Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File: J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier: Exclgf4BmsgL6kNQTxQVUi5Jg7PR0X2FKIl3nbcsmgI=
Subject key identifier: C0:47:B1:C0:3D:08:8B:F7:76:C8:29:E9:76:93:5E:50:4F:42:AA:9E
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer: /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial: 019A4EF4EEF0A5CB732711CFCEE9E3C367F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number: 1385
Signing time: Tue 04 Nov 2025 13:01:05 +0000
Manifest this update: Tue 04 Nov 2025 13:01:05 +0000
Manifest next update: Wed 05 Nov 2025 13:01:05 +0000
Files and hashes: 1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: G1+WIV9aiyi9fWfV8rRCKfGfCzUVGgKLJ49D9l7tYBo=)
2: M2Kelg9WxvDQBMzJqioPXlZdWcE.roa (hash: mQA6DzGnOtrnPFm8tdzPvg5lmx/E+CRmFPMNFXsiBjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ee:f0:a5:cb:73:27:11:cf:ce:e9:e3:c3:67:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
Validity
Not Before: Nov 4 13:01:05 2025 GMT
Not After : Nov 5 13:01:05 2025 GMT
Subject: CN=c047b1c03d088bf776c829e976935e504f42aa9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:c5:d9:0d:0d:64:95:bf:75:4a:86:07:a9:
f1:d9:ec:5e:54:a0:37:c3:1a:35:47:3f:b3:8a:81:
ed:2b:f1:c9:9e:87:35:87:2c:08:d1:83:dc:b0:c2:
e6:a4:1b:9a:ab:d6:0b:45:a1:58:07:8f:d0:f3:39:
60:e8:ee:8a:d6:7f:32:fa:f8:61:8d:e3:f0:65:27:
f3:c4:64:ab:c0:a1:54:d4:c1:d8:41:eb:13:81:e1:
c3:5b:6e:5a:91:0d:ef:fc:5a:1c:49:15:b0:ee:c1:
5f:e5:e0:44:b5:bd:26:94:ea:c0:37:83:fc:f0:8c:
ed:1e:64:2a:9d:da:07:fb:f3:ed:68:e9:93:18:89:
84:e8:8c:3a:61:e3:71:19:a5:0a:d0:12:ab:2f:9f:
33:6b:9e:3b:fb:f1:9a:9a:4f:1c:20:40:b9:cb:b3:
8a:d3:4e:03:15:71:7f:d2:ba:d1:78:55:7a:cc:94:
63:de:8a:16:39:5d:8b:d3:9a:62:df:84:bf:f0:0a:
da:c4:28:44:24:97:26:e2:9a:d9:bd:1d:68:e7:35:
32:c8:42:ef:dc:ca:57:61:b9:e5:92:56:1a:8b:4c:
99:96:e7:49:80:dc:57:f8:b1:12:0e:c0:2f:8c:73:
23:1a:1f:0c:7e:5a:5f:22:8b:02:24:9d:08:38:ff:
38:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:47:B1:C0:3D:08:8B:F7:76:C8:29:E9:76:93:5E:50:4F:42:AA:9E
X509v3 Authority Key Identifier:
keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f7:af:20:d0:84:38:f4:d0:9a:aa:65:51:c5:8e:fe:45:7f:
28:68:50:82:14:d0:e9:e0:27:55:8f:00:7f:bf:50:1d:17:b8:
37:5a:c1:26:46:61:b2:1a:e3:46:cc:46:6f:49:1a:0f:fe:88:
7b:4d:ec:3c:f4:76:fe:42:c9:0d:a8:b5:90:d5:32:01:65:43:
0b:f7:c2:6b:ad:84:b9:05:84:44:69:49:6b:f8:c0:db:fd:3c:
bc:6e:cb:0e:28:31:48:aa:72:e3:75:f6:d1:58:38:5f:b3:bc:
d3:01:18:05:6a:e1:26:ff:80:64:6a:df:91:55:6c:52:55:8f:
bf:08:6e:a4:53:d8:2c:ec:40:3d:e1:98:47:01:6f:9b:84:e1:
2a:2c:44:ac:63:47:c4:5d:b2:4b:fc:b2:07:99:43:fb:54:f7:
0c:7f:e7:35:4d:eb:57:86:4d:7c:fc:42:be:c4:2e:d5:97:20:
b3:67:74:67:a6:5f:4f:f2:71:00:3a:75:c9:5f:fa:d1:16:b3:
d3:60:1b:43:78:cf:fd:4e:70:34:07:a4:46:ea:25:46:4b:59:
05:8b:60:e8:de:3c:e4:25:9a:c7:58:ef:79:19:0f:6b:83:b4:
a4:b6:30:f5:05:5c:24:1c:dc:e5:ae:e9:75:dd:b9:33:03:c6:
8a:06:19:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9O7wpctzJxHPzunjw2fzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWYzNjUyZTQ0NThmYTAwMWM2NzM4YTQxNDI1YjA3ZTcw
YzkxYTEwHhcNMjUxMTA0MTMwMTA1WhcNMjUxMTA1MTMwMTA1WjAzMTEwLwYDVQQD
EyhjMDQ3YjFjMDNkMDg4YmY3NzZjODI5ZTk3NjkzNWU1MDRmNDJhYTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj/F2Q0NZJW/dUqGB6nx2exeVKA3
wxo1Rz+zioHtK/HJnoc1hywI0YPcsMLmpBuaq9YLRaFYB4/Q8zlg6O6K1n8y+vhh
jePwZSfzxGSrwKFU1MHYQesTgeHDW25akQ3v/FocSRWw7sFf5eBEtb0mlOrAN4P8
8IztHmQqndoH+/PtaOmTGImE6Iw6YeNxGaUK0BKrL58za547+/Gamk8cIEC5y7OK
004DFXF/0rrReFV6zJRj3ooWOV2L05pi34S/8AraxChEJJcm4prZvR1o5zUyyELv
3MpXYbnlklYai0yZludJgNxX+LESDsAvjHMjGh8MflpfIosCJJ0IOP84WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBHscA9CIv3dsgp6XaTXlBPQqqeMB8GA1UdIwQY
MBaAFCefNlLkRY+gAcZzikFCWwfnDJGhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjU4MlV1UkZqNkFCeG5PS1FVSmJCLWNNa2FFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9iOWMyZTItMzdiNi00MmM2LWFjZGEt
ZjhlNmJmZTFhZGZiLzEvSjU4MlV1UkZqNkFCeG5PS1FVSmJCLWNNa2FFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9iOWMyZTItMzdiNi00MmM2LWFjZGEtZjhlNmJmZTFhZGZi
LzEvSjU4MlV1UkZqNkFCeG5PS1FVSmJCLWNNa2FFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/evINCE
OPTQmqplUcWO/kV/KGhQghTQ6eAnVY8Af79QHRe4N1rBJkZhshrjRsxGb0kaD/6I
e03sPPR2/kLJDai1kNUyAWVDC/fCa62EuQWERGlJa/jA2/08vG7LDigxSKpy43X2
0Vg4X7O80wEYBWrhJv+AZGrfkVVsUlWPvwhupFPYLOxAPeGYRwFvm4ThKixErGNH
xF2yS/yyB5lD+1T3DH/nNU3rV4ZNfPxCvsQu1Zcgs2d0Z6ZfT/JxADp1yV/60Raz
02AbQ3jP/U5wNAekRuolRktZBYtg6N485CWax1jveRkPa4O0pLYw9QVcJBzc5a7p
dd25MwPGigYZ8Q==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:21 2025 by rpki-client