Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File: JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier: i+CwRT7FrHG7EbwOABV1LIsXCgadV7dRGpr/1Xtl134=
Subject key identifier: 67:5B:D2:A7:2D:6F:C7:90:85:9A:6A:77:D1:FC:09:05:E9:C8:5B:58
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer: /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial: 019A0259C984D9429690DACE9D6B8398797E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number: 02FF
Signing time: Mon 20 Oct 2025 16:00:29 +0000
Manifest this update: Mon 20 Oct 2025 16:00:29 +0000
Manifest next update: Tue 21 Oct 2025 16:00:29 +0000
Files and hashes: 1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: fKAGAt5ODVosjTVTfGtf28FEgdkG/Yo9nXheJVFYPqk=)
2: xCvl2MPRqLFevw92K1xWqEyP8xM.roa (hash: x5lJC5gSbKWJztGnWxiyT9yj/ffbvJ91buVaYTLqpME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:c9:84:d9:42:96:90:da:ce:9d:6b:83:98:79:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Validity
Not Before: Oct 20 16:00:29 2025 GMT
Not After : Oct 21 16:00:29 2025 GMT
Subject: CN=675bd2a72d6fc790859a6a77d1fc0905e9c85b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:63:32:51:50:ac:f0:6b:c5:23:f5:fb:1d:62:
32:9c:5c:91:5a:da:22:48:77:63:64:34:0b:9f:61:
85:da:17:59:6e:7e:9c:0e:6e:b6:9b:5e:9f:b8:65:
36:29:4c:fc:ba:5e:92:d8:cd:ef:b7:ce:3a:ab:f3:
ef:8f:e8:04:b2:20:78:ba:2e:ed:3d:6e:7b:a5:b9:
32:d7:ea:18:58:ad:73:82:bb:72:3a:de:f0:3a:6e:
4a:cf:02:af:00:8d:8c:5a:ab:c9:bd:15:da:4e:26:
b8:85:e6:1b:cd:c9:17:f3:8f:5a:7f:9d:bf:b6:cb:
99:9e:16:4f:77:a6:94:5d:d5:3f:c3:58:39:77:8a:
fe:64:fa:6f:81:dc:c4:cb:4e:ac:2e:0a:ee:23:14:
26:9c:30:69:4f:97:94:c0:1a:1d:be:6c:cc:a8:31:
11:e6:ea:8e:84:b8:f0:34:fa:81:34:9d:be:4c:65:
06:14:6a:bb:74:5e:a9:57:27:e4:fd:b5:9c:bb:d1:
ba:81:ae:08:1b:7e:a7:6b:92:55:0c:38:da:e5:9f:
9e:b3:d2:00:96:6e:62:56:d9:c4:a9:de:e7:13:4d:
10:94:d1:9c:91:de:ef:9d:db:92:cf:b4:6d:15:25:
b6:37:0e:9a:26:18:aa:88:64:7b:76:0c:39:08:97:
24:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5B:D2:A7:2D:6F:C7:90:85:9A:6A:77:D1:FC:09:05:E9:C8:5B:58
X509v3 Authority Key Identifier:
keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:30:19:42:92:9e:ac:d7:3e:91:a9:3a:73:1f:73:54:74:3c:
c3:a5:af:d8:71:44:be:91:68:21:40:28:0a:58:0e:60:42:71:
9b:f8:8e:6e:17:89:e9:70:97:ac:0a:42:df:71:26:0a:51:7d:
e7:0f:1e:1b:a1:78:4c:6a:8e:8a:fa:28:12:72:70:10:46:8f:
d3:8d:58:c0:bb:16:f7:7e:f5:a8:2f:f4:4f:42:22:19:4d:41:
f6:68:b2:4c:69:3c:ce:80:c7:3c:1e:e5:d4:b2:27:5e:6d:b0:
86:de:03:42:a7:f8:af:20:50:47:61:22:69:ac:3c:20:c3:f3:
2b:cd:7f:f5:9a:06:69:07:d2:f4:db:bc:dd:53:9c:09:5c:1b:
8d:06:a4:4c:14:76:f0:fc:ba:22:fe:ab:67:f7:8b:92:64:6b:
f4:9e:9e:a0:6e:f0:28:02:1e:06:20:49:9e:22:54:c5:34:e7:
a2:b4:26:17:82:5e:68:0e:94:7e:97:c1:17:2f:47:23:ca:9d:
91:08:3b:5b:8a:5f:7a:6e:01:4e:36:93:8f:db:13:97:b5:10:
7c:43:a2:db:75:ee:99:6b:8b:3b:26:00:2f:dd:0a:7f:c2:2a:
8a:3a:be:ed:4c:ea:31:2b:8b:35:b8:78:34:06:3a:47:e0:3f:
23:21:97:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:36 2025 by rpki-client