Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
File: J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft (raw, json)
Hash identifier: jVWZSBA+A5c5nzDIpZP7maf/h+CK8Yoe5P1dUyqyaDQ=
Subject key identifier: A7:82:65:F6:B8:7F:07:1F:C8:46:C0:03:58:1F:D9:29:A2:77:A9:23
Authority key identifier: 27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14
Certificate issuer: /CN=27b56eb25b05a08826c2648fff1acf36b494d814
Certificate serial: 019A70A53721BBE047BA6EA967FAD07641A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
Manifest number: 03DA
Signing time: Tue 11 Nov 2025 02:01:06 +0000
Manifest this update: Tue 11 Nov 2025 02:01:06 +0000
Manifest next update: Wed 12 Nov 2025 02:01:06 +0000
Files and hashes: 1: J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl (hash: X1lGg1x35WWfb0dEtjXewhuyTGsU36JmFR2ZKlSU32U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:37:21:bb:e0:47:ba:6e:a9:67:fa:d0:76:41:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b56eb25b05a08826c2648fff1acf36b494d814
Validity
Not Before: Nov 11 02:01:06 2025 GMT
Not After : Nov 12 02:01:06 2025 GMT
Subject: CN=a78265f6b87f071fc846c003581fd929a277a923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:e6:d7:b4:69:3b:65:72:d2:3c:28:94:72:
be:11:48:61:bb:df:4d:33:09:c9:23:a4:c7:01:42:
18:c2:e1:fb:b1:e7:60:6d:ea:5c:05:a7:fc:42:f0:
b3:67:b2:e5:ff:67:19:1c:39:f6:b0:6f:f7:56:3c:
64:4b:f4:e7:a7:93:d6:08:c8:bb:52:93:40:0c:06:
a6:82:5a:93:08:78:a2:da:d3:4d:f0:e6:67:cf:62:
a1:8e:57:c9:0f:3d:3d:bd:67:d8:6c:f2:1d:78:ad:
f6:72:77:aa:21:a8:66:2d:fd:c1:81:46:aa:2f:26:
8a:d1:4d:6e:4b:f7:c6:b0:6e:8d:b6:d9:56:b6:f2:
a3:ca:ea:cf:8f:a1:83:c2:00:c5:ae:a2:e0:0b:4e:
74:b3:db:2d:29:02:8f:52:6b:d9:c4:5c:99:6a:c3:
b3:f3:55:d6:d5:81:07:f0:c7:3a:a1:e2:01:01:db:
d8:b1:9d:a3:f5:43:c1:c9:14:4d:9f:69:c2:e4:07:
03:57:8c:8d:20:39:d5:83:e3:2b:58:d1:40:a5:fc:
02:07:a8:11:60:f2:6c:ba:c5:b9:7b:8b:e0:41:16:
16:0e:40:f4:6c:e3:f2:da:fc:9c:96:74:09:68:26:
74:42:8a:8e:ee:3e:07:86:0c:c9:6d:8d:8c:6f:32:
68:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:82:65:F6:B8:7F:07:1F:C8:46:C0:03:58:1F:D9:29:A2:77:A9:23
X509v3 Authority Key Identifier:
keyid:27:B5:6E:B2:5B:05:A0:88:26:C2:64:8F:FF:1A:CF:36:B4:94:D8:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7VuslsFoIgmwmSP_xrPNrSU2BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/599555-43f7-41fc-aa57-038f159563ff/1/J7VuslsFoIgmwmSP_xrPNrSU2BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9c:d1:80:c1:39:2e:47:ff:d4:a6:ed:81:13:c9:41:e5:9b:
c0:14:5a:49:f5:bb:7c:6e:4b:a3:33:5d:94:18:5b:c0:e5:78:
98:84:7c:78:5d:c7:a5:54:f1:0e:41:25:f1:d4:47:44:fe:33:
43:17:95:9b:53:46:8c:2b:9e:3e:be:e2:62:41:de:b7:0d:61:
b7:18:e1:09:8b:08:96:34:d4:6f:6f:62:0e:25:84:41:d4:89:
e9:5e:8c:4a:d2:11:84:7a:52:ba:93:00:40:a5:de:21:39:18:
4b:bc:1c:1e:ab:30:72:62:11:3f:53:e4:15:e8:1f:c0:fa:0c:
f6:23:1b:51:54:c8:95:5e:d4:2c:01:75:49:f6:96:49:b4:12:
bd:66:4a:2f:a9:d0:d8:87:8f:69:ed:c5:f0:19:88:3c:2f:a4:
1d:91:38:b7:6a:d8:35:92:58:db:c3:a7:1f:af:a2:23:12:99:
3d:b4:8b:39:53:77:1e:3d:1d:3d:b0:2e:b3:99:9f:78:b4:a7:
a9:e4:e3:1d:bb:7e:1a:92:22:03:25:32:d7:b7:ae:e4:eb:e3:
cb:08:66:0d:51:09:54:78:db:28:77:f1:6b:01:81:57:e0:f5:
aa:2c:31:ba:9d:73:12:0d:c7:f8:58:e2:18:4e:e4:1a:9d:6a:
b2:92:27:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:45 2025 by rpki-client