Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
File: J7syqoyfjQXFF74q1mUvZlUKjVc.mft (raw, json)
Hash identifier: vM1fiJ4K3P/rsUbw5OZvwFTh6DF+PNStCgVdTAHyYFY=
Subject key identifier: C9:EA:20:23:46:2B:EA:F6:D9:5A:FC:EB:34:C7:76:EE:E2:D1:88:BC
Authority key identifier: 27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
Certificate issuer: /CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Certificate serial: 019A2E56A1CC05D5748F5E1365059D2E1C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
Manifest number: 1700
Signing time: Wed 29 Oct 2025 05:00:20 +0000
Manifest this update: Wed 29 Oct 2025 05:00:20 +0000
Manifest next update: Thu 30 Oct 2025 05:00:20 +0000
Files and hashes: 1: J7syqoyfjQXFF74q1mUvZlUKjVc.crl (hash: TuYlX2HN27U1gKvJ3kbSYEJfe+Rm60rB7Rnj93Q1D6M=)
2: c8_yE52FicqJDyLTZs83EXz0uyw.roa (hash: dhlDGU7iUlzSklC2rupr+JKl7gpxZEkuve5PU6eqNIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2e:56:a1:cc:05:d5:74:8f:5e:13:65:05:9d:2e:1c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27bb32aa8c9f8d05c517be2ad6652f66550a8d57
Validity
Not Before: Oct 29 05:00:20 2025 GMT
Not After : Oct 30 05:00:20 2025 GMT
Subject: CN=c9ea2023462beaf6d95afceb34c776eee2d188bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f9:d3:7c:0f:98:83:76:af:38:5e:59:33:96:
a3:d1:c2:47:58:ea:07:1b:2a:5c:99:0a:ca:2d:a2:
d2:bf:c2:48:44:5b:14:0a:a5:ac:71:40:13:c6:b5:
03:e2:95:f0:ab:36:53:9b:ee:8e:2e:e2:84:45:fe:
67:d0:2d:40:90:de:3b:93:34:f0:d4:8d:7c:cd:98:
3a:b3:f5:4c:21:52:e6:98:43:10:8a:44:dc:26:a8:
e5:10:b9:a6:a3:7c:87:43:43:62:16:61:e9:21:c6:
e7:9b:c8:f5:15:fd:57:bd:83:b4:ac:c6:c5:33:5d:
f7:d8:d9:9e:09:bd:5f:db:f8:40:9a:11:a2:bd:aa:
3f:07:c5:6a:48:ee:53:b9:b8:72:70:47:59:1f:98:
f6:05:09:7c:e0:f4:f5:c4:52:d5:fc:55:4e:69:1e:
bc:fb:1e:5d:48:e4:60:12:cb:5f:69:d6:8e:4b:dd:
00:43:fe:9d:31:69:eb:77:de:63:45:e0:15:cb:4b:
0f:ca:c7:65:8b:a5:bb:c8:46:e5:65:38:52:4b:65:
d0:7b:de:24:51:d8:9b:38:8e:f1:bc:b5:75:80:f8:
bd:c9:09:ff:2e:40:c1:64:a6:9e:ab:c2:9f:af:13:
7c:2d:2b:3f:4a:30:99:11:de:c1:06:f2:7c:00:70:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EA:20:23:46:2B:EA:F6:D9:5A:FC:EB:34:C7:76:EE:E2:D1:88:BC
X509v3 Authority Key Identifier:
keyid:27:BB:32:AA:8C:9F:8D:05:C5:17:BE:2A:D6:65:2F:66:55:0A:8D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7syqoyfjQXFF74q1mUvZlUKjVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a7dceb-ff54-436a-9415-484221a1f285/1/J7syqoyfjQXFF74q1mUvZlUKjVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:c2:9f:1f:62:dc:eb:62:42:1d:04:ed:09:ca:80:10:ef:ae:
c2:0a:8f:e7:62:48:ac:33:e6:fc:24:e5:16:c2:20:e3:b1:7d:
b8:4a:75:3b:36:5c:05:02:bf:46:f5:87:9c:56:51:f5:a0:56:
c2:ae:82:10:d4:6a:3d:9b:b6:de:e2:51:3a:ef:c4:a6:96:24:
b3:0d:0a:f9:5a:b4:0b:a0:32:97:9c:12:97:59:1b:2a:b0:98:
25:51:ec:dd:53:50:0d:7e:56:a5:65:9d:8c:06:3a:2e:29:e7:
14:3b:07:72:48:d8:a3:38:65:14:4c:1b:09:15:ef:b4:c7:8e:
91:67:82:84:20:a8:1d:c5:c4:87:aa:d5:22:15:68:d0:fa:41:
49:93:26:68:20:cd:76:b4:9a:90:a4:70:48:c4:ef:c0:9f:b3:
c4:13:55:50:89:bd:17:d3:af:d8:23:fe:9a:d2:f8:44:5e:17:
8e:87:43:69:c9:42:d8:41:c8:22:a6:fc:2f:e8:8c:43:51:2d:
f7:34:bd:aa:f3:82:76:07:68:ea:be:81:35:ba:52:a7:f3:41:
36:11:13:24:03:29:52:79:d3:d0:59:03:c6:f7:54:39:7d:b5:
9b:fb:73:02:f5:c2:9d:65:91:fd:ac:fa:27:9f:36:79:a4:c0:
2f:cf:2f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 08:16:29 2025 by rpki-client