Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
File: J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft (raw, json)
Hash identifier: HD0miODJ+L+M4FCGqgCYys3wSRbiAFxpkhIR73gJink=
Subject key identifier: B2:BC:2C:CC:2D:F8:34:E9:6E:2F:40:34:15:5B:86:5D:54:66:7B:51
Authority key identifier: 27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
Certificate issuer: /CN=27802685da734b157a2db9ccff76dd4e48911928
Certificate serial: 019A4F98D78EF5B0042AE56AA4177BE695A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
Manifest number: 1426
Signing time: Tue 04 Nov 2025 16:00:07 +0000
Manifest this update: Tue 04 Nov 2025 16:00:07 +0000
Manifest next update: Wed 05 Nov 2025 16:00:07 +0000
Files and hashes: 1: J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl (hash: NktUBjInAAPBfomfryChNHdJWSC7vQlsJaRnPqKtge4=)
2: bMRktPBk3GJGItNskNyUqcrOWmw.roa (hash: oN+XpyM7329DMObxCObtViAvj7EaNMyaASixYhlQlxY=)
3: qA9dHWC6g1Mf2FGuCg-UfT6dHa4.roa (hash: tu6gozK2xpe2ojLmfpogjmMhCMxCaqiedX62p8ai78g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:d7:8e:f5:b0:04:2a:e5:6a:a4:17:7b:e6:95:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27802685da734b157a2db9ccff76dd4e48911928
Validity
Not Before: Nov 4 16:00:07 2025 GMT
Not After : Nov 5 16:00:07 2025 GMT
Subject: CN=b2bc2ccc2df834e96e2f4034155b865d54667b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b9:3e:17:16:f3:97:7e:c7:4f:17:ce:37:62:
bf:71:33:fd:5a:a4:69:83:89:c7:6c:a8:6b:da:e9:
03:b6:c7:27:c2:e3:3b:99:b9:10:1c:12:6f:db:63:
92:d1:64:8b:e3:66:80:b4:2e:25:9e:15:09:80:5d:
ff:be:6e:48:21:a6:6a:3b:f9:f1:f9:b9:cf:fb:5e:
34:48:e5:ec:5d:bc:07:4c:65:cc:81:7e:a0:40:83:
66:92:6a:95:ba:97:2f:ff:36:d8:a4:54:22:42:1b:
9e:51:8f:b8:fe:8e:1a:b7:60:d7:25:e4:ce:a2:d9:
37:b1:77:2c:5c:92:f6:5e:93:c4:a5:31:8d:4b:d9:
16:6d:7a:02:b6:13:64:a8:30:61:71:0c:d1:8c:30:
ca:0f:26:09:a8:34:3a:0e:98:7c:d2:65:8b:ad:08:
4b:67:dc:e8:25:0e:73:40:8a:ba:14:5b:18:49:16:
4e:14:d4:de:5d:e4:42:e2:40:21:95:ab:01:76:83:
84:6c:ea:39:00:66:98:43:38:09:7c:5d:15:24:b9:
77:03:28:02:99:aa:2c:00:55:ff:1a:b9:43:2d:d8:
47:e9:26:16:79:a8:70:98:17:79:9e:71:3f:3e:19:
2e:b5:ea:68:f2:08:11:b1:0c:c0:a9:29:61:c7:e2:
8b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BC:2C:CC:2D:F8:34:E9:6E:2F:40:34:15:5B:86:5D:54:66:7B:51
X509v3 Authority Key Identifier:
keyid:27:80:26:85:DA:73:4B:15:7A:2D:B9:CC:FF:76:DD:4E:48:91:19:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4AmhdpzSxV6LbnM_3bdTkiRGSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8e5d65-5912-418e-9c01-123a86d94818/1/J4AmhdpzSxV6LbnM_3bdTkiRGSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8e:27:82:5a:fe:a7:44:6f:98:6b:b0:49:71:ee:57:86:36:
d2:ce:ae:1f:e1:1e:87:2e:de:f0:e3:a8:a4:fa:22:e2:09:08:
f1:38:90:7e:e7:56:fb:23:c0:b1:9a:7d:af:bc:c9:93:9d:f5:
a1:1c:f5:24:36:8c:39:7c:61:a4:b4:3b:e8:92:d2:a9:38:ec:
ad:dc:e3:14:97:1d:7a:bd:cf:7c:10:40:b5:3c:03:62:66:b7:
bb:2c:dd:40:e5:d9:40:13:c2:97:53:71:34:84:6d:f6:6d:9a:
0c:2c:01:17:53:2b:cb:4d:ae:5b:13:7b:82:14:79:a9:0f:1e:
0e:e5:3a:d6:8d:19:fe:b9:b1:c0:9a:f5:3e:8e:57:b7:1a:a5:
12:f3:c3:b5:f5:1f:20:5b:08:df:43:ed:4d:14:f0:af:75:b3:
a2:0d:67:77:ee:bd:16:06:c5:e4:7d:a3:07:24:10:b0:cc:d9:
da:0c:6e:6e:f5:05:d4:34:eb:85:50:d9:07:cc:b4:13:4f:14:
b1:98:2f:10:57:7d:97:dd:47:ea:8d:7e:2e:b6:48:27:84:ad:
a4:3f:30:b1:e4:62:4c:4b:b8:3d:17:22:d3:29:05:07:0c:6c:
e4:20:de:33:d7:46:f2:33:f8:80:ec:b1:2c:6d:33:76:fe:33:
23:5e:8b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:51 2025 by rpki-client