Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
File: J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft (raw, json)
Hash identifier: VyZ8q9u/D/DmYyBxV+DzXFhMHQeYsGVSnvibCnC1tE4=
Subject key identifier: 72:BA:68:0D:DD:AC:8E:B7:5C:B3:89:EF:96:A5:5D:2C:2D:AF:C2:B2
Authority key identifier: 27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
Certificate issuer: /CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Certificate serial: 019A71EE5CC2BE101DCA088E1BF5299A1E28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:00:37 +0000
Manifest this update: Tue 11 Nov 2025 08:00:37 +0000
Manifest next update: Wed 12 Nov 2025 08:00:37 +0000
Files and hashes: 1: AvcqCbLU9IeYKmCw3WGJQWXmG28.roa (hash: /7yETboJPz5IcxWS6MR6CkKHKNZg1KvC+Zyvk1bhENA=)
2: J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl (hash: blMvInGTv1uWmjFqGnvR8PW11SjML5t1nxMrj737VS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:5c:c2:be:10:1d:ca:08:8e:1b:f5:29:9a:1e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f130b6f45f00f7c1d135b6c93b20e690412cfc
Validity
Not Before: Nov 11 08:00:37 2025 GMT
Not After : Nov 12 08:00:37 2025 GMT
Subject: CN=72ba680dddac8eb75cb389ef96a55d2c2dafc2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:66:23:25:21:26:11:29:dc:7c:cd:9a:11:
28:e2:01:5d:0b:f2:c3:5e:a7:b0:7d:98:2a:91:e8:
1d:7b:ef:a2:fa:8a:b0:a0:f2:d9:54:df:83:9a:71:
a2:41:e7:eb:2e:bc:52:21:90:b7:4d:e2:14:4e:61:
65:c9:1b:e9:85:9c:cb:3e:1d:d8:9b:17:fc:7f:63:
6d:43:55:7f:95:db:34:7a:e4:6b:30:e9:c9:3a:41:
d6:2d:25:ba:47:ff:3d:5b:bc:6b:72:7b:5a:88:3f:
de:6a:e7:08:5a:9d:fd:3b:9d:36:d7:aa:34:a5:40:
3e:77:4f:3a:9f:15:1a:19:e8:28:d3:fe:92:85:35:
03:d1:61:fa:98:91:13:c1:7c:a6:76:cc:91:70:65:
d1:e7:51:59:f9:ff:8a:1b:16:94:14:e5:c3:d4:bd:
67:86:f4:ca:10:a5:2b:a4:5c:d8:c2:5e:ca:66:3c:
41:48:68:5a:91:89:43:96:fb:4d:2b:77:4e:88:cd:
8e:9a:21:cb:36:2d:b7:a1:93:fa:92:a9:61:90:82:
78:6c:fa:69:bb:38:9f:7b:61:5f:3a:5d:f5:20:c3:
ad:7b:10:8e:0f:32:0a:41:0e:de:d6:81:a3:ae:93:
96:07:49:f4:9e:08:02:93:d3:14:61:22:b2:50:01:
3c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:BA:68:0D:DD:AC:8E:B7:5C:B3:89:EF:96:A5:5D:2C:2D:AF:C2:B2
X509v3 Authority Key Identifier:
keyid:27:F1:30:B6:F4:5F:00:F7:C1:D1:35:B6:C9:3B:20:E6:90:41:2C:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_EwtvRfAPfB0TW2yTsg5pBBLPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ead4a0-2521-4abb-ac2d-07dbd900c4ad/1/J_EwtvRfAPfB0TW2yTsg5pBBLPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:69:3c:cb:35:79:26:8d:76:15:94:d3:4a:6b:1b:95:fb:52:
7a:40:06:23:b4:6b:c1:7a:4d:3f:76:22:20:ea:b6:a4:fb:ba:
5c:02:f5:03:83:35:e1:05:a8:ff:bc:5c:79:44:a7:8c:22:86:
c3:fd:8e:97:8b:fc:b7:2f:56:c1:e1:21:28:ee:f4:39:53:1d:
4d:c9:67:ac:6e:b3:90:c6:28:94:33:43:5a:c4:e8:fc:8d:b4:
3c:74:97:d3:47:e1:ff:a5:5b:71:2e:7b:92:71:3a:6d:3b:39:
21:57:96:f0:f0:75:8c:b3:d2:d4:d0:cc:ec:87:50:12:d8:6d:
4b:71:0e:82:16:7a:c6:8a:ed:13:c5:2c:58:85:80:53:02:77:
91:db:1b:e6:8f:bb:24:fa:43:a4:d9:4a:7f:e2:3c:59:ea:b7:
2e:26:06:7f:98:ef:fe:3f:68:9f:0f:b9:71:62:8b:f9:bc:41:
74:78:83:0c:f4:da:e7:67:b4:fe:16:92:7a:fb:5d:c4:bd:91:
dd:75:51:05:90:7d:4f:ab:46:4c:fd:9f:cc:c4:41:03:42:0c:
11:fd:0e:07:c4:e2:6f:53:c2:62:61:e8:b2:c3:69:2b:99:18:
23:8e:89:64:26:34:eb:4d:81:8c:1e:31:3a:05:5a:96:89:a4:
27:5f:02:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:03 2025 by rpki-client