Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: TfHdrYF8fDzLG7CmU7NbDjCIpCSN4iM8L6CqAuXM+NQ=
Subject key identifier: 55:1A:3D:61:4A:53:5D:B6:47:67:04:C0:46:13:11:75:7A:64:3B:2E
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 019A7293FFB95F36679B3801FAB3F7C7D671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 01B9
Signing time: Tue 11 Nov 2025 11:01:32 +0000
Manifest this update: Tue 11 Nov 2025 11:01:32 +0000
Manifest next update: Wed 12 Nov 2025 11:01:32 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: TICQJN92d5qgEbIU+QxxRtPHUvibEolyKNz1VHo5JNI=)
2: PXQZ8Kqy_mx9lBo5_cDxC51se1U.roa (hash: 9tHWBrF2ZmcSWuE44cZk0kByYXScp8kTGOAiMALH64w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ff:b9:5f:36:67:9b:38:01:fa:b3:f7:c7:d6:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Nov 11 11:01:32 2025 GMT
Not After : Nov 12 11:01:32 2025 GMT
Subject: CN=551a3d614a535db6476704c0461311757a643b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1c:05:53:63:fc:d1:e8:e6:39:c2:46:bc:37:
8f:53:d9:19:c1:74:89:dd:3e:ba:b8:d6:17:9e:35:
87:37:21:af:a4:c2:5c:cc:16:0b:60:44:b5:e0:8c:
82:4e:4c:c1:2c:f1:3f:e9:65:8c:5e:96:57:f5:e5:
e0:e8:e8:cf:21:54:36:07:71:a6:59:62:6f:81:8b:
02:7f:2a:3d:b9:b3:dc:78:3f:46:26:55:83:d2:dd:
8a:cd:d7:bf:69:8b:19:54:d5:c0:48:19:47:89:8e:
5c:53:59:a4:bf:c0:55:ab:f5:98:fd:8d:97:58:83:
06:84:d9:f5:89:e4:8a:65:12:d3:13:0e:1b:53:49:
cf:7d:5f:f4:f9:3b:60:f6:4a:69:5f:8d:80:3e:6c:
4d:4d:b1:0b:ee:83:ec:95:5d:8b:e0:d1:56:22:cf:
91:15:be:f1:17:3d:15:37:f2:a2:b1:d4:93:db:9d:
5c:e7:47:a2:53:17:44:1c:90:a7:14:03:79:65:d4:
ae:10:87:26:2b:9d:90:ed:c9:85:31:73:f6:28:fc:
54:af:81:4e:a4:17:c3:08:a6:69:ee:bc:bc:4c:86:
6f:06:11:f4:9e:95:c0:70:ef:bd:30:52:10:1d:1c:
22:52:0b:5d:fa:87:04:53:a2:bb:a5:09:80:4e:a5:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1A:3D:61:4A:53:5D:B6:47:67:04:C0:46:13:11:75:7A:64:3B:2E
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:08:af:6b:ba:9e:0e:bc:7a:ad:cf:9f:ec:fc:ad:c3:be:46:
84:1c:dd:00:ff:31:6c:c7:7f:ea:95:fd:52:c5:3f:6e:41:1f:
9b:3a:c5:d1:8c:44:c4:1b:0e:6a:48:e6:bf:4e:a2:77:79:1b:
af:be:a2:d8:5a:9c:96:a5:69:36:6e:20:f1:6f:b6:ba:7c:61:
15:95:32:5e:43:58:dc:66:79:2e:e0:a8:69:78:9c:11:8d:97:
28:10:cb:75:ea:f6:92:b6:dc:6b:cf:0c:12:78:bb:0f:86:d5:
95:73:2d:b3:8e:9b:d9:88:3e:bd:f1:88:32:89:75:92:e0:32:
74:a9:f8:1f:e2:4d:c4:30:f9:2c:f3:1e:81:54:17:3e:c6:27:
b8:37:63:16:96:6e:d8:01:2c:ca:5f:64:e1:44:e8:13:56:d6:
bf:c3:a3:36:b0:42:ea:7f:ae:a3:df:79:34:01:4a:e8:c0:ad:
63:0d:41:f5:2a:15:c5:9f:7d:3c:d6:d4:f6:28:bb:91:fb:dc:
16:c5:9f:aa:d0:ed:34:c3:87:5f:e9:dc:53:d2:74:2d:b7:ea:
07:df:4c:0e:ec:12:bc:e6:70:e9:64:3b:cc:75:56:8b:8a:71:
42:94:a2:66:90:ae:29:5d:77:d0:e1:18:94:0d:23:bb:1e:a5:
d3:49:63:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:37 2025 by rpki-client