Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier: LJytBKps5bokBjdjenpwhUYbWY+OKaGEAYPZR7Yq41E=
Subject key identifier: B7:1E:2B:52:E4:64:03:AE:C8:79:01:F5:2B:FE:9E:EC:7F:55:FE:6B
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 019A1C19B6119306D44BAA6B3804814CA740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number: 0F20
Signing time: Sat 25 Oct 2025 16:00:38 +0000
Manifest this update: Sat 25 Oct 2025 16:00:38 +0000
Manifest next update: Sun 26 Oct 2025 16:00:38 +0000
Files and hashes: 1: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: ZwaGCj9qNAGlmkwMxtNnCKy4KxT8du7pWazE3UIp/I0=)
2: U98Pywp0SW8RSqZF3Ge6Si9krK0.roa (hash: O0xR8BO72Q1293Dodh+ahx0zgwd8SQ9b7GDuhK6uN4w=)
3: fonqMENkUurdTSsmls1gVlg_WJ4.roa (hash: BkPWWaoPqGMFHcArMOr28SMuQJKUdO9RrrY9l2uEtM4=)
4: hRMqKbI5ZBKlaiDQw_wO9nw88a0.roa (hash: tQTOlSI2XH6rsXW1nhJPPPkXPxhSWEfkvDRnTJEB2Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:19:b6:11:93:06:d4:4b:aa:6b:38:04:81:4c:a7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Oct 25 16:00:38 2025 GMT
Not After : Oct 26 16:00:38 2025 GMT
Subject: CN=b71e2b52e46403aec87901f52bfe9eec7f55fe6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:24:b3:5b:c8:f8:2b:bf:b5:16:8d:06:d4:92:
80:c9:2a:37:06:e4:e4:62:3a:3c:07:b7:bb:57:9d:
c4:b9:6c:eb:c7:cb:34:b3:b0:19:65:cf:76:f4:05:
eb:9b:ec:c9:9b:26:92:34:07:c6:9b:d2:c4:25:8b:
a1:7f:6d:58:34:00:b1:d5:c6:7c:32:2a:39:92:de:
10:fc:3d:23:82:99:ac:37:32:4e:09:eb:47:79:e9:
ed:77:f9:95:e1:23:c9:06:11:c8:54:a0:38:8e:d6:
4e:51:d1:db:c8:f4:2b:e2:b5:59:8e:68:a7:c7:2a:
ac:61:19:93:17:d2:50:23:8d:05:70:1d:b4:3f:02:
60:72:68:69:c9:f4:3f:34:9d:fc:de:e8:86:0b:8d:
62:27:23:b4:4f:91:68:91:27:59:f8:a2:44:e0:88:
e1:f7:a2:60:e8:ab:e5:2b:a0:e9:5d:f7:5e:af:0a:
b7:70:65:0f:55:03:90:08:f7:fc:4e:c4:e4:e9:f7:
5a:e0:ea:4b:b1:54:24:55:43:17:b4:01:0d:52:ec:
97:79:02:a3:91:41:c2:01:c6:a8:e0:03:e8:1b:c0:
1a:0a:52:39:e5:6e:58:97:34:8c:9e:6a:88:5d:5f:
6a:97:5d:a9:76:73:85:8e:10:67:61:2f:ea:55:b3:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1E:2B:52:E4:64:03:AE:C8:79:01:F5:2B:FE:9E:EC:7F:55:FE:6B
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:30:a4:c7:86:96:ad:c7:05:e3:aa:54:82:f5:c3:e8:50:22:
dc:55:c7:c1:a7:f7:de:61:30:5d:36:c5:24:31:b2:db:40:69:
85:e0:a5:b0:e7:30:f6:d3:bb:cb:de:7f:21:42:36:6b:be:86:
75:d4:4f:0b:87:1c:83:bc:40:ce:3a:38:40:f8:b1:47:f9:55:
33:fd:c8:bf:7b:c6:8b:89:9c:98:d2:b4:50:2a:50:b1:be:71:
b4:57:a0:b4:ba:89:69:d0:44:8b:e6:f8:fe:23:1f:fe:87:cc:
a3:1f:59:eb:df:e1:aa:21:af:ec:40:36:f0:68:57:35:0b:a1:
f0:5d:36:29:9f:49:ac:ff:15:6b:3f:2f:4a:26:99:d2:5e:7b:
17:5a:4e:03:c8:d6:54:4f:45:d1:7c:24:e1:fd:95:fa:d1:44:
00:90:8f:4d:6e:f4:3e:64:58:30:0e:cc:f6:71:74:b3:01:1b:
00:4f:ed:81:ae:fe:e8:28:2b:44:95:11:4d:9b:5e:9b:ad:30:
b3:ee:8c:7b:f9:8e:06:fe:2b:45:10:d4:44:0c:1d:58:d3:2c:
87:fd:a3:f4:15:98:f9:45:94:47:7c:09:6f:68:29:07:70:79:
9c:73:f1:32:db:a4:25:a7:1a:16:d4:c3:db:d6:31:64:6d:06:
cf:d1:64:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 23:05:21 2025 by rpki-client