Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
File: J4dqqRe20B2U_yVmKwj7IT8P570.mft (raw, json)
Hash identifier: e72+rHg7Po+FoCdOvPmx9ySWUG7vqzbqkG9QDvYBgk8=
Subject key identifier: 14:38:92:F7:58:42:1D:33:51:E9:A1:DE:3E:6D:87:12:5B:27:00:25
Authority key identifier: 27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
Certificate issuer: /CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Certificate serial: 019A4EF592ECA9A6D2E366C4228C376076D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
Manifest number: 1099
Signing time: Tue 04 Nov 2025 13:01:48 +0000
Manifest this update: Tue 04 Nov 2025 13:01:48 +0000
Manifest next update: Wed 05 Nov 2025 13:01:48 +0000
Files and hashes: 1: J4dqqRe20B2U_yVmKwj7IT8P570.crl (hash: iH8zuyBQDASFLYrCHyIUG6jXxzNn8O1bA4XknJi65GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:92:ec:a9:a6:d2:e3:66:c4:22:8c:37:60:76:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Validity
Not Before: Nov 4 13:01:48 2025 GMT
Not After : Nov 5 13:01:48 2025 GMT
Subject: CN=143892f758421d3351e9a1de3e6d87125b270025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:8d:3d:d9:7a:e5:17:48:01:da:8d:bd:9e:
7a:5f:76:d5:14:2b:9a:c2:6b:30:84:ee:4d:5c:4b:
b2:7f:8a:35:5f:44:4a:47:91:86:e2:e0:c2:7c:29:
67:e9:35:26:31:0c:b5:c2:67:03:09:32:c6:bc:c4:
ce:60:09:7e:74:2c:ca:7c:f4:1b:f0:5e:de:ac:27:
79:cb:7d:87:cf:b5:a9:7b:64:6f:f4:f7:e6:87:67:
a6:e5:79:3d:cb:4b:31:1c:29:c4:fd:36:6f:e4:1d:
e3:0b:54:4a:ef:23:07:89:e0:8b:58:1c:ce:84:9f:
2e:11:87:5b:99:1d:3e:0a:9b:17:82:00:7d:c9:b1:
56:a1:ed:74:b0:7f:4e:c8:70:be:5f:9b:85:fd:ac:
a5:81:bf:c9:50:94:0f:13:8d:dd:b9:2f:9e:9b:a5:
f4:0c:95:39:11:59:e5:05:71:76:18:f8:ed:e8:35:
d5:d2:8e:a5:00:97:a9:03:14:5e:fc:88:6e:b0:10:
07:34:4a:ef:9a:4b:53:2b:d6:96:14:a0:20:a2:97:
a0:63:ad:82:ca:ae:63:a1:82:a9:fd:39:36:54:30:
ef:a3:77:9d:7e:67:de:e7:67:ba:d3:6d:04:21:5f:
e5:0e:af:a4:c6:60:f7:76:df:5f:ae:27:e4:e4:f1:
a6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:38:92:F7:58:42:1D:33:51:E9:A1:DE:3E:6D:87:12:5B:27:00:25
X509v3 Authority Key Identifier:
keyid:27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:30:84:1c:4d:26:7b:ba:9f:3f:ce:9b:bd:ee:90:f1:2b:3d:
d9:41:54:f1:68:22:0a:7a:5f:17:a7:22:ca:05:27:90:ae:ed:
ea:eb:31:cb:55:0b:3b:93:ea:5a:eb:f0:6a:55:92:2a:fb:92:
33:51:95:3c:2f:b0:0f:33:9e:77:8f:af:32:3b:2c:a5:3f:20:
34:8e:41:8e:fc:58:88:7a:3f:2e:a8:89:5c:78:47:6b:2d:88:
79:cf:fb:04:bd:24:d8:35:51:01:7a:b3:dd:47:7f:7c:15:7d:
dc:c6:63:5d:e2:04:4f:b0:71:a5:f4:d6:58:38:e6:5e:6c:5f:
f6:44:43:66:f2:18:ab:4f:cc:a7:44:33:21:8b:27:1b:54:3c:
12:68:92:f4:24:ce:58:c5:1a:20:af:3d:1a:04:63:27:73:64:
2f:35:1a:17:00:6e:7f:ea:be:69:76:fa:2b:eb:b2:da:c2:23:
ff:e5:cd:16:d9:5c:17:22:41:dc:83:66:8d:d4:7d:59:e3:6f:
34:14:fc:f0:cc:56:00:5d:5a:d2:6e:1f:b2:e8:e8:0f:35:fa:
11:46:a5:21:67:35:f7:f2:ad:be:5c:7a:55:19:da:6f:a6:8f:
13:ca:01:ac:fc:59:83:53:6d:7b:50:f7:9a:d5:30:2e:2c:eb:
bb:4e:f2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:32 2025 by rpki-client