Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
File: J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json)
Hash identifier: 8OvXhaTpkYa/lMWQnkAfSHOS93wU5Lc1CmnS+mBgZyA=
Subject key identifier: D0:F5:A5:FE:57:3C:6D:8D:13:68:79:38:F9:6C:B6:85:4C:16:83:7F
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial: 019A4DAAFB1D7327C79B958CFFAA5EDB6132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 07:00:42 +0000
Manifest this update: Tue 04 Nov 2025 07:00:42 +0000
Manifest next update: Wed 05 Nov 2025 07:00:42 +0000
Files and hashes: 1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: 0avkkb/rCyOS/2OELzhmfUNCJ3DEahfdcelREMkRq2A=)
2: cSxqzHQIFX03E67QT7FwyB0-2wc.roa (hash: ehpsqzEAcx4o5Hfss771kB3qGbR5m4ewO+AFeZ/9pUw=)
3: d1pbdA__eUq65yVNaUqfoJfF1gA.roa (hash: GBeDmf/sEIKh081o/6CjC+lT/hastrtkWuFWWekc6pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:fb:1d:73:27:c7:9b:95:8c:ff:aa:5e:db:61:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Validity
Not Before: Nov 4 07:00:42 2025 GMT
Not After : Nov 5 07:00:42 2025 GMT
Subject: CN=d0f5a5fe573c6d8d13687938f96cb6854c16837f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:15:4c:36:04:9e:ad:7c:e3:90:fb:ce:77:89:
59:b2:55:eb:b4:9c:97:10:64:d1:80:ed:64:c2:5b:
cc:b9:ed:12:ca:47:02:22:5f:62:95:9f:0c:bf:fe:
65:80:60:bf:60:c5:79:95:f8:1c:3d:da:2c:30:1d:
a4:6a:94:35:5c:c9:36:2d:78:e8:99:57:03:88:fb:
ed:83:af:df:d4:1a:df:0e:9e:8b:15:c0:f8:86:6b:
5f:c2:76:5c:9f:83:da:fb:39:05:25:0a:aa:17:c0:
8e:ef:57:8e:40:27:a4:3f:11:09:d6:33:29:f3:b8:
cb:a8:b8:3e:da:be:b1:53:d5:93:37:27:f6:3d:ea:
59:11:ef:8a:a9:91:a9:e0:76:b0:55:cd:27:8d:d3:
e0:62:dd:49:23:a7:d1:42:11:d8:23:26:b4:e2:b5:
e6:91:28:6c:9c:be:90:32:ed:6c:dd:18:32:49:e5:
5c:c2:8a:9d:ec:a9:cb:03:c0:4d:41:91:e8:2a:16:
12:db:d6:f4:88:c8:56:96:bd:be:20:ed:fc:a1:df:
7e:d4:0e:77:36:96:07:fe:0a:11:ec:5c:1c:93:cc:
6c:3d:1c:96:12:8b:2e:3e:a2:be:8b:cd:5a:b2:ed:
92:73:9a:7a:34:77:da:14:dd:95:71:e6:dd:16:ed:
1e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F5:A5:FE:57:3C:6D:8D:13:68:79:38:F9:6C:B6:85:4C:16:83:7F
X509v3 Authority Key Identifier:
keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9e:3f:48:90:e7:df:de:6e:df:0d:14:6d:da:80:7f:8f:62:
06:e5:61:ed:e2:4d:c7:94:be:ee:35:4f:c3:ec:91:90:11:9d:
ea:0a:85:48:1c:7e:38:72:a9:e4:8d:e2:8d:3e:84:d1:85:27:
3b:38:16:37:52:b2:fb:4a:36:1a:62:5d:d2:3c:f4:4a:b7:69:
bb:aa:41:91:5c:fa:0b:ab:05:bf:04:44:1d:53:ce:0d:23:88:
26:e6:7c:ff:11:5f:7a:d1:28:12:05:3f:79:50:44:45:dd:58:
5f:f5:99:64:49:7f:b3:40:46:e2:45:e8:fc:da:d7:59:6d:74:
63:1e:f0:6c:6d:60:e3:1d:f1:dc:e4:93:53:1c:9d:e4:a2:c8:
ec:d9:a4:e4:f1:1e:5a:81:67:6c:fb:c8:e9:4d:df:7a:5b:02:
87:ea:2e:14:f5:79:27:41:15:c5:9d:43:54:aa:bb:97:d1:e0:
6b:53:c2:ce:6b:e7:d6:0c:ce:60:6c:09:a7:1a:9b:71:aa:c5:
7a:16:91:65:28:46:1b:1d:d3:d4:c4:4a:ef:2c:72:fc:8c:e8:
5b:b9:c8:09:0e:eb:e0:98:b0:9e:46:6d:b4:b3:4b:47:b5:56:
95:40:af:9b:e7:bf:2d:c7:e8:0b:0d:22:be:1d:1d:1c:90:b6:
9b:11:e0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:30 2025 by rpki-client