Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
File: J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft (raw, json)
Hash identifier: O09tRj5gF9DYv+GXuXiCRimgbE0BMz3TSrq4ZnHhb8M=
Subject key identifier: C2:6D:F0:85:C1:2A:2A:85:3D:11:20:C2:2B:47:52:AF:97:BF:15:88
Authority key identifier: 27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
Certificate issuer: /CN=277b3683307c6fcc32bed177232f1d474541fbae
Certificate serial: 019A503DE1504C595D136CBD846E499E0AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
Manifest number: 12DC
Signing time: Tue 04 Nov 2025 19:00:23 +0000
Manifest this update: Tue 04 Nov 2025 19:00:23 +0000
Manifest next update: Wed 05 Nov 2025 19:00:23 +0000
Files and hashes: 1: J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl (hash: XReZ/Yl9RytUd9WrDe4ZXSRuwpP92U9cWswGKuKJ7Aw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:e1:50:4c:59:5d:13:6c:bd:84:6e:49:9e:0a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277b3683307c6fcc32bed177232f1d474541fbae
Validity
Not Before: Nov 4 19:00:23 2025 GMT
Not After : Nov 5 19:00:23 2025 GMT
Subject: CN=c26df085c12a2a853d1120c22b4752af97bf1588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4d:1c:f9:dc:9e:97:d3:7e:cc:08:97:76:27:
c2:a8:55:90:f0:04:ee:a3:d0:50:6e:27:ad:d8:78:
bb:e1:15:93:88:da:58:95:9b:63:ab:43:b8:6a:cb:
80:cb:57:be:e6:8f:6a:33:2a:49:9f:b3:c4:08:9c:
68:c2:17:68:9d:a9:8a:8c:2b:33:c6:d4:26:44:34:
c7:27:3f:27:67:3c:f0:f8:24:0e:6a:14:47:80:57:
bc:51:dd:0a:32:ef:3f:5d:af:01:87:8c:51:3b:ad:
fe:1b:6d:1a:96:c9:d5:2a:79:78:6a:77:ee:cc:d0:
c5:91:dc:72:db:56:f3:70:eb:b8:a5:a0:46:a7:a6:
b9:8e:f6:22:21:a4:c7:20:f0:9f:53:af:d2:78:fa:
94:72:bc:51:51:ad:54:fb:d6:0c:32:be:39:24:18:
dd:21:21:de:6d:6e:87:52:c1:a0:5c:2d:d6:c1:97:
02:39:31:f1:b8:72:64:a5:6b:99:20:d1:a7:c5:29:
16:4b:d2:39:4b:2c:42:2c:74:10:28:56:56:ce:09:
07:b5:0d:2d:9f:84:cb:98:dc:fd:ef:cf:91:2c:cf:
f5:7b:23:89:1e:01:fe:dd:51:11:ec:76:34:19:d6:
9d:9f:84:c0:2c:71:42:c6:a9:d9:52:ea:bf:3f:2f:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6D:F0:85:C1:2A:2A:85:3D:11:20:C2:2B:47:52:AF:97:BF:15:88
X509v3 Authority Key Identifier:
keyid:27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:9d:5b:db:74:a4:10:c1:9f:fb:0c:2c:41:df:5c:f7:72:f3:
23:96:7e:8e:7f:f2:f3:20:21:d2:37:56:88:e3:f0:42:2d:a7:
f4:5a:f2:b9:f3:77:b1:e7:f4:f7:c6:ff:f1:bc:17:14:a1:2e:
4b:f9:3d:99:00:13:05:63:d2:11:94:20:60:70:56:81:ba:06:
6f:6a:a2:f9:11:9e:e1:e2:e0:11:5d:31:26:70:62:5e:7e:87:
e7:73:56:e9:31:79:4b:00:f0:fc:bd:c8:3a:24:43:de:72:c1:
57:97:79:01:4d:6e:fc:5b:31:45:4b:16:82:60:87:ea:b9:75:
94:4c:36:da:f6:ad:f2:bc:13:7d:dd:25:73:cc:ed:44:25:f5:
a2:c8:27:d1:41:f5:bd:b3:9c:3a:1f:12:cb:da:85:b4:37:98:
4b:29:f0:1b:0d:96:16:97:6d:f8:3b:c9:56:f5:d7:27:a7:44:
af:f5:7a:b5:0e:d3:cd:74:d6:83:98:f1:97:ea:81:8e:ea:86:
a3:83:ed:1c:2c:ff:d1:d7:8e:d6:c3:70:46:91:b7:22:54:7b:
66:a2:0c:cf:ad:00:fa:8b:4f:cf:e8:9f:60:a8:ce:ff:7c:ea:
e7:41:b8:4c:1c:2f:32:82:39:44:ad:4f:02:db:b0:51:93:29:
69:67:3c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:01:39 2025 by rpki-client