Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
File: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft (raw, json)
Hash identifier: OhGfYKuhN6M/UN8ZqT29tKDl05JE4deblqV6ko6YWtU=
Subject key identifier: 89:A2:60:4B:DA:07:5D:F4:D9:56:98:56:41:31:23:AF:48:77:EE:34
Authority key identifier: 27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
Certificate issuer: /CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Certificate serial: 019A112832AFF9453382C35F7102CF54C8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
Manifest number: 16EF
Signing time: Thu 23 Oct 2025 13:00:38 +0000
Manifest this update: Thu 23 Oct 2025 13:00:38 +0000
Manifest next update: Fri 24 Oct 2025 13:00:38 +0000
Files and hashes: 1: J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl (hash: 8lhD0ubAMB2CutUzZrmqZTi9PWvlkBvX3qFEZVk+gtQ=)
2: rTVHjttPuQQ_1Dt0EA11KAiXgII.roa (hash: 5V1V0+UjdPuxZIazNIUWaVHiDdBin/aDpwXhDP5JcYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:11:28:32:af:f9:45:33:82:c3:5f:71:02:cf:54:c8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f0b737715114ded20f68ef0347d9f752a0e0b7
Validity
Not Before: Oct 23 13:00:38 2025 GMT
Not After : Oct 24 13:00:38 2025 GMT
Subject: CN=89a2604bda075df4d9569856413123af4877ee34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:2b:98:66:d9:9c:98:6c:5a:f9:da:c5:e8:d0:
13:4e:29:53:3b:1e:3e:63:ad:7f:ef:21:de:21:82:
00:f4:33:c2:cc:42:61:c0:df:a8:3a:c8:24:ee:dc:
44:17:12:4b:b7:d3:93:ce:39:55:be:25:bc:8d:46:
55:a1:5e:e1:ed:d3:41:64:1c:4c:52:4f:7e:3a:f8:
6f:55:1e:f4:d8:af:19:77:48:87:5f:b7:b1:d2:af:
7f:69:5e:73:1c:74:68:f0:40:57:de:9f:64:26:4f:
b4:da:42:44:ad:6a:54:bf:78:7f:3b:1f:d9:70:98:
51:32:46:b4:63:c5:26:6d:93:dd:91:06:dd:d0:f3:
14:cd:6f:51:86:f3:26:1d:51:b5:49:ad:84:d3:9e:
95:45:ed:00:4d:04:38:80:af:76:25:04:a3:56:d5:
2e:ec:24:17:63:69:52:c0:af:da:b2:e4:3d:df:54:
65:8f:dd:35:a5:16:e0:45:32:3a:6b:a2:df:5b:0c:
eb:81:dc:88:aa:26:3c:81:db:28:22:1a:71:ed:6b:
cd:18:2b:88:60:d3:6d:9a:94:65:8e:3a:19:ac:44:
cd:7a:b0:55:b3:b8:a1:31:ca:5c:66:37:03:e9:7b:
fd:79:ef:49:6a:30:31:56:2f:2c:ea:99:dd:d7:c6:
b0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A2:60:4B:DA:07:5D:F4:D9:56:98:56:41:31:23:AF:48:77:EE:34
X509v3 Authority Key Identifier:
keyid:27:F0:B7:37:71:51:14:DE:D2:0F:68:EF:03:47:D9:F7:52:A0:E0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b67953-3ce3-4afe-9d7e-1ed620452509/1/J_C3N3FRFN7SD2jvA0fZ91Kg4Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:48:7a:5b:ee:43:32:99:66:5d:05:0c:35:16:6d:db:c4:17:
39:a2:1d:e3:90:14:d6:9b:48:73:ea:a8:c5:c8:36:44:51:8b:
41:e0:7e:5d:4e:fa:7d:f4:48:76:8f:70:31:71:08:06:fb:4d:
e2:86:7b:b8:d8:d6:e9:84:54:06:56:bd:88:58:21:28:50:67:
9c:a1:1a:a0:a5:a3:be:17:32:6e:1a:99:14:24:31:08:67:9e:
e0:4a:e8:74:71:0e:6c:ac:46:82:93:9b:28:a9:c0:52:fe:3a:
ee:35:97:93:69:49:a8:76:b6:80:ed:1f:50:1f:45:2e:56:0b:
9b:dd:02:8c:57:de:a4:3b:51:b6:b6:f3:0a:72:d4:f1:48:0e:
1d:14:b7:20:f3:f7:b2:88:0b:42:ca:1f:15:f4:fe:b2:de:86:
eb:03:25:85:ec:a3:21:de:25:52:b1:b8:d3:25:7a:4f:1b:26:
6e:c6:ed:7d:18:fe:fc:de:cd:2c:45:8f:fd:91:82:13:1c:bb:
5e:2e:a4:8b:25:34:f8:34:c0:c6:2b:9e:21:78:94:a1:bc:85:
7a:ac:35:6d:4a:ee:b0:32:88:6e:fd:72:bd:11:65:f9:c8:0c:
74:07:90:49:cc:ab:ac:80:05:22:d4:cf:f3:87:1b:28:30:e0:
26:33:09:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 22:58:32 2025 by rpki-client