Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: CtNzjtvXcWmBOtCR+XYjHN8iQZ8UeBSWjoNfnC8d9nE=
Subject key identifier: FF:6D:63:BC:18:D7:72:A0:67:C7:2C:27:82:D5:A4:A9:EB:A0:2C:E0
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 019A571C47DA6BACE6F6D147390B9F801E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 0FEB
Signing time: Thu 06 Nov 2025 03:01:02 +0000
Manifest this update: Thu 06 Nov 2025 03:01:02 +0000
Manifest next update: Fri 07 Nov 2025 03:01:02 +0000
Files and hashes: 1: 7z6VwEslCL2FPJkLcnWBqsZx-Yc.roa (hash: 4HX05uMrwNGyncqNvEyr0SjiIMdyEc2AyvawA9NsEGo=)
2: H1ODV9W4buqhl3EqdtbJBcTx8bE.roa (hash: ACjxboSyCSfEn+fJ3xsL41v0ySwcobd1/VO5RHv6Sbs=)
3: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: oSw5sAG+9uwd2nN8kMeDgv6+J/hHtlqLGz5xWckMvHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:1c:47:da:6b:ac:e6:f6:d1:47:39:0b:9f:80:1e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Nov 6 03:01:02 2025 GMT
Not After : Nov 7 03:01:02 2025 GMT
Subject: CN=ff6d63bc18d772a067c72c2782d5a4a9eba02ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:66:4c:01:c4:06:2e:d7:a2:30:c5:4b:4c:e5:
cb:7b:73:56:7a:1c:d7:fd:45:fd:19:ba:e5:c4:f0:
1f:29:5e:f8:8b:4a:41:b3:8b:ac:62:3d:da:b5:1b:
23:84:1b:2a:a9:70:e5:63:04:f3:f0:5e:91:f0:aa:
30:54:c5:ed:de:d8:e9:4b:b6:8c:b3:a1:05:bb:00:
43:6e:9e:f8:60:a1:75:08:1c:21:2d:9d:59:40:7d:
e7:5e:64:a1:fd:27:a9:c3:b4:e1:0c:9f:6c:fd:a9:
7d:fd:e0:25:d0:76:6d:50:b4:86:e2:97:c1:3c:bd:
76:5e:15:ec:33:70:f4:ad:75:9b:e3:e2:cf:56:28:
cd:38:ef:94:b5:f0:32:f9:38:03:d6:14:f0:79:2b:
d3:72:11:ed:6b:33:7f:3f:8e:11:da:9b:7b:99:4c:
c2:2a:77:9e:ab:8a:b0:2d:f7:be:9f:c0:da:1d:e9:
15:9e:2d:6d:58:40:b8:83:a7:d2:d7:40:b9:4c:47:
a6:c8:7a:ba:24:3e:7a:21:8d:e2:4e:c6:a2:4d:2a:
f3:65:33:2f:e8:fe:36:12:c9:aa:56:ae:ac:d0:bb:
07:60:b0:79:c2:ed:ef:89:fe:0f:f6:b7:25:39:a9:
4a:92:84:b5:18:3c:92:6f:17:bb:58:99:db:fa:a5:
38:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:6D:63:BC:18:D7:72:A0:67:C7:2C:27:82:D5:A4:A9:EB:A0:2C:E0
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e1:62:b4:25:1f:96:21:14:dd:2c:d9:d8:1d:e2:05:d0:66:
e5:80:03:04:44:a0:1f:3b:21:35:5c:2e:91:3d:dd:47:22:29:
5a:1c:a6:85:e2:c3:70:0c:9e:64:d2:f5:32:d0:09:6d:aa:9a:
71:92:c5:2e:38:64:89:2e:c2:eb:03:9b:86:36:67:4b:ad:f7:
54:54:5b:16:3a:52:ad:44:77:46:13:b9:cb:0d:bb:1b:c4:3e:
c1:45:dd:21:f3:98:ed:b9:b3:a0:ab:ae:d4:88:7b:00:90:45:
1e:6e:50:7a:44:64:bd:64:0b:73:10:79:6e:e5:6d:6c:8e:14:
50:2b:ba:9f:02:73:26:35:5b:ad:20:32:a1:cd:99:75:99:b9:
02:4e:ff:74:0b:64:49:b2:87:70:66:3d:49:1d:72:55:27:87:
ca:0f:3a:8b:bd:48:7f:5c:6b:88:1f:a9:38:71:e1:1b:98:35:
1b:7a:21:15:2d:91:50:ed:8c:25:18:61:1a:78:3f:67:73:1b:
26:8b:5a:ce:cb:d6:e9:88:80:f7:9e:9a:61:0a:76:cd:2a:ce:
6e:0d:b3:b0:0c:37:41:66:8f:da:4a:8d:a1:51:6b:8a:2c:8b:
66:04:07:73:4c:92:f8:85:e4:d9:68:af:e6:79:e5:e7:41:f6:
63:f9:3f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 08:15:46 2025 by rpki-client