Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
File: J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft (raw, json)
Hash identifier: xV2tubEyE0d8Gz84I8r0MdHdQIr+v/4J1oTOb9ln4WA=
Subject key identifier: 53:09:50:DC:10:64:2A:79:FC:34:96:4B:5E:57:CE:6C:29:BD:A0:31
Authority key identifier: 27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
Certificate issuer: /CN=277b3683307c6fcc32bed177232f1d474541fbae
Certificate serial: 019A7113596307F6DB830A50ED4A76491847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
Manifest number: 12ED
Signing time: Tue 11 Nov 2025 04:01:24 +0000
Manifest this update: Tue 11 Nov 2025 04:01:24 +0000
Manifest next update: Wed 12 Nov 2025 04:01:24 +0000
Files and hashes: 1: J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl (hash: 5V6sXn6+eBzYdR1+zKYmjR5omSfjXW77+KQikNeVX8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:59:63:07:f6:db:83:0a:50:ed:4a:76:49:18:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277b3683307c6fcc32bed177232f1d474541fbae
Validity
Not Before: Nov 11 04:01:24 2025 GMT
Not After : Nov 12 04:01:24 2025 GMT
Subject: CN=530950dc10642a79fc34964b5e57ce6c29bda031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:aa:f3:55:1a:82:e6:50:bb:70:ff:80:3b:a7:
f8:3c:f7:c2:f1:ef:4a:ff:0c:4a:f7:5d:b3:18:41:
6f:2f:fd:08:fb:62:e8:0a:5f:e6:65:81:d7:18:fd:
bf:ad:97:d8:80:83:b3:35:7e:c5:2e:49:a0:f7:b1:
1c:23:72:20:ee:3f:6f:7f:6a:4e:61:1a:37:c6:ad:
2e:4a:b0:c6:b8:21:14:d3:67:bc:cb:4e:72:86:6f:
4a:48:3a:09:11:b8:64:78:b9:92:3e:b2:8d:5b:b5:
94:27:bd:ef:38:cb:54:1d:4e:b0:07:e2:be:69:96:
49:f3:45:9c:d3:5c:01:77:9a:3f:cc:c1:c9:23:1e:
cd:a2:7e:4e:05:dc:9f:63:1f:d6:c4:03:79:fc:14:
9f:a0:cc:42:8d:28:c3:49:c0:84:85:3b:ef:60:73:
a1:5a:9d:91:a4:90:d6:69:3d:0d:af:fd:89:f2:00:
27:e4:3d:91:23:f6:1b:84:31:23:a6:01:d4:36:ab:
ad:f0:0b:95:53:28:b5:66:35:3b:e7:ea:f8:d4:21:
9c:a8:00:93:86:90:0b:8b:eb:ea:26:28:75:20:7f:
8f:6f:15:ed:e1:43:a3:6c:6b:b7:5e:28:01:b5:41:
cd:d6:2a:08:98:4a:1e:e3:99:51:9f:21:53:c1:a0:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:09:50:DC:10:64:2A:79:FC:34:96:4B:5E:57:CE:6C:29:BD:A0:31
X509v3 Authority Key Identifier:
keyid:27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e4:93:e4:18:fa:5b:76:70:3f:96:12:c5:6e:3e:fe:80:57:
1c:af:bb:b6:db:c3:3b:d5:88:f7:f4:44:58:ee:03:8b:89:6c:
4f:9f:2e:5b:83:d6:34:fa:5e:f4:e3:66:53:27:48:55:7c:f7:
ac:71:93:d7:10:a9:0f:76:ad:09:e9:87:67:1a:f1:c9:99:86:
6b:08:fa:c1:16:2b:5f:b0:8a:04:4e:b1:b3:da:09:9b:7e:ce:
67:da:2a:55:54:b9:68:98:b4:98:ac:9e:6f:f6:c3:12:95:f8:
a5:50:1a:d5:86:09:c4:dc:80:60:17:0f:80:06:74:c0:0f:aa:
66:7a:a4:33:59:4f:7d:a5:f9:28:71:5d:bb:b5:90:6a:57:9f:
9b:e6:4b:78:86:2e:d7:22:47:ac:ec:02:49:1b:5d:ec:4d:c7:
b9:5b:e0:75:97:95:04:8e:a5:d2:29:2b:7f:56:41:23:16:14:
a8:ce:e5:f0:2d:3e:29:4d:b6:75:0f:73:d4:de:bf:ba:ed:fb:
af:11:ec:48:a1:54:9a:a0:a3:e0:04:90:ca:7d:42:7b:d7:9e:
a2:da:d5:05:fa:80:4e:9b:7b:2c:f5:89:5b:d5:b0:97:1a:1f:
7c:45:b1:56:9e:90:7f:49:23:9b:7c:e0:eb:ed:d2:fb:2c:ae:
a1:07:4a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:25 2025 by rpki-client