Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
File: J1qrffuxUqZGrfMnOzGqXd5kod8.mft (raw, json)
Hash identifier: kURdRmn6Qcg5VYWafjSkpS4LkzdTCKnlETimGItfcAI=
Subject key identifier: EA:BA:AE:0A:05:A7:3D:19:9C:C6:8A:00:E4:B0:C5:0E:40:76:AA:D4
Authority key identifier: 27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF
Certificate issuer: /CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
Certificate serial: 019A28F95BAA7845089D47A147DEAE669F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
Manifest number: 0D28
Signing time: Tue 28 Oct 2025 04:00:21 +0000
Manifest this update: Tue 28 Oct 2025 04:00:21 +0000
Manifest next update: Wed 29 Oct 2025 04:00:21 +0000
Files and hashes: 1: J1qrffuxUqZGrfMnOzGqXd5kod8.crl (hash: GKu9XhWkxPbbt6j2e7XK6khR4SbiFkqMuEgE0NF5nCo=)
2: _BsLA-Yq0byQhwlqjwrfokOt_ao.roa (hash: nUVtATfYPG2WeBzHlW5fiB+hmlpSz5V9uTVR1MUQR8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:5b:aa:78:45:08:9d:47:a1:47:de:ae:66:9f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
Validity
Not Before: Oct 28 04:00:21 2025 GMT
Not After : Oct 29 04:00:21 2025 GMT
Subject: CN=eabaae0a05a73d199cc68a00e4b0c50e4076aad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:94:52:10:11:a7:e3:ca:b1:db:aa:02:6b:
c1:73:40:f4:f1:01:91:f9:9a:74:c7:3d:07:d0:ae:
54:5a:84:96:6b:ad:d9:b5:a3:e5:44:e1:e3:19:ca:
1b:13:5b:81:f5:14:bb:96:46:cf:e4:8b:f7:10:31:
83:3d:0a:d1:d2:a1:61:20:54:1c:3b:d3:a9:ee:8d:
07:14:be:7f:dd:a9:8b:95:9e:fc:2d:0f:b0:9b:50:
54:57:88:09:d4:1a:54:c7:44:6c:fb:4e:90:e4:75:
0c:58:50:78:2e:a0:3e:cf:da:0b:b2:c1:8a:bf:ba:
1b:97:1e:0a:ba:de:9d:e3:3c:7d:c1:b0:6f:a6:5f:
e5:1a:93:29:bb:dc:86:fb:ab:77:a0:14:b6:8d:cb:
af:32:58:e6:97:26:c7:a7:01:06:8b:0e:1f:0a:42:
a7:68:2a:6d:a2:3a:4a:64:8a:2a:24:64:77:a4:5a:
b2:8f:fa:5e:dc:da:a6:ac:32:2b:69:5a:e5:05:e5:
6a:aa:7f:f8:38:d1:28:c9:d9:4a:e4:e6:bb:95:db:
dc:9d:16:f9:c3:fc:4d:34:53:d4:b2:4b:48:42:ca:
63:83:15:31:81:69:ca:10:ed:e9:10:dc:db:5b:0d:
df:cc:86:1b:96:e0:9c:3a:2c:f2:56:00:26:a4:a8:
96:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:BA:AE:0A:05:A7:3D:19:9C:C6:8A:00:E4:B0:C5:0E:40:76:AA:D4
X509v3 Authority Key Identifier:
keyid:27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:67:54:c8:99:f7:0b:d4:dc:38:ab:e6:13:c3:3d:36:10:28:
7e:d6:20:98:6e:13:c4:31:51:89:45:46:f5:af:58:b4:81:ea:
2f:e6:a2:d3:1b:ae:07:08:8c:52:0a:a1:be:57:ec:27:ac:cb:
89:36:92:d0:21:4e:f6:d6:b4:17:c6:57:d9:6d:03:9f:fc:28:
3b:40:94:69:17:58:12:33:67:7c:d7:62:a9:43:5d:b6:21:d8:
08:a5:99:5f:41:cb:f8:33:e3:ba:da:5a:27:28:d4:21:f5:08:
dc:5d:59:50:28:21:16:41:b6:1f:3a:bf:66:03:33:e3:7e:1e:
b1:6a:7c:00:6c:bb:42:93:23:44:75:dc:3e:f1:35:83:2a:34:
cb:d8:55:c7:0f:26:19:f8:4d:7f:7c:f2:c9:e0:a7:01:8b:eb:
de:34:65:2e:b8:7a:74:2b:71:4d:a7:00:17:d2:70:c5:e1:20:
4e:12:05:dc:67:6b:72:5c:4e:db:3e:60:a3:1c:7e:9e:ad:37:
1b:b8:16:4b:c2:ad:6a:9f:46:7d:da:57:b8:67:14:cd:a5:29:
0a:4b:69:39:de:23:68:81:f5:7d:07:db:1b:1d:37:0b:8e:82:
d6:ae:91:c3:a1:fc:0e:25:88:42:08:6c:f5:e4:5a:10:9a:e5:
6b:60:67:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:09:13 2025 by rpki-client