Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
File: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft (raw, json)
Hash identifier: 9C5G2ruHfnPijODPiORDNRpe0JiIyPQhiEqxsCoYEkg=
Subject key identifier: E3:87:72:57:1E:EF:F9:1B:E0:C0:A0:67:62:DD:22:5B:1D:E0:20:9E
Authority key identifier: 27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
Certificate issuer: /CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Certificate serial: 019A718098412C798F229A266068BCA5FC39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
Manifest number: 0184
Signing time: Tue 11 Nov 2025 06:00:44 +0000
Manifest this update: Tue 11 Nov 2025 06:00:44 +0000
Manifest next update: Wed 12 Nov 2025 06:00:44 +0000
Files and hashes: 1: 3GJ0bOfekp5L6arp0MI-w_XPimQ.roa (hash: 0lzM9+wo3VrPT3aYhPai/br06U/H49IVoIizC5oG8Xc=)
2: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl (hash: 8ZkGW0D93GaqhtWpbfzD+Ooh8IfW+kqYWUSiQ7uuGTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:98:41:2c:79:8f:22:9a:26:60:68:bc:a5:fc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Validity
Not Before: Nov 11 06:00:44 2025 GMT
Not After : Nov 12 06:00:44 2025 GMT
Subject: CN=e38772571eeff91be0c0a06762dd225b1de0209e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:72:e5:68:40:6f:0e:4f:3e:c0:fc:a2:1a:64:
08:47:50:be:66:1b:7c:3b:03:4f:80:7a:69:2c:81:
98:62:09:72:c3:6a:70:56:f2:3e:e5:ef:2a:2a:9a:
36:9c:f2:de:67:8f:03:ef:05:74:6d:48:c5:12:1f:
97:f1:71:97:2a:01:ea:e2:82:e8:90:76:0a:65:1c:
22:f0:ff:eb:62:78:a4:3e:f9:76:05:03:5c:e3:ab:
c0:34:66:20:7f:91:54:e3:00:37:84:79:c2:98:9a:
6d:74:12:5f:5c:d2:a2:bd:dc:1b:48:da:11:45:10:
51:ca:f5:91:2b:2e:0d:68:90:2c:b4:9d:2e:43:b9:
90:9b:85:cc:55:f7:d6:5e:86:5d:1a:66:a6:f7:26:
ed:f1:11:49:d6:0e:9c:01:96:df:48:06:f2:9a:3c:
15:47:2e:2e:52:b4:0d:a4:a7:b5:e6:d0:c7:3d:ea:
54:1a:23:8c:3c:17:49:23:32:ed:60:fd:7f:5b:f6:
10:e8:76:18:d6:7b:46:ed:06:31:54:dd:7a:83:91:
78:83:6e:63:c4:0f:b1:f8:67:5a:fc:f6:ba:00:a2:
ab:98:c5:ca:d2:a9:2a:03:12:2b:be:3b:0f:82:3a:
f6:d1:ad:34:ca:a5:fc:6f:38:9a:a3:af:9a:8e:64:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:87:72:57:1E:EF:F9:1B:E0:C0:A0:67:62:DD:22:5B:1D:E0:20:9E
X509v3 Authority Key Identifier:
keyid:27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ae:2f:9b:f1:ae:07:74:9f:4f:d6:09:ee:32:c5:c0:59:f9:
06:ad:76:78:2a:4b:97:7e:57:6b:2a:3c:b9:f5:27:a3:1b:f0:
c8:ca:03:f8:b7:9c:e5:2d:23:20:9e:20:18:58:ae:24:e5:a6:
e7:91:42:04:36:c7:7a:c9:bb:60:26:b9:f0:c4:c5:ba:ff:61:
99:70:d7:66:b3:43:43:38:be:28:d6:cd:ca:a9:b6:46:be:2a:
bc:3a:60:e3:9d:50:7e:98:c8:a5:ca:99:0c:e0:dc:37:8f:b3:
79:fc:57:ea:76:c8:96:51:55:96:7e:38:cb:68:b7:74:e7:4d:
bf:95:9f:e6:ba:c4:8e:67:2c:dd:14:34:11:d3:50:90:d0:f9:
1b:17:53:1e:df:a0:44:29:14:36:41:86:e5:1f:00:2f:41:93:
92:96:8a:00:4b:5f:3e:cc:1e:85:70:b6:23:7a:3f:0a:b5:68:
1e:33:6a:14:b9:fa:68:f8:60:4f:84:b6:11:9c:6e:a9:10:d1:
b0:b2:f9:34:90:de:ec:dd:be:e3:ff:b0:55:ff:38:8a:c4:fe:
d8:49:f9:d1:70:98:d0:ac:76:ef:bb:15:d2:a6:76:9c:37:76:
80:82:8e:eb:b2:94:aa:1b:0e:f6:3c:1f:1f:fb:4c:cc:1f:04:
49:79:93:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:49 2025 by rpki-client