Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File: _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier: DSbidh149dHKKHB7vDRW8gQ0B38Sj5Ht/2t1mpPLw0o=
Subject key identifier: 67:BB:C6:99:D8:F5:93:BF:3F:5E:C3:0A:2B:B2:09:14:E8:5F:62:E0
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer: /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial: 019A4EF5C50D31FF9A10D4DC947DA7774DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number: 0571
Signing time: Tue 04 Nov 2025 13:02:00 +0000
Manifest this update: Tue 04 Nov 2025 13:02:00 +0000
Manifest next update: Wed 05 Nov 2025 13:02:00 +0000
Files and hashes: 1: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: TLU6IUm4PkeluKhXk38RBEPq2KypE3RBtyFscyH08WY=)
2: vrcnG3rPeIv-84eM3hfeiXZcqyA.roa (hash: JWLSZU8dWBcg2FNxy+Ts9gij4yT1i3JNXoLy/WJRhwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:c5:0d:31:ff:9a:10:d4:dc:94:7d:a7:77:4d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Validity
Not Before: Nov 4 13:02:00 2025 GMT
Not After : Nov 5 13:02:00 2025 GMT
Subject: CN=67bbc699d8f593bf3f5ec30a2bb20914e85f62e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:75:55:bd:78:aa:d2:ce:5c:59:8f:4d:3b:
ac:69:d5:51:27:52:79:89:56:a7:7a:79:28:f8:97:
fd:ec:b7:75:ac:cb:e2:8d:30:3d:d1:2a:a6:3e:2d:
19:9b:e3:37:36:50:ca:76:87:9a:1d:c1:09:a5:b6:
97:05:5a:93:05:aa:1c:67:45:9b:f4:b2:c5:07:bf:
c0:8e:13:85:b4:f6:15:21:ee:9d:09:b2:dc:e2:d0:
ba:d1:2e:42:12:72:32:f3:1e:82:1a:e1:d6:c9:02:
8b:0b:f9:eb:bb:88:e0:2a:50:76:f5:aa:f7:2e:dd:
08:fe:bc:c1:dd:de:98:0a:96:de:f5:e5:6b:7a:49:
39:4b:72:58:33:d4:09:c4:7f:4a:88:b5:b3:00:43:
21:80:ce:37:0f:33:88:a9:4a:a7:20:17:48:25:1d:
04:99:28:a5:46:60:e2:1d:4b:b7:b7:b0:10:2f:19:
56:bf:8f:88:5b:0b:44:0a:da:f2:78:62:b4:9b:79:
ef:30:25:c5:04:67:5c:7e:e9:01:a5:ad:30:63:07:
7c:be:5b:b0:e3:91:90:8f:e8:72:7b:0a:f6:7c:e7:
b4:08:cf:7f:ee:50:27:ae:c2:97:e1:d5:e1:14:6c:
9a:b9:26:94:07:a9:22:b3:c9:3d:5d:8f:9e:63:20:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BB:C6:99:D8:F5:93:BF:3F:5E:C3:0A:2B:B2:09:14:E8:5F:62:E0
X509v3 Authority Key Identifier:
keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:af:67:d4:8b:14:98:14:27:77:75:b2:ff:48:44:36:63:2d:
68:e2:02:92:d9:26:0c:a6:df:8c:ed:71:2f:89:1e:66:a5:ab:
22:c1:4d:5a:88:f8:14:dc:ee:ef:12:ac:3a:3c:4e:9a:97:39:
fb:cd:b4:9a:53:f1:0d:64:65:40:38:d4:e3:90:c0:31:a7:d0:
80:0d:00:7a:58:81:d4:5c:8d:63:57:40:cb:5a:60:19:6a:f5:
ed:f8:da:73:66:cb:96:bc:e5:86:c0:da:9d:13:8e:9b:39:14:
df:3d:01:a4:5a:a8:92:96:bd:09:60:ed:65:9f:77:47:b0:75:
ab:c6:46:f9:e4:1f:26:db:22:94:7f:c6:dc:e9:8a:d2:0d:81:
b3:64:ce:33:00:99:e0:39:a1:f0:85:c1:88:bb:c2:f7:2f:65:
bb:19:9c:5b:5e:44:b4:99:12:e6:02:db:8e:85:2b:49:cf:40:
64:3e:aa:ae:8a:ac:44:b8:a4:01:ae:e5:de:f6:b5:d5:3f:d9:
f5:d9:c1:89:f5:f1:b7:01:18:84:23:67:dc:5c:25:67:a2:7a:
f0:fc:ab:27:85:0a:29:b2:a7:6a:15:22:b1:4b:8e:37:da:6f:
00:d2:4b:d2:ae:07:e1:e3:a7:d4:cd:2b:cd:ba:61:45:87:58:
d9:40:42:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:37:33 2025 by rpki-client