Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
File: J0PbfuNKwtTtV49JXgCWy5iv9xw.mft (raw, json)
Hash identifier: EtfS3ifeFH4UrLRgFpKN1shvm/ZD/fRrQp/rOFx1/Eg=
Subject key identifier: BB:FC:E1:AE:B8:83:08:54:BE:83:AB:50:F1:CC:89:92:82:0E:65:E8
Authority key identifier: 27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
Certificate issuer: /CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Certificate serial: 019A552DD88EDD5FFFBB5C804173EF42EBF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
Manifest number: 025B
Signing time: Wed 05 Nov 2025 18:00:59 +0000
Manifest this update: Wed 05 Nov 2025 18:00:59 +0000
Manifest next update: Thu 06 Nov 2025 18:00:59 +0000
Files and hashes: 1: J0PbfuNKwtTtV49JXgCWy5iv9xw.crl (hash: CLRTk4juX5VBkzh6NSxhXiMFOUSn1rxisq4c9p8RVqU=)
2: dDAgjd5fwQ3cte1EAxZ7pLJLl0U.roa (hash: 2txr4+GD0XgpxhSLLq5aM5yNR187eckG+kO4tKZmm3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:d8:8e:dd:5f:ff:bb:5c:80:41:73:ef:42:eb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Validity
Not Before: Nov 5 18:00:59 2025 GMT
Not After : Nov 6 18:00:59 2025 GMT
Subject: CN=bbfce1aeb8830854be83ab50f1cc8992820e65e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:5a:fd:4e:18:9c:ab:a9:c6:c8:e8:eb:8c:
ff:b7:1e:9f:db:33:6e:8c:29:f1:09:58:c3:ce:52:
ed:5a:fa:4a:90:25:f8:49:e5:0c:9d:7a:29:57:8b:
f3:f7:b9:80:33:91:f7:31:45:b8:86:6d:4d:37:38:
27:12:67:59:7c:02:9c:4b:07:3e:6d:6c:60:5c:fd:
7c:79:ae:c7:11:9a:d7:5d:93:53:82:99:03:37:20:
9d:ff:cf:db:58:4c:7d:97:94:f7:42:89:9b:05:55:
67:d1:49:40:73:82:5a:69:67:b9:13:ac:37:4f:91:
d9:fe:fa:0e:7d:d9:ea:26:cc:53:2b:e2:10:b1:ff:
c4:80:4c:e1:19:cb:ee:2a:95:e3:34:a1:73:d7:3f:
7a:83:f5:ce:f2:f1:e1:5d:ea:f7:10:28:27:87:57:
30:ba:95:9c:40:c0:ab:06:bb:4c:52:5b:34:58:2d:
06:b3:29:00:80:48:46:10:98:96:52:b5:4c:6e:3c:
9d:09:d9:f7:13:50:3f:5e:03:42:c7:02:5c:f9:da:
c7:55:ba:60:58:49:33:e5:43:da:29:72:35:95:58:
b0:3d:37:fb:8c:e5:9b:ec:af:eb:ca:6c:cc:24:dc:
9b:b6:52:11:6c:2f:1d:d8:0f:0c:1a:57:fc:d6:30:
cf:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FC:E1:AE:B8:83:08:54:BE:83:AB:50:F1:CC:89:92:82:0E:65:E8
X509v3 Authority Key Identifier:
keyid:27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4a:a0:c6:ac:9c:13:fa:40:c6:21:fa:9c:aa:14:6a:fb:13:
99:8b:2a:47:1f:0e:a2:44:52:2f:14:27:7d:e1:21:28:84:16:
a0:ce:d4:da:00:91:df:a0:f4:92:b1:ce:04:bd:e4:4f:2a:a7:
08:9f:7d:0d:10:dc:ee:92:23:33:39:b2:55:16:a0:f6:c5:f9:
cb:6c:83:7f:fa:ea:e2:0f:cc:66:61:1c:fe:6e:22:2b:79:f6:
8b:23:1c:9a:64:91:99:63:87:df:7e:1a:48:bf:71:bc:d2:15:
cc:82:f8:cd:49:d4:6c:49:c7:65:96:0b:61:0f:95:ae:ff:5c:
3f:e6:f9:0f:f1:cb:8c:38:28:4d:aa:e5:5f:5e:60:cd:df:1c:
06:bd:1a:e5:1c:ac:c7:79:32:34:3f:e2:34:03:62:f9:b5:f2:
29:e4:24:e8:65:2b:a5:c6:0b:40:42:4a:99:59:87:c4:5d:a5:
a2:e5:b0:9b:ac:05:16:3f:c3:58:b6:ba:2c:59:62:9f:03:90:
22:fb:6b:5e:7b:d0:63:65:b8:62:d8:53:5f:38:05:23:24:16:
3a:68:89:41:0d:cf:ec:ad:dc:ab:d9:1d:a5:d9:ae:e9:ab:08:
f4:b7:f6:58:81:24:1a:a4:79:79:e0:aa:10:a5:d6:db:c1:46:
eb:fc:1a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:30:50 2025 by rpki-client