Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
File: JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json)
Hash identifier: L0//McueiR2htf3h7D+ZWc1o8OMhvqM3GUKLXpELQUQ=
Subject key identifier: CC:0C:C1:77:CC:A1:EB:D8:C1:D2:6B:42:B2:78:04:19:CB:E7:54:53
Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
Certificate issuer: /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Certificate serial: 019A5451A1675FED2EAAB772F390CE19FFF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
Manifest number: 0198
Signing time: Wed 05 Nov 2025 14:00:27 +0000
Manifest this update: Wed 05 Nov 2025 14:00:27 +0000
Manifest next update: Thu 06 Nov 2025 14:00:27 +0000
Files and hashes: 1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: QXgVvfwreLj6hv09d6bjGm/8c9oKqzccl7wcf/PtRkA=)
2: tSgs3XUIsHh7rxyC6KI4dfFcjtI.roa (hash: aP/8w3eyX9ywh3RSZ1FyfaCe/EGfUTND1DeYuxP49kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:a1:67:5f:ed:2e:aa:b7:72:f3:90:ce:19:ff:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Validity
Not Before: Nov 5 14:00:27 2025 GMT
Not After : Nov 6 14:00:27 2025 GMT
Subject: CN=cc0cc177cca1ebd8c1d26b42b2780419cbe75453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:06:b6:ae:27:51:23:50:51:82:a7:e3:2c:
49:a8:5a:2d:a4:c3:f0:d4:56:50:55:3d:0d:de:96:
91:a7:22:a1:e0:05:fa:15:89:35:53:2b:3a:ce:af:
c2:c3:5f:ee:0a:ca:ff:22:28:48:1f:05:3d:50:90:
7a:49:97:be:ac:23:65:b7:88:a0:44:07:be:48:5f:
8d:e7:32:9b:fa:d5:e0:6c:df:5a:a0:d0:b1:22:37:
98:c8:30:d5:d5:72:62:5f:d5:c6:15:d2:03:a2:7b:
57:03:01:5f:e7:9b:ea:11:9e:d3:c3:fa:21:8c:7d:
c9:1f:b3:7c:12:a1:0c:96:d5:84:f7:19:53:9f:89:
98:59:08:7a:1b:da:0b:73:31:6a:5e:ff:c4:fa:a4:
9f:b9:3f:d8:47:0e:07:69:72:42:71:0f:c6:02:5a:
bd:d5:54:42:e4:7e:3a:38:4b:b1:15:13:85:72:3b:
e5:05:c7:d5:b7:58:5c:40:5f:c1:af:a4:1b:45:dc:
21:f0:de:72:2f:44:2c:89:72:ea:ed:1f:6d:c4:15:
d3:6c:86:45:f1:80:d9:8f:5c:c3:0e:ee:e1:0e:0a:
e9:5a:bb:45:9a:e3:5d:9f:b1:5e:56:ee:2c:9c:7f:
75:d1:f0:fa:bd:2f:11:47:f8:f0:a2:45:07:51:3e:
f4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:0C:C1:77:CC:A1:EB:D8:C1:D2:6B:42:B2:78:04:19:CB:E7:54:53
X509v3 Authority Key Identifier:
keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f9:e9:75:bc:df:22:f9:5e:30:c0:34:ef:ad:b5:2d:d1:de:
59:a0:b4:b1:53:fe:8b:c1:bb:6e:c6:6a:57:b9:97:b9:43:9b:
11:cb:2f:25:a7:bd:a9:df:f4:b8:9a:73:be:40:9a:34:9f:46:
d2:19:b5:1b:5e:d0:07:ae:2e:95:9c:c3:05:8d:9a:a4:99:70:
66:4f:c3:84:a8:3c:67:ab:20:1f:28:e7:eb:e6:00:36:79:9c:
e4:13:15:a5:ba:b3:9a:d3:2c:08:0b:26:8b:3a:67:44:c7:87:
a8:7a:4c:d8:6d:bc:ec:70:17:aa:20:8b:44:e0:8c:7b:14:41:
0c:e9:99:70:2f:62:d9:71:a8:b7:ce:dc:e7:ff:29:b0:f0:07:
4c:33:5e:3c:da:db:9d:42:71:07:de:3d:52:ed:39:32:89:76:
33:33:e8:d4:55:b5:fc:7b:f8:e5:dc:fe:2d:a6:32:38:73:e5:
1e:b4:3c:8b:ff:dd:e5:ea:86:ab:95:3d:f4:d7:f1:04:ae:4d:
ae:e9:8b:30:e3:1c:37:f6:c4:7a:0d:69:00:a1:0b:47:c1:21:
04:49:da:13:70:ee:b1:c7:16:ae:d0:9c:ae:ad:3e:8a:0f:55:
09:07:a9:4e:20:30:e2:4f:6d:69:ac:2b:54:26:52:16:05:5e:
27:31:78:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:13:59 2025 by rpki-client