Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: 2TQWMsCQRsAWuPzjUPOnI/ssNSLJetfUk3TJEQ/LQYg=
Subject key identifier: D0:F6:94:E5:EF:11:61:FF:99:96:56:3B:9A:F9:D9:DD:B8:9B:10:EC
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 019A4E18C56190596634F3C00E229AE1B4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 122E
Signing time: Tue 04 Nov 2025 09:00:37 +0000
Manifest this update: Tue 04 Nov 2025 09:00:37 +0000
Manifest next update: Wed 05 Nov 2025 09:00:37 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: KacBtkyswkpV6HBAugAD/lIZuia8+H5h294la/BOyAE=)
2: _pQtR1EJpgHMSOkTmSK_Er0tXsE.roa (hash: m5yMM2ApK+4Me2gJxPiOKP0gpYE7to93xl8Fx6CP7v4=)
3: qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa (hash: fwjzyDVkTfLPWzdH9pq6+z0fYQ+pKyYb7cgFc8eFsFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:c5:61:90:59:66:34:f3:c0:0e:22:9a:e1:b4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Nov 4 09:00:37 2025 GMT
Not After : Nov 5 09:00:37 2025 GMT
Subject: CN=d0f694e5ef1161ff9996563b9af9d9ddb89b10ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c7:4c:67:07:2c:7e:68:58:c4:b8:41:9f:c6:
04:79:5f:d2:aa:ab:66:cf:1a:01:79:f8:6e:e6:1c:
1f:2e:66:b8:8d:9c:33:f3:12:4c:cf:e6:4e:b1:fd:
7c:a2:48:05:bd:fb:cb:23:a6:3a:7a:7e:c0:35:42:
6d:b7:d9:5a:fb:53:62:7f:27:01:ee:9c:fe:25:25:
7f:b0:ba:53:e2:87:5b:52:5e:16:ef:2e:b0:29:ad:
e0:dc:63:28:b6:3f:54:6d:13:81:67:eb:84:90:c0:
d3:76:ef:22:ec:41:5f:d0:ea:8a:3d:22:f0:29:79:
44:df:41:f0:47:ec:63:2c:ce:87:a5:ef:20:12:8a:
b5:06:59:f3:33:b6:aa:11:14:4e:03:93:de:f5:63:
c1:e0:a8:89:63:e8:48:a4:cb:7a:4f:86:9e:78:91:
18:7f:3b:eb:64:8f:1c:d8:42:9d:e8:4d:97:4e:11:
f5:a8:0f:fe:4a:99:ae:c4:23:fa:13:ff:d9:bb:90:
dd:80:0e:ad:fd:1c:b4:33:0b:a1:27:bc:0a:23:8c:
fb:8a:d9:ca:c8:b8:ed:6c:f3:69:ce:3a:28:71:de:
b8:62:df:b9:c2:d2:f8:24:25:ae:29:b7:d2:ec:9e:
1b:51:ee:e0:6f:69:97:fb:bd:63:dd:17:3f:7d:ff:
57:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F6:94:E5:EF:11:61:FF:99:96:56:3B:9A:F9:D9:DD:B8:9B:10:EC
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c8:51:4b:cd:df:fb:bf:10:0b:56:18:9b:8b:02:13:e6:f0:
44:90:13:c7:f2:fa:b0:2b:83:0b:b3:cc:5c:e6:f5:c1:fe:6c:
26:e9:f4:13:60:26:af:bc:b8:f6:76:0c:ff:1e:59:40:96:e1:
ce:31:53:d5:b4:5d:b2:ef:fc:36:2a:2a:90:2b:3d:2d:11:2c:
5f:90:e3:b8:f3:aa:c8:11:21:ea:a7:4e:29:cf:4d:da:98:2a:
3f:a6:da:a3:ff:af:6e:b6:ac:07:0c:3a:f0:ea:d9:95:1a:b7:
ec:d6:53:bd:a5:d4:58:21:d1:b5:4c:79:8d:d8:ee:ad:15:5a:
65:74:52:e6:44:46:33:71:ce:4a:8b:09:df:71:3e:3a:7c:33:
60:8d:e9:16:e9:c5:ab:ed:9b:45:ee:cd:f2:5c:4d:3a:2d:b4:
50:c1:41:57:7f:7e:c7:23:8c:5b:10:2d:c1:1e:7b:3a:07:89:
56:4a:23:ba:6b:ec:31:0a:7c:9f:19:82:35:b2:93:a9:ed:4b:
ea:6b:04:5c:70:18:b6:22:41:82:78:41:c5:d2:39:eb:36:ca:
93:bb:54:c0:54:38:c0:f2:47:df:dd:56:27:2a:a6:47:4b:47:
86:66:c7:79:3f:49:08:bb:d4:21:94:b1:87:e5:67:b4:94:b9:
b8:ae:54:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:46 2025 by rpki-client