Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
File: J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json)
Hash identifier: 08LfsbfsYqwjdE6QfENG9OiYMAphNDfHWDhDv87lkpU=
Subject key identifier: 88:76:10:91:56:9A:C1:35:25:8F:54:E4:E8:15:18:81:7A:A4:E6:6F
Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
Certificate issuer: /CN=278617740ecd95b704da97a5f9e53c031144426b
Certificate serial: 019A70A4E13F2A5870B4797648DBDD76D158
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
Manifest number: 12C7
Signing time: Tue 11 Nov 2025 02:00:44 +0000
Manifest this update: Tue 11 Nov 2025 02:00:44 +0000
Manifest next update: Wed 12 Nov 2025 02:00:44 +0000
Files and hashes: 1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: piBUAU9NLQ2lc8oIwMz8H+XcrS8hDFuoYyWgk2tBB0E=)
2: hmlDPtU43ODpSbSwKm7b72QgfNg.roa (hash: yhUDh7b541QuzocbLv67rZZ0JwDcRkg1md4GPfBmUpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:e1:3f:2a:58:70:b4:79:76:48:db:dd:76:d1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b
Validity
Not Before: Nov 11 02:00:44 2025 GMT
Not After : Nov 12 02:00:44 2025 GMT
Subject: CN=88761091569ac135258f54e4e81518817aa4e66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:48:d4:da:98:6f:1c:73:b0:d3:fb:ec:c5:64:
bf:ef:61:04:b6:b3:7f:69:e9:7b:1c:7b:5e:a0:ea:
cc:b3:bb:d1:a2:ef:ab:44:33:88:ab:f0:d5:a3:03:
7b:44:1a:71:e3:6c:69:d2:2f:38:c8:dc:01:31:49:
c5:8d:9a:41:59:b5:0c:7c:d1:4a:24:c6:a8:45:3b:
1c:4e:25:96:97:00:b4:4a:e5:ae:0e:e0:97:7f:e8:
b8:65:df:0c:c2:7c:c8:b7:52:da:1d:29:21:2e:0c:
ba:4c:98:89:e3:f4:07:d6:40:3f:dc:dd:5f:e9:2f:
24:5b:46:08:ae:93:02:bc:2d:fc:63:72:66:f5:fd:
ad:42:13:8c:08:48:0d:79:e1:1e:63:de:c5:ba:ff:
80:48:f5:71:22:7e:e5:53:99:81:12:1f:2a:db:55:
c6:de:a6:6b:c6:aa:77:23:11:c7:a8:12:78:ae:13:
a2:82:1c:9e:61:2e:68:b9:05:d9:77:4e:25:d9:fe:
fe:81:81:3d:da:1f:85:23:ca:8e:e9:7b:d9:e0:f6:
88:e6:82:6f:61:da:2f:7f:1c:a7:72:2f:a7:cc:65:
93:9d:ea:3e:cd:8c:28:cd:61:fa:40:6e:e0:db:5e:
c7:4f:ca:49:ae:66:40:64:c9:c9:0d:c8:c8:0c:93:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:76:10:91:56:9A:C1:35:25:8F:54:E4:E8:15:18:81:7A:A4:E6:6F
X509v3 Authority Key Identifier:
keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:31:f8:3f:1f:96:c7:5e:6c:43:4c:9b:40:40:6f:34:b3:c7:
1e:a3:40:e9:c5:9c:f0:12:09:85:e8:ae:ed:fc:b4:5a:ec:50:
85:e3:bd:d2:68:30:e0:27:d5:1a:8f:3d:95:07:69:0b:29:fc:
8a:43:f6:43:f7:9d:c8:25:72:56:fe:b0:69:49:d2:36:6e:ce:
20:c9:d6:f1:10:a1:52:a4:5d:b7:a6:d6:ba:8c:7e:a7:f2:0a:
ec:9e:ab:a7:ba:9d:17:08:5c:1b:96:e1:33:7e:90:5c:fc:f7:
6e:29:b7:49:76:61:53:a9:8c:ed:93:21:ea:d2:72:59:f1:72:
37:34:d7:78:85:ff:34:22:03:7f:38:42:e6:4f:e2:ba:05:b7:
eb:fb:7d:08:6f:8f:96:dd:aa:54:37:ff:df:e7:dd:d1:78:3e:
4a:32:8f:f0:fa:d1:81:6e:a3:d4:9e:3b:6d:2f:1a:75:72:ab:
33:cb:93:d2:ab:ba:54:b0:69:e9:c5:63:8f:22:21:2e:95:9a:
d8:d3:99:7f:eb:67:38:c4:9c:0f:44:3e:b0:d0:fc:c3:37:62:
98:ea:fe:33:dd:3b:7f:bc:4d:72:ca:18:66:9c:55:fa:4d:d4:
d5:6f:41:b8:59:72:67:b0:5d:2c:13:72:5b:81:18:a4:b1:dd:
20:b3:58:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:55 2025 by rpki-client