa:12:76:26:91:3e:ab:70:a3:f8:83:97:6d:
b2:77:8c:b3:a9:85:18:a2:19:77:6b:10:56:99:82:27:83:a0:
fb:b2:2c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:06:04 2025 by rpki-client