Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: VZnQicdNuNy2snbffZw5avwH5X1QBoB/6XY0s0t/AN0=
Subject key identifier: 1A:0D:BE:BB:6E:CF:53:D1:74:82:C8:E1:93:9E:8A:7E:FF:9C:11:65
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 019A71809928DB9DB5433C8403970D87631A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 157F
Signing time: Tue 11 Nov 2025 06:00:44 +0000
Manifest this update: Tue 11 Nov 2025 06:00:44 +0000
Manifest next update: Wed 12 Nov 2025 06:00:44 +0000
Files and hashes: 1: 3WjmScxyPShGMsEmfTcZS4RZUd0.roa (hash: 5cWtsZDvpUp+XvqnrWOkzcAs96EsLhbvVP+8UGNRG5Q=)
2: Fi_TM4K4PYpSezLxC5qNEiPOZ3Q.roa (hash: DTiudzjdSu7JP8slciOiBe/Ykx5OQa6RusVSJBvKWj0=)
3: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: UfxBMBXNjTvTtZ5+M0efCATPQpk9azcyWgUd4tjYe3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:99:28:db:9d:b5:43:3c:84:03:97:0d:87:63:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Nov 11 06:00:44 2025 GMT
Not After : Nov 12 06:00:44 2025 GMT
Subject: CN=1a0dbebb6ecf53d17482c8e1939e8a7eff9c1165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:91:62:ab:bb:de:ba:ec:85:25:fd:c1:6c:bb:
07:a8:45:53:7b:3f:4d:87:2c:72:9c:ca:46:3f:aa:
3e:6b:83:d6:bf:c3:ca:e7:02:b5:ae:92:e9:e5:39:
69:b8:e2:99:69:05:36:00:4e:8e:c1:e2:85:ae:22:
b5:b0:21:af:a8:df:8e:80:5f:ec:bb:8d:db:b5:9a:
5b:77:d5:fe:12:fd:c6:c6:41:80:a4:98:6c:ea:69:
b5:a7:29:3e:02:bd:2e:39:88:a1:32:79:1e:a2:6b:
d0:f7:b1:8f:79:66:0f:c9:e8:a1:57:95:7c:ba:af:
a7:8c:18:d8:cf:de:d2:25:fd:20:aa:5e:69:e6:ab:
ae:1d:90:87:cc:98:1e:f5:0c:a8:cd:ac:d1:c4:2f:
f9:06:b5:c8:de:68:78:46:2e:77:1d:2f:ba:90:7b:
7b:15:1c:d3:24:a8:4a:e9:eb:86:24:bc:68:22:bc:
14:66:2f:d2:ba:8c:f2:21:e2:f8:7a:29:2b:70:8b:
c6:f2:00:8c:6f:95:e0:c0:12:41:89:72:63:0f:fa:
67:b5:5c:8e:f0:67:47:e4:94:c7:4e:ca:1d:0e:e9:
61:d5:cf:f2:29:e4:d8:0d:79:13:29:ac:13:8c:03:
ca:f2:60:b9:1c:49:36:5c:13:b5:67:0a:76:fe:d1:
52:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0D:BE:BB:6E:CF:53:D1:74:82:C8:E1:93:9E:8A:7E:FF:9C:11:65
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a2:e1:3b:d4:c3:2c:98:05:56:cd:79:44:25:62:75:6c:f2:
54:95:fe:21:d2:f1:9a:9e:19:c5:ca:2a:c4:5c:a8:4d:ae:b1:
92:c2:19:92:4e:af:65:77:2a:f2:7e:6d:a2:38:ef:e5:c4:31:
0b:f6:a3:31:34:6b:d0:f9:d2:c5:99:91:58:44:3e:d0:38:46:
3b:f1:5e:d5:aa:68:79:98:b7:f3:00:15:e5:d3:40:ea:ec:f3:
5d:c0:b4:c8:24:80:32:73:e9:af:67:7e:45:de:78:e0:93:64:
12:eb:76:b5:45:fa:54:e2:94:64:c5:6a:8f:aa:23:b1:a3:88:
5a:48:24:ce:0b:9e:cc:cb:94:2b:f8:16:08:f4:aa:26:83:f9:
82:a2:ef:9a:09:45:48:e1:bc:ca:ed:94:7c:62:59:f0:0e:90:
08:31:be:6c:71:d7:be:66:a8:97:2e:8c:9e:48:b2:c6:c6:38:
28:bd:bc:f1:cc:5b:4c:8c:17:4b:20:98:f3:97:60:98:bc:52:
0a:11:fe:e0:57:f0:7b:7a:be:0e:1b:d5:5b:a9:b8:c6:cb:21:
91:94:11:53:88:c2:31:c6:4d:ee:01:ef:1b:76:f8:fe:42:a2:
13:38:b7:11:d2:18:1a:4f:84:45:b3:92:78:bb:00:b6:64:83:
bf:4d:6c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:14:05 2025 by rpki-client