Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
File: J97R2QxNUraHECO8cSltCKmMTNs.mft (raw, json)
Hash identifier: Fd4mSb8OpUMLdAJDIvqH06B32tR6rBAmAIDNtkS5XcE=
Subject key identifier: 4D:DE:93:52:15:90:B8:18:18:9B:81:1F:22:D5:B9:66:44:59:CD:2C
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Certificate issuer: /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial: 019A4EF42E89296662E360A84E067C1AAED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
Manifest number: 0CCE
Signing time: Tue 04 Nov 2025 13:00:16 +0000
Manifest this update: Tue 04 Nov 2025 13:00:16 +0000
Manifest next update: Wed 05 Nov 2025 13:00:16 +0000
Files and hashes: 1: J97R2QxNUraHECO8cSltCKmMTNs.crl (hash: S9LpWCsjJNerkr7j2bOAHAwQVNWEb7adBejqFfVLMvs=)
2: X3QMt1fmV4wTFAQPHZ4zsROv8I0.roa (hash: Whnqs1Wwvsp0OIKAaEg9kGiqf108NquKFQHaJWKxLGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:2e:89:29:66:62:e3:60:a8:4e:06:7c:1a:ae:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Validity
Not Before: Nov 4 13:00:16 2025 GMT
Not After : Nov 5 13:00:16 2025 GMT
Subject: CN=4dde93521590b818189b811f22d5b9664459cd2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:19:6a:c1:73:48:04:5a:47:17:6f:49:d1:
ac:21:7b:39:2b:f9:7c:20:30:92:f4:9c:b0:2a:db:
e6:4f:27:ac:a5:9f:4e:bf:0a:cc:ef:7f:9d:fd:56:
5a:f6:dd:96:84:30:00:d0:ab:ce:9e:ec:d2:01:4f:
d0:33:0f:69:8a:22:9e:f5:b3:cf:3b:30:c0:28:4f:
44:21:3c:3d:84:dc:56:6b:cb:71:79:e0:99:b6:c4:
71:d6:d5:f6:7e:d8:0a:55:79:d4:c5:8d:58:3b:e4:
1d:33:45:6e:4c:d9:a2:6b:37:9a:97:94:98:0f:59:
3a:ef:8f:c7:b8:1a:ab:e1:91:2b:7d:13:6f:42:25:
74:6c:a3:f7:35:21:12:3d:6d:58:10:07:e4:12:a7:
60:28:a7:af:64:83:d3:52:5e:62:c3:ab:30:39:4e:
52:5f:ca:31:5a:d2:61:d4:c8:c9:0e:e0:6d:3e:70:
71:1e:6e:7b:2d:c9:98:a1:46:c2:18:08:2e:10:7f:
f0:08:b2:9b:83:af:23:0a:4a:e3:1b:57:bc:81:4b:
da:23:f9:40:d7:cd:fd:df:fc:93:90:73:db:3d:ab:
25:5c:f9:03:4b:bf:aa:7f:34:2f:a5:fc:d1:66:ff:
d7:18:17:89:52:6a:13:17:2f:ce:3a:26:f7:4e:33:
7a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DE:93:52:15:90:B8:18:18:9B:81:1F:22:D5:B9:66:44:59:CD:2C
X509v3 Authority Key Identifier:
keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:40:d8:a6:09:ca:de:2d:47:72:b9:38:1a:79:2a:f6:cc:13:
4d:8a:00:9e:92:31:60:c8:7d:e1:5b:fa:b1:f4:db:4f:6d:b8:
0b:34:d0:38:23:b9:27:18:63:b9:4f:61:23:6a:fe:c3:c2:d9:
31:85:78:55:17:7c:5a:94:b6:d5:95:97:b6:fc:e8:ab:b4:7b:
0c:d0:cb:27:92:17:58:88:88:46:d8:cf:f5:9d:8e:7c:6b:dd:
a7:06:de:23:93:62:e9:f2:29:f4:61:ca:4e:0e:0a:f8:81:ae:
ce:50:96:d5:69:79:d4:5f:56:01:f8:28:4a:07:5e:90:92:ae:
ac:b5:97:69:a4:8a:83:c0:22:78:79:23:62:25:6f:24:3a:b6:
31:c3:9a:4a:17:a3:ef:41:6d:cc:2c:40:d5:6e:f9:4e:e2:ad:
7e:3b:bd:8e:d8:e2:10:34:fe:16:fa:43:94:06:86:3a:0d:b4:
29:88:af:6e:a5:07:cf:97:2b:f6:57:b1:06:bc:a9:96:bd:36:
b8:70:8c:12:c5:8e:ba:a4:bd:4f:55:e7:b9:47:14:13:68:d3:
b5:7e:f5:67:8c:f8:86:73:4e:92:ef:9f:fe:c4:4b:fe:44:d5:
35:f6:9c:a9:7d:49:9d:27:27:b9:eb:24:71:30:40:30:f8:a9:
1b:61:a9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:26:01 2025 by rpki-client