Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
File: J83PK9CaINK63Tq2yMft-h_Vwsw.mft (raw, json)
Hash identifier: l81YGniZoIExFJ1uC73I4F4MRWhCwbH6eqO2qlgNa+I=
Subject key identifier: 4C:12:D0:5C:1A:74:F5:BD:E9:4B:93:CB:FE:44:5C:85:F1:BD:36:6E
Authority key identifier: 27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC
Certificate issuer: /CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc
Certificate serial: 019A5074BB3346660C32CF8E59DA0F298832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
Manifest number: 0427
Signing time: Tue 04 Nov 2025 20:00:18 +0000
Manifest this update: Tue 04 Nov 2025 20:00:18 +0000
Manifest next update: Wed 05 Nov 2025 20:00:18 +0000
Files and hashes: 1: J83PK9CaINK63Tq2yMft-h_Vwsw.crl (hash: 5H3d23Vcgg0s+DwX+mmd8iP1TiioXfSwN63+5YLKSSk=)
2: kxpaHhhuxaN-Jg9For9SY2Nccrk.roa (hash: Q31rgNDFAzRPHBiMS/f4s6A4eZqCkoNUT9MdgG2F6C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:bb:33:46:66:0c:32:cf:8e:59:da:0f:29:88:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc
Validity
Not Before: Nov 4 20:00:18 2025 GMT
Not After : Nov 5 20:00:18 2025 GMT
Subject: CN=4c12d05c1a74f5bde94b93cbfe445c85f1bd366e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:05:b8:38:7a:09:8e:ba:34:b9:f4:2e:c9:
50:5a:d5:2c:94:8b:fa:6a:c6:70:85:05:17:c5:e4:
fe:e6:b6:b1:7f:98:85:59:94:2c:8d:06:6c:6e:e1:
25:a6:3d:2a:54:02:e4:2a:20:17:37:13:52:d4:00:
16:88:bb:b1:f2:aa:c1:63:b6:65:b1:5b:0c:5d:f0:
05:57:42:45:db:02:00:f6:eb:e4:90:e5:f0:28:0c:
5d:1c:3c:52:3b:66:4b:5c:e7:2d:70:4a:ba:a0:3b:
f9:be:3f:7d:86:17:fc:04:35:fb:65:db:ea:a7:5a:
68:7b:14:e1:ea:c1:36:b3:e8:c3:84:dd:72:f3:b4:
be:72:36:ff:a9:9b:8c:3d:b4:2b:63:78:3b:3b:df:
e2:c5:11:a2:f1:2a:bb:ff:14:74:22:85:ef:e6:4a:
32:3b:b9:eb:b6:21:dd:ac:15:b5:13:43:b7:32:3c:
56:aa:02:d4:d1:14:da:36:0f:7c:38:29:69:da:1d:
34:d9:cc:6c:d0:f4:49:e7:e7:a2:1f:bf:d8:fd:a1:
0c:64:26:cc:b7:db:14:6d:1a:bd:9e:87:1f:a4:a7:
13:65:77:97:80:73:a8:84:70:61:31:3f:14:0d:7f:
f7:c1:e2:a3:5f:27:48:1b:ad:ad:54:4d:8f:b8:79:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:12:D0:5C:1A:74:F5:BD:E9:4B:93:CB:FE:44:5C:85:F1:BD:36:6E
X509v3 Authority Key Identifier:
keyid:27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:70:3a:6b:43:62:05:a9:9b:e6:2b:10:9d:8d:e9:eb:d5:1a:
1f:5b:f2:23:b4:d3:a7:e3:ae:a1:b4:c5:3d:25:67:28:33:3a:
16:a1:5a:01:15:07:48:ea:a2:59:c0:aa:4b:bc:5f:1c:10:17:
c8:b1:fb:f1:ee:33:4b:ae:ec:27:23:9c:59:47:c1:be:8f:b2:
73:c1:1e:c0:30:ea:85:3d:33:5d:67:4a:e4:71:6d:e9:c4:60:
c6:09:37:d8:c2:3e:f6:70:91:37:9e:90:68:f8:54:90:38:e1:
4e:ad:cb:f7:c7:fa:ba:45:7e:55:91:51:79:77:c5:ed:88:34:
07:ed:e5:83:45:1b:73:2f:1f:ad:b3:51:fa:b3:d1:6e:31:73:
65:83:20:cd:67:e8:77:a8:08:c7:78:4e:41:13:98:5e:c1:46:
fd:c7:54:a3:07:ff:75:50:6d:d0:9d:40:79:3d:0a:48:7c:d1:
4e:e4:2a:09:fc:35:f0:d1:1b:e2:f2:91:63:5d:16:29:d7:28:
56:31:03:f8:63:f7:9e:6d:46:3d:91:a8:90:05:75:ac:e4:25:
d6:2a:6f:02:b8:07:4f:56:82:2d:f4:8b:a7:e1:ec:1f:49:33:
81:a9:86:c6:7b:8e:ce:f5:c0:c0:a2:67:c5:b2:3c:42:b9:af:
f1:dd:e4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:20:26 2025 by rpki-client