Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
File: J83PK9CaINK63Tq2yMft-h_Vwsw.mft (raw, json)
Hash identifier: AHM5alqh50P5lG7hh3s+AFyM9EeJM2+pHS/cseyfBdY=
Subject key identifier: 50:4D:21:A2:EC:7A:2E:D5:F9:A7:C2:CC:10:F6:FB:54:FC:17:10:B8
Authority key identifier: 27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC
Certificate issuer: /CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc
Certificate serial: 019A5263761C484589D24174EB75A902BD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
Manifest number: 0428
Signing time: Wed 05 Nov 2025 05:00:41 +0000
Manifest this update: Wed 05 Nov 2025 05:00:41 +0000
Manifest next update: Thu 06 Nov 2025 05:00:41 +0000
Files and hashes: 1: J83PK9CaINK63Tq2yMft-h_Vwsw.crl (hash: GQJgonrUybxPWa1IvdbKQ9bJpZrWBppiJWpyA43yvFc=)
2: kxpaHhhuxaN-Jg9For9SY2Nccrk.roa (hash: Q31rgNDFAzRPHBiMS/f4s6A4eZqCkoNUT9MdgG2F6C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:76:1c:48:45:89:d2:41:74:eb:75:a9:02:bd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc
Validity
Not Before: Nov 5 05:00:41 2025 GMT
Not After : Nov 6 05:00:41 2025 GMT
Subject: CN=504d21a2ec7a2ed5f9a7c2cc10f6fb54fc1710b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:d9:25:b2:b6:d5:93:91:c8:f4:01:7d:e3:
7c:af:e7:bf:59:8f:74:4b:c5:ff:ba:3e:cd:26:5a:
8e:17:19:67:0c:cd:51:29:91:ce:c8:8b:77:31:46:
54:4e:e4:67:7c:23:b7:15:d0:f7:11:79:f2:9f:c7:
eb:54:31:4a:58:6e:88:3a:df:2f:52:a0:d6:3d:8d:
b3:65:18:b9:72:7d:8d:dc:af:40:1c:6c:f0:fc:62:
51:45:a9:54:07:f2:cc:1f:b9:72:e2:3d:06:22:df:
2d:43:2d:9d:36:f3:3a:19:98:56:63:33:e5:39:d7:
ef:7b:01:b0:b5:a2:38:ee:7e:17:bc:a1:94:07:ba:
64:48:48:d1:d0:ec:dd:08:52:e9:78:c2:b6:ba:ae:
89:de:91:02:1b:a6:c5:5f:48:9f:ec:c3:2d:01:f3:
ac:cd:55:cc:af:a8:25:0b:ba:83:95:6c:5b:cc:6f:
c0:15:94:b1:a2:36:9d:59:dd:ef:49:7c:f9:8f:12:
ee:52:e1:8c:d6:0e:d2:32:c7:e4:a3:04:86:7b:9f:
b1:9f:98:81:0f:af:ce:86:74:8d:45:4c:d7:b0:15:
b1:be:b6:89:0d:6f:26:91:04:28:06:ab:8b:65:c1:
03:bd:17:76:d9:cd:e2:42:3c:43:09:66:fc:50:9e:
cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4D:21:A2:EC:7A:2E:D5:F9:A7:C2:CC:10:F6:FB:54:FC:17:10:B8
X509v3 Authority Key Identifier:
keyid:27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:19:44:9c:a7:82:7c:88:b3:cb:d5:67:bb:80:38:6f:f0:3c:
b4:75:4d:ce:a3:8f:db:58:49:9c:df:23:33:4a:ce:ea:5b:3e:
c7:71:90:8c:77:06:32:07:e1:0a:90:16:35:54:ef:f1:f7:18:
0f:8a:2b:4c:c9:18:e1:2b:a5:bc:ef:ee:2f:54:13:29:c2:3c:
5d:d7:c8:ca:cc:53:df:bd:20:fa:1d:45:22:4c:b7:7b:5f:75:
24:95:f1:fb:c0:d7:6a:ab:d3:e0:9d:a0:4d:91:03:96:a2:10:
e0:95:0c:8d:c4:56:bf:89:3e:b0:16:77:5d:8b:03:ab:fb:aa:
8d:d0:a9:bc:aa:13:55:a2:58:ba:8f:a4:0e:8c:69:35:ad:be:
0a:9d:4e:28:d0:3e:3f:02:0c:9e:20:6b:30:c3:0b:2c:8e:29:
7c:0f:cb:2c:b5:d7:ee:6b:b9:3d:97:e8:2d:81:86:0a:db:2c:
00:4a:0a:ae:50:83:46:3a:9b:b0:a9:19:a0:a8:a0:97:0d:7a:
b2:50:e3:90:58:32:ee:ce:7e:7c:0a:d9:88:ec:55:c0:40:b7:
a3:8d:19:c9:4c:6d:4a:6c:ea:a1:f1:e2:30:37:f6:c3:95:4b:
82:bb:8f:c1:e6:4b:31:4b:67:4a:34:a5:4e:38:0b:1b:01:88:
7f:33:1c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:51 2025 by rpki-client