Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier: dRR8+MbQykNAp8o5V8+U6HvJVH4XKlXlxrYze9A8GfA=
Subject key identifier: 8E:B3:64:B9:83:C1:95:72:7F:C5:A4:97:B0:9E:14:70:09:C3:8A:4A
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 019A4C618D8176B79AE424002D725AAD422D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number: 0F39
Signing time: Tue 04 Nov 2025 01:00:52 +0000
Manifest this update: Tue 04 Nov 2025 01:00:52 +0000
Manifest next update: Wed 05 Nov 2025 01:00:52 +0000
Files and hashes: 1: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: 2ivyqFFlWZmWCYicmnqp9B0jIhXcHN9xxSZn0Oz9pgo=)
2: U98Pywp0SW8RSqZF3Ge6Si9krK0.roa (hash: O0xR8BO72Q1293Dodh+ahx0zgwd8SQ9b7GDuhK6uN4w=)
3: fonqMENkUurdTSsmls1gVlg_WJ4.roa (hash: BkPWWaoPqGMFHcArMOr28SMuQJKUdO9RrrY9l2uEtM4=)
4: hRMqKbI5ZBKlaiDQw_wO9nw88a0.roa (hash: tQTOlSI2XH6rsXW1nhJPPPkXPxhSWEfkvDRnTJEB2Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:8d:81:76:b7:9a:e4:24:00:2d:72:5a:ad:42:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Nov 4 01:00:52 2025 GMT
Not After : Nov 5 01:00:52 2025 GMT
Subject: CN=8eb364b983c195727fc5a497b09e147009c38a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:91:72:6a:b7:4c:b2:47:ce:58:fb:28:1a:36:
69:76:7e:50:87:02:7d:89:3b:fb:0f:56:e4:bf:4e:
67:ef:e9:8f:af:7b:e5:70:34:12:aa:2a:64:f2:5d:
a7:84:4c:6b:88:70:a3:62:57:1b:64:d1:c9:5b:ce:
23:4f:aa:7b:26:dc:60:7f:c4:97:f8:2d:5e:f1:19:
26:b4:a0:58:eb:bb:d4:ad:6e:01:10:93:f1:4d:51:
e7:d7:39:7b:a9:39:28:54:aa:ec:59:90:2f:b5:4e:
2a:f3:25:95:7f:3b:c8:d4:e7:3d:54:da:f0:11:46:
45:8e:90:4e:78:16:46:4c:7d:fd:6f:c5:a8:2e:36:
53:4b:49:74:02:b6:7f:45:3f:97:1d:52:32:d2:a5:
ec:a5:9b:4b:52:b5:18:54:6f:19:a4:ee:4d:ae:be:
6b:7e:2f:50:53:0d:60:93:fe:52:7a:be:4a:42:60:
5d:30:8e:bb:c3:47:94:84:2d:07:82:ee:fb:b8:65:
35:01:57:c4:8c:aa:1f:04:1f:30:df:4e:68:75:ac:
2f:63:fd:ae:b8:1b:b5:89:60:77:de:97:98:12:33:
86:01:a0:6f:1d:ed:77:8d:fc:5f:12:06:f1:76:22:
b1:64:6b:19:bd:22:86:93:60:5d:56:56:64:af:07:
fc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B3:64:B9:83:C1:95:72:7F:C5:A4:97:B0:9E:14:70:09:C3:8A:4A
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:62:66:3a:f5:07:e8:09:6b:37:a0:57:77:3d:69:19:be:c7:
f4:2c:eb:bc:01:02:99:8e:21:07:11:10:89:bf:95:4c:55:cc:
28:1a:20:0b:0d:24:1f:ed:6d:c7:d4:cc:d5:31:0b:40:85:7d:
d5:2c:fe:19:ea:35:2f:d0:be:54:39:91:c1:ca:b1:93:6b:1f:
16:a2:cd:ca:64:0c:f9:ac:76:d8:e1:a8:16:4a:00:c9:98:2d:
3f:cf:d3:d8:f9:e9:ea:a6:8d:91:e6:f0:a5:8b:3f:c7:97:16:
63:9a:19:95:66:21:ff:e0:4c:dd:80:a7:6e:6f:a7:ff:be:63:
9b:a1:b3:69:63:4b:e8:3d:b2:14:76:c6:22:7f:61:3d:71:95:
58:6f:b4:f7:60:d8:db:05:3a:6b:a3:63:89:79:91:6c:a8:08:
bf:1e:2a:a0:5c:4c:43:52:5e:f2:3b:38:79:ad:05:e6:b6:0e:
5d:b6:b8:be:44:ba:43:09:2c:4e:53:18:b7:c8:0c:ef:8f:65:
e7:9e:86:f3:46:5d:9c:fc:aa:4a:c8:26:42:24:20:ef:f3:4d:
f5:49:0f:9e:86:f5:05:e4:b5:46:89:f8:d8:c4:a2:fa:bd:8f:
24:c4:c8:b1:bc:29:25:fa:af:39:d7:10:01:ef:61:f6:3d:39:
cf:be:33:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:32 2025 by rpki-client