Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: g36J89bnXcxBmFB+TTos7d0kqAHtahkI0tQPEnQxfaI=
Subject key identifier: DA:70:4D:59:02:B2:97:F5:77:0D:16:0C:60:FA:08:52:0A:1B:C2:36
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 019A53ACF8BFF63558B915578B9157F0A108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 01A9
Signing time: Wed 05 Nov 2025 11:00:36 +0000
Manifest this update: Wed 05 Nov 2025 11:00:36 +0000
Manifest next update: Thu 06 Nov 2025 11:00:36 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: mBYqOIvX+2Vxhd+FKpUaWRRWLUr/4NMvjOypkuH99D4=)
2: PXQZ8Kqy_mx9lBo5_cDxC51se1U.roa (hash: 9tHWBrF2ZmcSWuE44cZk0kByYXScp8kTGOAiMALH64w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:f8:bf:f6:35:58:b9:15:57:8b:91:57:f0:a1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Nov 5 11:00:36 2025 GMT
Not After : Nov 6 11:00:36 2025 GMT
Subject: CN=da704d5902b297f5770d160c60fa08520a1bc236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:c0:8c:34:91:ec:92:a5:6b:25:ea:49:61:
df:15:f0:d5:12:e7:84:f6:a1:e4:c5:77:9b:7d:1a:
f0:46:de:a3:b3:97:9a:31:76:bf:f1:7e:a5:0e:b4:
2e:3c:57:17:6e:a6:0b:3a:14:f8:83:8c:18:ee:2b:
d4:5b:17:d4:51:80:7a:33:c6:28:66:1e:97:10:e5:
14:d7:21:5f:7c:f2:50:0b:58:33:82:2d:eb:dc:a4:
3a:c0:f5:79:64:ed:cb:ca:42:e9:90:35:b5:55:6d:
77:b0:8c:b5:68:c7:e2:0c:ab:a8:1b:64:90:05:14:
f1:35:bd:9b:79:86:f4:a9:e8:94:e1:47:8b:61:f0:
72:6d:a6:96:ff:68:55:f4:19:95:f1:16:24:b6:08:
bd:4f:d2:d1:8e:79:25:37:3e:9c:e4:9d:cb:c0:47:
66:84:0e:b2:1f:36:d6:7a:d7:18:d8:46:09:10:0c:
ee:b1:cb:92:39:d3:e4:7a:f3:77:b3:a3:d4:27:3c:
78:21:0d:05:f1:aa:a4:b5:df:a1:81:f9:39:80:56:
b0:73:b9:1c:5a:04:c1:3a:2b:d5:42:98:50:52:d8:
1f:35:a6:41:d1:f2:65:a0:2d:21:b0:98:cf:b2:13:
6c:01:03:22:f4:7f:ca:c7:97:6f:8b:26:d4:d1:fd:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:70:4D:59:02:B2:97:F5:77:0D:16:0C:60:FA:08:52:0A:1B:C2:36
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:87:0c:ec:2a:d0:eb:b8:e5:06:90:42:2b:58:eb:e7:c4:b0:
43:86:53:f4:1f:3b:c4:65:da:a9:1c:3f:83:81:b2:b5:87:10:
4e:d7:22:8d:32:74:c2:69:01:4c:25:78:0b:77:e4:54:01:a6:
3d:79:7a:07:73:9a:77:a4:41:17:e3:f0:dc:19:20:92:cb:90:
fe:ce:6c:3a:13:69:3a:92:70:7a:d1:34:44:6f:bd:77:95:0f:
15:ba:e8:da:8e:08:07:d8:31:97:8f:52:7a:a6:3b:71:2a:a8:
36:c8:2d:44:8c:8f:91:cc:83:33:c9:07:aa:97:17:04:b5:b8:
8c:86:7a:3d:f9:7e:3c:22:cd:23:7b:6b:c2:02:5a:8b:3f:da:
5f:df:47:84:82:d2:de:d9:c2:01:ce:02:90:d8:6b:63:1f:ae:
b6:31:9e:b7:f8:8e:ce:05:11:bd:a0:68:67:0c:31:68:54:5c:
31:7e:b5:40:72:66:4a:d2:6c:05:93:bb:c5:50:1e:c9:8f:0e:
3c:35:53:74:e6:12:04:42:25:6a:ec:93:0e:c8:4d:28:1c:96:
19:2c:29:5e:e4:20:86:b1:97:75:14:2e:1d:a9:fa:5d:04:b9:
52:d3:7e:61:3f:5e:54:e0:66:74:1b:22:35:39:02:58:26:fd:
19:48:d0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:21:17 2025 by rpki-client