Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
File: J6-AiEvc7y-e2bqXgRYKBnyMTws.mft (raw, json)
Hash identifier: Mh97zf38PZjTR5/+ybI2SBGvMHPpeIwzU7c6U4M3Wd0=
Subject key identifier: CB:5B:90:54:49:FF:02:D4:8C:4D:74:F0:04:8F:40:E7:2C:6B:8B:86
Authority key identifier: 27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B
Certificate issuer: /CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b
Certificate serial: 019A71B8C11394EF76C59AC4F94F389A2518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
Manifest number: 0531
Signing time: Tue 11 Nov 2025 07:02:04 +0000
Manifest this update: Tue 11 Nov 2025 07:02:04 +0000
Manifest next update: Wed 12 Nov 2025 07:02:04 +0000
Files and hashes: 1: J6-AiEvc7y-e2bqXgRYKBnyMTws.crl (hash: FSH9jbIESENuKQ+bVxWiVu+rUMWoYuFZuU143KfgxSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:c1:13:94:ef:76:c5:9a:c4:f9:4f:38:9a:25:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b
Validity
Not Before: Nov 11 07:02:04 2025 GMT
Not After : Nov 12 07:02:04 2025 GMT
Subject: CN=cb5b905449ff02d48c4d74f0048f40e72c6b8b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:47:b0:07:7c:30:19:3e:3b:f4:80:1e:fb:
98:16:ff:5d:49:d5:ef:2f:2b:4b:3b:62:82:ca:41:
8e:77:e9:d9:96:f8:17:d6:2a:65:9b:39:ae:f8:9b:
97:47:c1:a4:66:e4:c6:79:b4:f7:c2:34:29:f5:fb:
68:4a:b8:eb:2b:9b:47:a1:be:73:49:14:ce:4d:25:
38:a7:af:ba:58:c4:87:05:8c:49:3c:ff:4b:d0:9e:
cc:1b:d9:60:7f:b1:83:be:af:71:5f:3c:b5:28:d9:
f5:bd:9a:16:b6:fd:a4:9e:75:e2:0f:aa:c4:e0:8f:
1a:4a:04:b8:41:b5:39:7d:58:87:52:32:d7:8f:39:
78:81:1a:2c:36:8f:8f:41:90:b4:fe:73:21:fb:66:
5c:cf:18:80:b5:3f:49:03:35:6a:29:ab:bc:4e:87:
26:88:46:44:7e:f4:46:e4:3f:75:8a:ea:1f:61:79:
53:00:f6:ff:a1:e4:b9:b0:65:8b:e5:27:b5:95:27:
7c:16:e8:02:2a:e9:8e:40:3a:44:29:12:79:d3:f3:
cb:0d:d7:fb:6a:cd:11:3a:c2:1a:cc:e0:2e:4d:4a:
7a:1a:be:63:e8:6d:53:e7:f5:cb:24:f3:8e:6b:1e:
8a:3f:de:4f:fa:54:fc:88:aa:e9:dd:0b:97:9d:be:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5B:90:54:49:FF:02:D4:8C:4D:74:F0:04:8F:40:E7:2C:6B:8B:86
X509v3 Authority Key Identifier:
keyid:27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e8:14:8f:ce:08:ff:11:99:87:1a:bd:73:ea:d1:ea:42:0e:
99:22:c4:a8:3c:5c:16:90:60:1c:5f:78:8e:85:61:6c:bf:00:
97:2a:78:93:57:20:50:d0:35:e0:37:9d:2a:c5:b2:30:96:31:
7e:01:61:06:c7:61:05:fb:f3:66:af:dd:9a:57:49:04:62:40:
e9:82:5e:f4:6a:45:5a:87:35:6b:6d:07:f6:b2:9d:ab:8d:00:
93:68:29:34:f1:2f:98:23:db:66:d6:ae:eb:de:24:b5:96:b7:
a6:10:e5:c7:6e:c0:f1:ed:bb:4f:08:a4:20:e7:6c:b4:d2:35:
16:65:71:8d:59:34:a3:86:4e:94:c6:3f:c4:be:c1:7e:5f:6b:
ac:57:31:dd:e3:3d:19:41:6a:ed:6f:66:29:e6:92:a5:22:ba:
73:e6:d3:2b:6e:00:10:35:59:45:7b:10:0f:05:90:a1:63:51:
03:c5:db:84:6f:81:9c:de:35:cd:1e:ad:89:dc:2f:c9:4a:a2:
b1:2d:b5:ce:3b:51:a1:3b:ec:b9:3d:6a:f2:e8:e6:9d:f0:cc:
ca:6b:0a:af:7b:1c:e0:74:ec:f4:ac:a9:52:96:82:b6:98:5d:
f2:cf:f3:b3:da:fd:c7:9e:43:81:b0:b6:25:e0:02:cc:80:90:
22:62:c8:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuMETlO92xZrE+U84miUYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3YWY4MDg4NGJkY2VmMmY5ZWQ5YmE5NzgxMTYwYTA2N2M4
YzRmMGIwHhcNMjUxMTExMDcwMjA0WhcNMjUxMTEyMDcwMjA0WjAzMTEwLwYDVQQD
EyhjYjViOTA1NDQ5ZmYwMmQ0OGM0ZDc0ZjAwNDhmNDBlNzJjNmI4Yjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUZHsAd8MBk+O/SAHvuYFv9dSdXv
LytLO2KCykGOd+nZlvgX1iplmzmu+JuXR8GkZuTGebT3wjQp9ftoSrjrK5tHob5z
SRTOTSU4p6+6WMSHBYxJPP9L0J7MG9lgf7GDvq9xXzy1KNn1vZoWtv2knnXiD6rE
4I8aSgS4QbU5fViHUjLXjzl4gRosNo+PQZC0/nMh+2ZczxiAtT9JAzVqKau8Tocm
iEZEfvRG5D91iuofYXlTAPb/oeS5sGWL5Se1lSd8FugCKumOQDpEKRJ50/PLDdf7
as0ROsIazOAuTUp6Gr5j6G1T5/XLJPOOax6KP95P+lT8iKrp3QuXnb4LxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtbkFRJ/wLUjE108ASPQOcsa4uGMB8GA1UdIwQY
MBaAFCevgIhL3O8vntm6l4EWCgZ8jE8LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjYtQWlFdmM3eS1lMmJxWGdSWUtCbnlNVHdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9kODczZDAtYmRlOC00ZmFlLTlmNmQt
NWMwNDJkYmQwNjlmLzEvSjYtQWlFdmM3eS1lMmJxWGdSWUtCbnlNVHdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9kODczZDAtYmRlOC00ZmFlLTlmNmQtNWMwNDJkYmQwNjlm
LzEvSjYtQWlFdmM3eS1lMmJxWGdSWUtCbnlNVHdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMegUj84I
/xGZhxq9c+rR6kIOmSLEqDxcFpBgHF94joVhbL8Alyp4k1cgUNA14DedKsWyMJYx
fgFhBsdhBfvzZq/dmldJBGJA6YJe9GpFWoc1a20H9rKdq40Ak2gpNPEvmCPbZtau
694ktZa3phDlx27A8e27TwikIOdstNI1FmVxjVk0o4ZOlMY/xL7Bfl9rrFcx3eM9
GUFq7W9mKeaSpSK6c+bTK24AEDVZRXsQDwWQoWNRA8XbhG+BnN41zR6tidwvyUqi
sS21zjtRoTvsuT1q8ujmnfDMymsKr3sc4HTs9KypUpaCtphd8s/zs9r9x55DgbC2
JeACzICQImLIgQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:43 2025 by rpki-client