Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json)
Hash identifier: VyXJiBgeJ0vClScpM/ICVcXq+3qKVr86p32GiRQk+1I=
Subject key identifier: 4F:08:3A:9D:DD:8B:C8:25:8F:00:2F:58:5E:C8:D0:78:16:42:E9:6C
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 019A4E8684A12EA53E157508059A08446654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
Manifest number: 1171
Signing time: Tue 04 Nov 2025 11:00:29 +0000
Manifest this update: Tue 04 Nov 2025 11:00:29 +0000
Manifest next update: Wed 05 Nov 2025 11:00:29 +0000
Files and hashes: 1: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: geeqF5lhLurdTeVs/vEIBS9DOvHJt7qhf98xWbm30cQ=)
2: YmG5FcsW3S43XyijT62zmWMd610.roa (hash: Sh1sRBIDqrknsDPBNOeRI3CSuT41xnHIPduRy76n3aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:84:a1:2e:a5:3e:15:75:08:05:9a:08:44:66:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: Nov 4 11:00:29 2025 GMT
Not After : Nov 5 11:00:29 2025 GMT
Subject: CN=4f083a9ddd8bc8258f002f585ec8d0781642e96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:13:07:4e:9e:c9:b1:ec:84:dc:8a:00:eb:
cc:70:9f:47:b2:70:13:fc:5d:6d:53:5f:d7:68:c6:
e7:7e:5f:65:ff:c7:c0:cb:0e:6a:90:79:7c:16:4e:
53:8d:1f:f7:de:8f:54:c1:a7:46:e8:68:0c:42:91:
57:7f:8c:43:8a:bd:7c:23:a7:ba:41:3d:0c:8d:70:
f8:6b:a9:ca:d9:61:46:8e:08:c6:aa:86:ae:69:62:
e1:86:d0:b0:e8:97:81:e4:98:d8:38:82:08:e7:34:
99:4b:aa:55:b9:c3:b7:4c:51:5e:42:f3:86:f1:84:
d2:50:a8:af:38:62:c2:5d:8e:f5:05:94:ad:34:59:
43:12:f4:99:dc:c0:27:54:71:47:7e:44:52:10:af:
58:25:13:ee:13:35:11:d4:d4:07:9c:a6:b9:82:9c:
6a:3e:6e:8b:da:53:cf:9a:a4:fc:c6:18:01:2e:4c:
ed:5f:8d:92:7d:51:40:0a:08:72:45:2c:c0:aa:c6:
31:c2:78:9b:ff:84:2c:c1:b8:34:78:d4:1e:88:2d:
e4:0d:f4:c1:12:71:a3:8e:82:41:d6:f8:22:ef:8b:
3e:34:ef:73:c9:8b:ef:fd:81:76:63:41:6b:ec:4d:
27:4c:f0:27:e2:1b:30:c7:b1:c7:b4:61:e3:a1:62:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:08:3A:9D:DD:8B:C8:25:8F:00:2F:58:5E:C8:D0:78:16:42:E9:6C
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bd:ec:41:da:3b:2c:ff:48:54:8f:ed:cc:19:58:7f:19:ca:
7e:c1:4b:b1:2d:b5:67:7c:e3:04:66:22:09:cc:93:21:7d:49:
14:70:19:a9:c4:67:9c:fb:03:7e:93:de:19:46:4e:9a:ee:d1:
73:de:9d:c0:ff:9d:6c:f8:0d:a3:c7:87:f1:0b:77:5d:c6:66:
bb:b9:eb:d9:3f:5e:7b:0f:c0:83:10:e2:e9:7c:c7:26:8c:75:
17:23:f8:c1:d7:10:45:29:52:5a:a9:68:e6:fe:c0:03:15:c7:
6a:08:42:2d:08:3a:da:2c:39:83:d9:a8:eb:72:38:e2:75:32:
26:90:3c:c0:b3:71:49:04:a1:79:9e:6c:4a:fd:41:cb:4b:07:
7c:fc:a4:42:79:d0:61:46:c3:44:0c:6c:d0:04:d8:d4:cb:e6:
b0:34:a9:85:20:0c:2a:7c:cf:14:59:66:b4:a6:c8:c1:07:43:
64:15:32:b2:dc:66:d1:d9:b0:d7:2d:92:2f:65:12:03:c9:9f:
93:84:e5:ab:cd:9e:2a:82:53:d7:52:dc:40:c2:6f:49:a3:c0:
10:03:1a:43:ff:35:9b:f6:ae:8e:21:6a:bc:f0:43:9e:88:5d:
2d:67:89:dc:5c:23:a5:0f:1f:34:8f:5f:2d:43:dc:01:48:10:
a3:b7:cb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:55 2025 by rpki-client