Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: P3AvlE29fS9bIShDmVp2KKPeqtNzujfwUZ9zlXkYQ6M=
Subject key identifier: AC:1A:8C:7E:95:A9:B8:63:35:87:2C:3B:FA:D9:CE:2C:0B:98:86:D1
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 0199FEEB9D4933C4FCE5466D8D42C4241B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 1205
Signing time: Mon 20 Oct 2025 00:01:18 +0000
Manifest this update: Mon 20 Oct 2025 00:01:18 +0000
Manifest next update: Tue 21 Oct 2025 00:01:18 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: Z4bmAuuZHNNlsBT1BDdFfLMvtNwPLGT/g4airLmkpbk=)
2: _pQtR1EJpgHMSOkTmSK_Er0tXsE.roa (hash: m5yMM2ApK+4Me2gJxPiOKP0gpYE7to93xl8Fx6CP7v4=)
3: qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa (hash: fwjzyDVkTfLPWzdH9pq6+z0fYQ+pKyYb7cgFc8eFsFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:9d:49:33:c4:fc:e5:46:6d:8d:42:c4:24:1b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Oct 20 00:01:18 2025 GMT
Not After : Oct 21 00:01:18 2025 GMT
Subject: CN=ac1a8c7e95a9b86335872c3bfad9ce2c0b9886d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:37:b2:e6:a0:d0:fa:c8:06:37:ae:5d:ea:
44:15:d2:52:32:93:7c:96:13:70:2b:9c:44:17:f1:
c2:8a:06:ab:d4:df:60:2d:11:93:fa:c4:20:53:63:
f7:70:95:2b:bf:92:90:9e:03:b4:9b:84:c1:18:c2:
a5:0f:bc:26:e7:d5:b0:31:b2:ea:5f:cb:97:f5:99:
63:d7:fd:ee:2e:b7:98:30:39:26:ac:47:0c:f1:e0:
52:41:14:f4:83:75:39:2f:ab:29:b3:e0:48:5d:bd:
d4:23:b1:12:d6:f0:20:b2:42:5c:27:15:3d:62:23:
be:a8:46:6d:d0:98:e7:6e:f7:22:45:c8:fe:e8:14:
ff:74:98:37:dc:5e:42:04:25:45:57:34:5d:b3:c6:
70:31:93:07:3c:79:17:3e:74:82:2d:5e:33:e8:63:
54:ac:da:3a:f2:5f:ec:86:a3:95:4e:3d:61:9e:e7:
78:25:c8:20:91:69:8f:af:c7:84:7e:3a:67:6f:70:
0e:33:16:31:f5:73:d7:5d:d7:a4:e2:33:72:66:1a:
4b:45:f2:5f:97:2c:c3:02:fc:e4:b5:ca:c9:1a:d1:
f3:e2:db:3e:e1:63:86:0d:e0:ff:7b:d3:3a:64:77:
7c:19:25:65:74:ec:bf:e8:8b:1c:50:a0:eb:07:a5:
5e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1A:8C:7E:95:A9:B8:63:35:87:2C:3B:FA:D9:CE:2C:0B:98:86:D1
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7b:22:fc:5c:28:56:f5:9f:c8:b4:56:1e:f2:a8:f8:84:8c:
dd:70:74:0e:87:de:2d:bc:ec:23:a3:e7:28:f7:e5:48:d7:ae:
33:78:5b:9f:ad:4a:c2:14:24:e3:c7:f6:85:7d:22:e3:8b:7b:
98:4a:4a:7c:0e:09:46:f7:91:e4:f0:3a:c1:2c:58:0a:db:fc:
6c:12:81:45:8e:2b:ca:a4:29:43:53:5e:9b:ad:29:e1:f7:98:
6d:06:ed:71:d7:aa:f0:68:19:84:9b:bf:18:d7:62:81:d3:93:
53:33:20:89:9a:e2:2e:58:a6:d1:42:80:c6:5a:a7:ae:dc:af:
c4:c8:85:61:4c:55:47:ea:c4:4f:49:64:82:ec:d5:bb:88:f2:
f4:93:9b:1a:f2:ca:73:dc:71:49:e0:c1:73:f5:4a:ff:29:70:
39:15:62:d8:c7:2b:cc:8c:47:6c:83:e1:07:25:80:d5:d2:f1:
fe:31:6b:d1:96:0d:7d:00:75:09:03:05:7c:ff:0b:df:77:ac:
01:67:38:1e:a6:45:50:ef:4f:79:b9:01:ae:de:cb:97:aa:52:
0c:14:28:64:14:ea:ad:6b:27:e6:02:bb:60:be:a1:fd:3f:b0:
83:8a:d6:77:37:17:1d:93:05:e9:2c:ae:bf:99:68:b1:23:d4:
5d:b2:7a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:00:58 2025 by rpki-client