Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
File: J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft (raw, json)
Hash identifier: GUOMMM9vLZsOXmisdNeLxIvpZk40KLk7w2I5UEFbTcs=
Subject key identifier: 58:2E:5A:63:B4:63:D2:30:B2:64:44:63:C8:8F:C2:00:67:13:4B:95
Authority key identifier: 27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75
Certificate issuer: /CN=27618505d3b4c000217590f7b7b59bf61ff2f375
Certificate serial: 019A722650930B43ADE17118183E6E951489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:44 +0000
Manifest this update: Tue 11 Nov 2025 09:01:44 +0000
Manifest next update: Wed 12 Nov 2025 09:01:44 +0000
Files and hashes: 1: 5K6nIVbP5K11dvspcfl4G-MfJZw.roa (hash: 1GirTU1av48FvuHpXhFOsW26MgpLG9B9BqlLOufNX8M=)
2: J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl (hash: axNSHB9yqvbGZVqwZVFZG8b4Y/jrLu+D/fHoDWlpFXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:50:93:0b:43:ad:e1:71:18:18:3e:6e:95:14:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27618505d3b4c000217590f7b7b59bf61ff2f375
Validity
Not Before: Nov 11 09:01:44 2025 GMT
Not After : Nov 12 09:01:44 2025 GMT
Subject: CN=582e5a63b463d230b2644463c88fc20067134b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:d2:1a:2a:ac:a9:c2:42:3f:16:54:1c:e0:
35:16:c7:1c:27:8b:9b:0f:b4:26:03:92:bf:6f:dd:
b4:da:53:64:5e:45:14:c3:77:27:1a:42:3a:0b:e4:
dd:67:4d:bf:dc:f6:f6:17:87:e6:d8:9d:ac:97:f1:
aa:7b:42:f6:d1:d7:fb:8c:28:4a:25:12:1b:8b:65:
ed:48:6e:b4:3d:81:5c:5b:b7:f3:5c:7d:82:09:00:
b7:f9:67:8c:32:95:f6:57:34:b9:13:cf:52:48:6d:
16:22:4c:98:ec:8f:c7:11:de:0b:a5:2d:f7:ea:28:
21:cd:29:43:63:ad:dd:48:4b:0f:04:2f:cb:53:92:
70:59:58:28:9c:0d:07:5c:90:42:62:a2:55:cc:20:
55:af:d0:df:fe:52:6b:98:0e:55:da:35:33:e3:09:
18:81:4f:4a:87:40:43:5c:0a:a1:ad:f6:b3:c6:c7:
5f:9d:dc:ab:6b:7d:02:4b:2b:8b:09:74:30:79:b4:
59:f0:e4:04:1a:09:30:ca:69:5e:da:48:46:28:a1:
93:82:ae:36:f0:29:97:0f:b3:f8:5f:55:f7:e1:a9:
54:95:e0:99:f1:06:7b:7c:4d:a0:8b:9d:2b:1e:9e:
02:74:a1:59:d0:83:ff:65:16:7d:69:ee:20:f8:fb:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2E:5A:63:B4:63:D2:30:B2:64:44:63:C8:8F:C2:00:67:13:4B:95
X509v3 Authority Key Identifier:
keyid:27:61:85:05:D3:B4:C0:00:21:75:90:F7:B7:B5:9B:F6:1F:F2:F3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2GFBdO0wAAhdZD3t7Wb9h_y83U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7e6262-ecdd-4334-8b9f-9d5e59f76e6b/1/J2GFBdO0wAAhdZD3t7Wb9h_y83U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:35:bd:15:36:8a:8d:42:c1:7c:73:2e:5c:65:51:f8:98:ff:
1f:f8:7c:5e:8a:19:53:ee:ed:b0:7f:b1:29:18:b9:a9:9c:19:
54:cc:b7:77:56:69:a8:25:59:4a:2b:2e:35:f1:da:ea:ac:f9:
d7:3f:04:ce:48:b7:4e:b5:c2:1b:47:e4:0c:f7:49:77:83:bf:
0f:6e:3a:6e:36:0d:bb:3c:46:03:c0:fa:29:07:10:f4:23:73:
77:1d:47:4c:2d:73:eb:56:9f:60:80:f3:36:ec:6a:6d:c8:74:
86:3a:0b:28:ec:52:f4:9a:7b:05:a5:9a:ef:ec:7b:55:71:18:
4a:80:c5:42:6b:b5:42:bd:87:20:e0:2f:69:b5:41:02:36:3a:
70:c8:66:0a:f9:b3:c1:76:a5:0f:0d:21:6d:77:53:93:6c:bc:
31:1b:0a:26:34:87:b9:a9:23:3c:3b:29:77:ea:42:cf:65:50:
3a:f7:34:ee:b1:ed:04:f8:fa:9e:76:fb:9a:a9:30:58:08:8a:
d4:cb:53:7b:19:ed:e0:42:71:d4:cf:c8:17:c9:eb:e3:d5:54:
85:81:36:91:09:94:51:e7:68:76:36:2a:95:2d:48:08:d7:34:
14:de:34:f1:68:14:e2:20:00:eb:f4:eb:bc:8b:8f:a4:e4:94:
c0:9a:19:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:08:38 2025 by rpki-client