Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: 78HMrgMK4bx/nahIFrPFaNEOIH2hJ23HnPkLQF86OLs=
Subject key identifier: EF:29:85:7A:4F:7A:0B:FB:DE:69:FC:73:83:8C:F6:D5:2A:79:12:0F
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 019A4EF425AB2F73ABADCCAB8A6E7ED9792F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:00:14 +0000
Manifest this update: Tue 04 Nov 2025 13:00:14 +0000
Manifest next update: Wed 05 Nov 2025 13:00:14 +0000
Files and hashes: 1: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: aQWx4/lTbF5/LOiRqnKJrPkrZo+3NIZ/Vip+DrVOgFE=)
2: aaN-bs2N1cRQu6wVRlnpd2mwkBQ.roa (hash: /bC3V57krNUgmm/Cc9N1e1boJHyImaptM9rUrHdc9Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:25:ab:2f:73:ab:ad:cc:ab:8a:6e:7e:d9:79:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Nov 4 13:00:14 2025 GMT
Not After : Nov 5 13:00:14 2025 GMT
Subject: CN=ef29857a4f7a0bfbde69fc73838cf6d52a79120f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:8b:d3:a4:50:12:c3:65:1e:7c:94:9c:57:
ae:88:2c:d1:95:51:ea:35:55:17:a8:49:33:57:3a:
53:1f:83:3a:91:77:5e:12:4f:7d:ff:4f:c7:b6:0f:
72:89:32:6f:b2:42:43:3b:ee:63:51:75:88:3e:10:
a9:85:30:a7:11:73:00:6f:24:84:eb:48:49:0a:ac:
f6:78:9a:d3:9f:ab:48:6b:48:d0:7d:8b:d3:88:3a:
89:97:75:38:b9:36:76:c8:3f:12:67:05:67:e0:0c:
f5:78:06:55:ec:67:3f:ac:98:1c:1e:9b:bb:f3:41:
ea:0f:cc:06:0c:37:8b:2d:60:1a:8d:24:b2:fb:ec:
58:e2:11:bc:23:c6:91:94:9d:d2:20:ad:36:a5:8b:
88:15:cd:d7:84:8d:32:bb:59:1f:8a:f9:25:66:1f:
44:19:a4:34:1d:59:1a:3f:4e:58:21:66:5e:f7:62:
37:86:a6:c5:fe:94:1b:3b:e4:02:e6:1d:e3:d1:56:
b7:c6:ae:54:16:05:81:15:84:f9:9b:fd:93:18:9a:
21:9a:0c:07:9a:22:44:b4:d1:57:b1:e8:e5:bb:1a:
77:99:b6:2a:67:1e:e6:41:bb:3c:16:54:cf:0d:ac:
6c:88:69:30:b9:56:b2:0b:c4:13:58:7c:a0:db:a0:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:29:85:7A:4F:7A:0B:FB:DE:69:FC:73:83:8C:F6:D5:2A:79:12:0F
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:31:00:a3:df:c8:67:65:e0:94:d3:23:9c:1f:95:21:2f:a3:
a5:1b:73:cb:61:c0:2e:92:b1:c1:77:de:ee:dc:2f:d6:fe:9d:
70:a1:87:37:7f:95:a2:f3:77:e0:9b:ce:11:ba:e7:49:35:86:
65:53:ff:e9:b8:01:68:72:44:5e:eb:ca:63:f8:91:90:34:9a:
d3:cf:9e:53:8c:88:32:b4:d5:4f:f9:c6:b2:f1:01:53:81:0d:
6f:b1:26:6a:a8:f0:cd:b6:55:fa:2a:b1:4d:af:6e:a4:a2:25:
1c:b7:82:51:7b:f8:2b:95:0b:91:95:1e:d6:90:c9:f3:79:a0:
1b:36:c6:eb:32:32:b1:a4:4c:6d:7c:ee:3d:88:ba:de:a8:51:
7b:2b:7a:70:ba:26:ef:66:21:f9:a0:bf:b0:60:08:57:e3:c3:
03:d1:45:d9:44:e9:ab:29:29:e2:f7:a8:9e:0a:ed:17:da:77:
6d:e7:cf:df:ba:e1:2a:de:8d:29:d4:cc:f8:1e:cc:18:d9:d2:
d0:5f:b1:cf:48:b7:a6:48:95:53:6c:a1:90:db:19:92:42:e8:
49:3e:4f:12:20:54:4c:a6:21:ce:62:cd:60:80:75:a5:e4:5d:
30:21:17:ee:31:b3:c3:10:17:ce:e3:75:a4:69:04:43:96:d1:
4b:fc:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:43:03 2025 by rpki-client