Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: f9ibCY4Oq5x3vXEMA0MvpSJvfOMMqkAKcaqW587pXW4=
Subject key identifier: C5:70:D2:97:5D:AF:AD:5E:EB:4C:BB:CC:76:59:65:32:BF:18:0A:41
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 019A4EBD41AFB1EA56C352A9E3FFC6029F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 156D
Signing time: Tue 04 Nov 2025 12:00:17 +0000
Manifest this update: Tue 04 Nov 2025 12:00:17 +0000
Manifest next update: Wed 05 Nov 2025 12:00:17 +0000
Files and hashes: 1: 3WjmScxyPShGMsEmfTcZS4RZUd0.roa (hash: 5cWtsZDvpUp+XvqnrWOkzcAs96EsLhbvVP+8UGNRG5Q=)
2: Fi_TM4K4PYpSezLxC5qNEiPOZ3Q.roa (hash: DTiudzjdSu7JP8slciOiBe/Ykx5OQa6RusVSJBvKWj0=)
3: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: 8C+5D01cyE7lkOZuJVoPjHJw03Ikm0jfD//HDv1GYWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:41:af:b1:ea:56:c3:52:a9:e3:ff:c6:02:9f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Nov 4 12:00:17 2025 GMT
Not After : Nov 5 12:00:17 2025 GMT
Subject: CN=c570d2975dafad5eeb4cbbcc76596532bf180a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:03:e9:be:85:0d:4f:19:ed:e0:d3:47:8c:b7:
b1:5c:f4:6e:05:8e:57:2d:cb:f2:56:34:12:2e:cf:
66:1b:ca:fb:9e:fe:dc:89:88:be:73:c6:9f:96:54:
e2:8a:39:17:99:70:a5:12:96:9e:d9:b5:2c:bd:43:
50:4e:05:12:84:d7:1d:f8:02:10:11:a5:eb:1b:44:
26:7a:82:ec:91:d6:50:3e:bb:96:bd:48:b2:4d:18:
de:58:f6:9c:75:c4:36:b0:aa:ed:27:a1:f5:48:e5:
ab:bd:73:94:70:10:db:8a:c1:5f:4a:6a:f1:d5:fb:
d8:cc:02:2c:b7:d1:0b:29:73:4f:28:1a:4f:d5:35:
be:93:d2:d3:78:0c:a9:5e:ea:ab:7f:8e:b1:e6:ee:
99:50:74:4b:b3:8b:41:7c:6b:cc:35:31:7d:50:43:
f4:95:3e:fc:da:7e:f6:58:f6:35:bd:04:37:b6:4c:
ba:3c:a8:6e:29:b1:0c:32:45:9c:32:40:4c:ca:47:
78:a1:f8:ce:2a:29:80:02:62:9a:30:f1:ae:cd:54:
7f:2e:e9:44:b7:af:7e:ab:96:13:c5:d4:b8:81:74:
73:88:58:77:1a:33:1b:bc:d7:ae:d8:39:96:13:23:
4d:04:37:07:6e:fd:c2:02:5b:2d:f7:e5:cd:59:f2:
67:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:70:D2:97:5D:AF:AD:5E:EB:4C:BB:CC:76:59:65:32:BF:18:0A:41
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b7:af:45:c8:b3:46:50:b4:e8:00:96:43:49:65:0e:7a:ff:
04:a3:2f:d3:40:43:c1:ec:87:86:0d:d7:8f:82:b5:33:d1:77:
52:b7:2b:35:61:77:d2:fd:2b:33:9e:fd:75:f4:64:72:65:7f:
e4:5e:d8:1e:ca:95:90:de:eb:6d:df:64:f6:b4:a9:38:87:5f:
2e:3c:0a:47:c4:88:71:cb:4c:fb:cf:1c:dd:e0:5a:27:80:b2:
99:09:c7:0d:66:f3:90:cc:3b:9d:01:bd:2e:6c:25:68:4e:2a:
1b:02:fe:ee:1b:1c:46:48:24:77:2b:a9:2f:3f:7a:aa:31:de:
d4:95:d1:4c:9a:bf:b8:11:cd:29:5a:95:08:2c:f9:bc:a9:10:
66:ea:ca:e8:4a:76:6a:50:f5:7d:80:b1:30:15:fb:51:f1:23:
f3:ba:21:55:be:f8:59:51:e0:c3:78:10:f6:92:26:f8:e0:53:
9f:b7:d0:89:eb:8f:ea:4b:d6:46:08:eb:38:3d:71:86:73:70:
69:4c:e9:83:7d:7e:17:97:22:23:0e:4b:86:a1:b8:6a:22:75:
a6:17:93:ae:83:37:80:7a:9c:56:ce:bc:32:64:8c:10:48:de:
4d:8f:72:41:be:48:96:d8:47:9f:4d:21:1f:2f:53:14:d5:2b:
31:cf:38:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:40 2025 by rpki-client