Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File: J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier: tyXm10nddWL1fV3mmOpzpNMtpoGQ6M2pA/BmZOLKOjA=
Subject key identifier: BE:F0:0A:97:0C:35:C5:CF:76:C9:F2:A9:06:18:78:78:03:9C:1A:56
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer: /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial: 019A4EF4EE97E7676729927111FCD76BC7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number: 0DEE
Signing time: Tue 04 Nov 2025 13:01:05 +0000
Manifest this update: Tue 04 Nov 2025 13:01:05 +0000
Manifest next update: Wed 05 Nov 2025 13:01:05 +0000
Files and hashes: 1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: e1LazLfJ9Xq7rPd4alHeK8X9yHO+xYfa4MiRfhM3pQ8=)
2: UEg2a8frOwQJ_ocv6mZt898VwKc.roa (hash: HhDZ6hinLTKa6qeDqW6QogtlJ6a4udPeZaa3rESZ/rM=)
3: zUk84pMkBH7qM-5eyE2RTVXesY8.roa (hash: 1Rye/GoMkKTXa8JBFflyaNlKfqeLYK+b0R1zK9MVT4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ee:97:e7:67:67:29:92:71:11:fc:d7:6b:c7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Validity
Not Before: Nov 4 13:01:05 2025 GMT
Not After : Nov 5 13:01:05 2025 GMT
Subject: CN=bef00a970c35c5cf76c9f2a906187878039c1a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6b:e9:98:39:28:d8:a8:f6:4b:6c:4b:21:0d:
4e:d9:93:12:db:06:af:7f:79:34:f3:a3:60:9a:9e:
fb:21:d6:5e:27:9a:b4:f8:9b:f5:a6:e5:6b:ac:6a:
d1:f7:5f:03:d2:da:73:79:4d:ec:23:6f:76:ab:39:
07:3e:9a:7e:2a:25:9a:ce:0f:03:ba:c8:04:f1:f5:
d2:2f:9f:b7:77:07:c4:6b:dc:41:1d:6d:a7:06:42:
8b:7e:cd:44:47:37:c3:aa:20:5c:d8:de:0f:5c:1f:
db:bf:36:ed:40:b9:9d:8f:64:a2:37:18:d9:a8:77:
88:49:63:04:d5:15:25:af:0c:94:29:f6:58:07:9b:
48:49:9d:c6:5f:69:1d:ac:d7:69:76:a2:13:18:f0:
21:0b:a5:3c:4e:9a:cb:41:df:5e:4d:72:4f:cb:34:
12:1b:88:d7:ec:a6:05:89:4d:aa:ca:8e:00:8c:11:
64:99:66:02:72:3c:5c:b9:4e:33:03:12:f6:1b:0d:
71:fb:d7:d5:b0:4b:06:64:50:51:27:1d:79:73:d9:
49:08:c1:9c:d6:ed:c6:3f:6e:52:13:ff:46:57:12:
f2:83:65:13:c5:11:87:af:ec:96:46:37:40:ad:ad:
07:dc:46:19:8b:4c:bf:13:b2:96:6c:1e:5d:7d:c2:
6c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F0:0A:97:0C:35:C5:CF:76:C9:F2:A9:06:18:78:78:03:9C:1A:56
X509v3 Authority Key Identifier:
keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:4d:3d:f1:88:69:37:52:a8:31:8a:57:8d:7e:e3:d7:bc:05:
ac:61:80:72:34:ab:bd:e1:50:42:6f:e4:96:62:80:1f:3a:3d:
49:97:d4:f0:22:20:f8:cd:ba:01:89:8b:9a:36:a9:92:87:10:
73:4b:74:38:46:2e:7d:d5:be:ef:3b:db:7d:bc:ee:f2:e7:cf:
96:2f:3f:68:05:52:9e:78:fa:05:9d:53:2b:e6:6f:53:94:98:
71:69:65:b7:0e:d6:e2:0e:98:1e:41:07:b1:68:84:6a:f4:9e:
6d:95:75:62:3e:b3:3f:a5:75:27:d4:6c:9e:bb:79:60:99:94:
4f:7d:48:9c:da:bf:93:be:21:9a:7c:a6:ce:64:99:7c:0a:79:
16:29:5c:f8:7b:95:c5:c9:49:07:0e:c8:c3:d5:57:e2:55:f8:
fc:32:44:98:b1:e2:1a:e9:9f:96:6e:36:a1:e5:51:85:56:ad:
bb:46:9c:a2:1d:44:fd:9f:f9:75:c7:ba:62:31:15:35:1d:e6:
c5:e5:d5:e1:dc:54:89:37:8f:2d:f2:78:b5:6a:09:2a:8f:4c:
fc:e7:f2:20:16:c8:7a:2b:6e:f4:f4:51:2c:c7:48:87:8f:17:
09:9c:6a:df:1a:74:01:66:b3:9f:d5:76:c6:db:ea:7f:f1:55:
a4:0f:87:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:43 2025 by rpki-client