Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
File: J8Y3pwndvn9iN6-NWykTtCI3FXw.mft (raw, json)
Hash identifier: Tdpr7nD1JFgZgfdoEj2fBpbBJ6te9c05UXdM8fQ/4uQ=
Subject key identifier: 30:D7:92:66:B7:B5:76:50:B1:2A:AC:57:D5:3B:4B:80:3D:97:EC:02
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Certificate issuer: /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial: 019A4EF427B4B6C03CCB16EBBAD229E90D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
Manifest number: 0E03
Signing time: Tue 04 Nov 2025 13:00:14 +0000
Manifest this update: Tue 04 Nov 2025 13:00:14 +0000
Manifest next update: Wed 05 Nov 2025 13:00:14 +0000
Files and hashes: 1: J8Y3pwndvn9iN6-NWykTtCI3FXw.crl (hash: YlyN1fsK8Q5Xov9tBjhBSwDPSpdP1DXJT5hE20dHSdU=)
2: dlmSMThgfzEt-EoGdzxxYyd6AvA.roa (hash: II2qv/R+riqTZycAWnh60efymgX6QJpKVeYxCLVnyks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:27:b4:b6:c0:3c:cb:16:eb:ba:d2:29:e9:0d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Validity
Not Before: Nov 4 13:00:14 2025 GMT
Not After : Nov 5 13:00:14 2025 GMT
Subject: CN=30d79266b7b57650b12aac57d53b4b803d97ec02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:06:12:a7:a6:d9:5a:84:af:c0:d6:77:8c:
08:30:e8:12:6f:aa:9e:5f:43:4f:9c:d6:d9:78:e6:
69:ff:fd:2e:44:57:6a:c5:d8:09:a6:00:6e:39:b1:
e9:e6:d0:c1:45:77:ac:28:a9:07:ba:2a:94:ee:51:
c3:c7:33:68:e5:23:ec:ce:cf:ca:92:57:7f:0f:71:
5b:73:df:b7:e2:c2:94:ff:20:46:6f:17:99:c0:37:
93:84:21:f4:dd:9a:24:08:a5:73:49:a9:d4:6b:a0:
7d:a5:c6:b1:62:89:27:8d:1b:8a:bf:ba:2f:10:89:
20:26:36:1b:46:c7:48:7d:7a:09:50:03:bf:3f:24:
b8:91:7d:28:92:10:07:21:4a:e5:38:8a:87:8b:41:
03:59:6b:98:ac:90:46:4b:9c:f2:ec:4b:29:f9:22:
1a:3a:62:bf:8a:3d:74:1d:bb:33:3f:8d:98:bf:db:
03:40:36:fd:60:60:8a:d5:bc:f0:88:34:dc:ca:b1:
4c:af:ab:ae:8e:60:c5:03:60:4b:11:44:69:18:b4:
80:81:e3:8e:f6:64:f0:ba:53:26:db:79:5b:1c:34:
61:b1:45:11:3b:53:00:34:b1:01:36:fc:ba:2d:64:
fe:ca:1d:65:dc:03:37:1f:1e:da:38:85:a9:8e:cb:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D7:92:66:B7:B5:76:50:B1:2A:AC:57:D5:3B:4B:80:3D:97:EC:02
X509v3 Authority Key Identifier:
keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4c:1d:f0:9f:6f:ad:c2:6a:b9:e0:50:cc:af:6d:93:28:3c:
26:43:b2:05:1e:68:c1:69:11:8f:f7:68:1e:3c:36:9f:78:f0:
ec:4c:41:8f:93:2c:87:db:d6:14:ad:45:47:09:a0:1c:06:77:
04:3c:3b:13:47:5f:5a:c0:23:53:a1:2c:f3:3b:e9:f3:8b:ca:
e7:0d:2f:d1:6d:58:bf:b5:96:a5:93:31:17:8b:1c:d1:72:e5:
60:20:b0:df:95:4e:6a:3d:2f:bb:94:b5:c9:e2:23:1e:46:a0:
97:59:7e:79:71:af:a7:98:74:c1:02:1e:f6:08:20:2f:27:ce:
c7:80:2e:f7:fd:f8:98:e2:de:7c:19:8c:66:a3:5b:79:f1:31:
f5:d1:65:b2:e4:0f:3f:ee:ab:31:ab:12:e2:05:31:9e:51:1e:
63:29:6f:df:69:d9:8a:a5:96:36:82:1c:db:3d:fc:31:cb:f9:
b7:af:c8:d2:21:c6:bf:19:19:06:9d:da:a5:35:be:37:31:6c:
8f:11:60:66:a3:71:3c:26:09:b1:f1:e3:49:7a:a6:4c:0e:05:
81:d2:70:5a:cf:1c:16:28:ae:90:81:78:a7:c8:04:67:19:d3:
28:98:c8:64:52:9b:5c:06:3c:24:65:6d:28:3f:09:8f:0e:0b:
16:1a:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:32 2025 by rpki-client