Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
File: J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft (raw, json)
Hash identifier: zjirjNxy2QWHpUwtgiCCLZc26/o/leoLs7wJsTlw86A=
Subject key identifier: 96:AF:07:3A:88:3C:55:FF:AC:ED:49:CD:5C:47:FF:30:F5:78:F2:CA
Authority key identifier: 27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73
Certificate issuer: /CN=27a110452384649d05c1e98fb97b49ae11600973
Certificate serial: 019A4E4F5D1A000A93F034483E3DBAD60522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
Manifest number: 0F27
Signing time: Tue 04 Nov 2025 10:00:15 +0000
Manifest this update: Tue 04 Nov 2025 10:00:15 +0000
Manifest next update: Wed 05 Nov 2025 10:00:15 +0000
Files and hashes: 1: J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl (hash: FDoZXJFD32u3t74PLl9nSxLBWXT7u8/nqFsTi7cu2q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:5d:1a:00:0a:93:f0:34:48:3e:3d:ba:d6:05:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a110452384649d05c1e98fb97b49ae11600973
Validity
Not Before: Nov 4 10:00:15 2025 GMT
Not After : Nov 5 10:00:15 2025 GMT
Subject: CN=96af073a883c55ffaced49cd5c47ff30f578f2ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:67:76:81:11:95:32:91:f4:3e:0d:8e:98:39:
ac:6b:26:e6:78:84:1d:04:ea:24:2a:d4:0f:ab:7e:
6d:97:b4:e6:32:30:fa:50:b4:91:4b:c0:8c:5e:ea:
21:26:a3:26:56:5b:65:2d:ad:fb:34:ec:fa:f5:e9:
26:7d:4d:ea:50:22:a2:7f:81:90:0e:ad:24:f8:a4:
96:96:b6:0b:fa:ef:2d:eb:70:d0:0c:0f:0c:39:33:
92:d8:7b:00:57:db:dd:90:89:47:b3:40:f1:5c:0a:
1f:5c:62:fc:50:24:a0:b6:18:a1:4c:b0:14:f6:3d:
b6:20:c7:3f:db:6a:ca:a7:58:b0:8f:b5:3a:80:52:
14:34:18:8a:24:b8:bd:bf:f8:ff:28:9e:f6:71:45:
cb:01:bd:c2:52:4e:2c:c1:c0:4c:40:f6:6d:65:55:
9b:2e:0d:00:71:91:e4:e9:a7:e1:b2:fb:12:d5:32:
97:45:51:e0:22:7f:9e:5f:52:44:6e:7d:48:d0:c6:
c2:bc:ba:42:dc:b9:d5:ee:15:ac:35:a9:c2:35:9c:
1e:5f:0b:ce:5c:0f:04:30:ff:29:5b:8c:5c:e7:c4:
81:99:90:f2:74:ab:65:79:81:a0:f1:1c:ac:0c:9b:
c5:13:6d:3a:83:1f:05:c1:b0:0d:8c:27:c3:1f:b4:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AF:07:3A:88:3C:55:FF:AC:ED:49:CD:5C:47:FF:30:F5:78:F2:CA
X509v3 Authority Key Identifier:
keyid:27:A1:10:45:23:84:64:9D:05:C1:E9:8F:B9:7B:49:AE:11:60:09:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6EQRSOEZJ0FwemPuXtJrhFgCXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/770bdd-b3e4-401a-9470-0ea8cdbc4b08/1/J6EQRSOEZJ0FwemPuXtJrhFgCXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fe:c8:ec:ae:dd:d0:d3:4b:31:4e:7e:34:74:de:74:0b:06:
b4:9e:f7:83:d4:65:4b:6b:7b:cd:10:b7:4d:11:8b:d9:20:0a:
c7:a3:c3:0a:d4:bf:60:6a:18:fd:dc:f8:3e:7a:86:4a:15:7e:
88:25:24:8f:2e:12:82:70:0f:66:32:66:a3:55:7e:1f:14:a2:
f4:d7:9a:f2:9c:29:7d:97:5c:87:5a:96:5a:52:cf:1f:67:a4:
81:bf:68:4b:74:1a:15:02:5e:49:22:03:e2:a8:58:69:c7:04:
ed:d3:3c:02:fe:eb:4c:db:40:b3:8c:cd:32:b3:63:0b:a7:b1:
07:fc:d9:60:8b:f7:6d:40:24:ae:f0:25:b8:fd:b4:94:a7:62:
a7:69:77:5d:3e:81:c1:27:dc:1c:b9:81:15:15:6c:73:d0:e8:
93:7e:7f:1d:85:3b:ce:a3:ad:ee:cc:3b:0d:a1:4f:01:ca:56:
d1:48:fd:58:9f:96:96:b0:3a:92:24:ff:2e:d1:4c:3f:d5:0e:
42:d3:a9:e3:59:ae:51:c2:bc:d0:14:27:cf:0e:08:7f:89:9e:
04:2e:bc:40:af:3d:69:a3:d7:36:4f:8a:2f:ba:8c:4d:3c:83:
6f:82:49:d8:bf:e2:ca:80:f8:94:70:61:95:1d:58:cf:7c:1e:
d4:5f:72:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:42 2025 by rpki-client