Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json)
Hash identifier: ujsChKbquCYCse0d7kh+gE8B1wy828uzJ5ifwZtF7BI=
Subject key identifier: EC:A1:3D:75:02:AA:81:61:27:1A:2B:E8:5F:6C:BA:8A:92:69:E6:40
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 0199FD6AE42A6F25468838FF89FDC205F277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
Manifest number: 1147
Signing time: Sun 19 Oct 2025 17:01:04 +0000
Manifest this update: Sun 19 Oct 2025 17:01:04 +0000
Manifest next update: Mon 20 Oct 2025 17:01:04 +0000
Files and hashes: 1: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: wbf/pmAC1v8Fqp9Ap7gPgABSkGZGoO2eG8pflm850Tk=)
2: YmG5FcsW3S43XyijT62zmWMd610.roa (hash: Sh1sRBIDqrknsDPBNOeRI3CSuT41xnHIPduRy76n3aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:e4:2a:6f:25:46:88:38:ff:89:fd:c2:05:f2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: Oct 19 17:01:04 2025 GMT
Not After : Oct 20 17:01:04 2025 GMT
Subject: CN=eca13d7502aa8161271a2be85f6cba8a9269e640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:b0:2a:68:6d:0c:ff:35:3b:b8:26:d8:e2:
a2:45:4d:34:9c:31:66:4a:76:37:26:ae:9d:1a:06:
fd:9a:92:7f:42:30:9a:cc:6a:b7:d3:66:8d:10:99:
2b:5d:ba:20:74:c7:7c:a4:65:5f:c9:d4:80:ac:2a:
14:f7:25:e3:90:9b:5e:a1:27:dc:e3:46:81:20:38:
6b:0c:a1:1d:2f:3a:09:4c:9d:36:d1:5e:c1:42:a2:
d0:a5:cb:89:05:e0:43:21:c6:a0:a7:0a:8b:3b:32:
2e:bc:08:31:87:49:13:bc:80:ba:05:1c:97:61:37:
75:de:6f:2a:c7:c2:ca:a9:0c:bf:0d:5f:f8:66:c4:
f5:31:2f:4b:4b:cb:91:ab:93:f3:3a:fb:b2:03:f9:
9e:ac:a2:31:33:fc:13:67:dd:8c:b6:90:f2:a0:74:
f7:1e:b0:bd:fd:d6:77:d8:c6:86:07:8e:aa:47:34:
e8:8f:23:c8:96:0d:05:75:0d:fb:c5:47:7f:47:2e:
29:37:17:7f:4a:c0:11:ee:8d:26:e3:00:43:b3:e7:
90:45:ba:db:d4:7c:77:67:b9:11:d2:9e:11:ed:b4:
99:2c:7a:2c:93:ac:88:32:06:df:e3:4e:15:fc:97:
30:15:c3:62:49:71:56:57:4e:2e:d1:c1:24:73:44:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A1:3D:75:02:AA:81:61:27:1A:2B:E8:5F:6C:BA:8A:92:69:E6:40
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:51:dc:c5:ce:d4:0f:eb:1d:4b:1f:13:28:c3:bd:34:67:f8:
69:3b:9c:8d:7b:15:2c:12:6a:19:4c:28:2f:f0:71:eb:6c:19:
f5:3e:a9:6e:a4:1e:13:af:99:89:31:69:84:36:14:e5:2a:b1:
27:6a:39:02:ef:94:00:1a:7d:19:8a:bd:1a:38:c9:c2:cd:dc:
49:73:9b:2b:fe:c5:9f:d0:2c:c1:c4:02:ee:77:55:5e:ea:f3:
62:45:7d:19:f7:91:b9:3b:df:d9:ff:7b:06:54:52:f9:65:d6:
8b:09:be:76:fe:0e:fc:8d:2a:ab:8e:20:e6:27:b4:ef:64:5d:
56:35:ec:0b:71:f7:f5:38:1f:6e:4f:bc:00:32:ad:ae:39:e2:
c3:6b:9b:fc:ed:a9:f0:cd:cd:f9:38:db:b9:26:91:07:21:02:
9f:6e:34:6a:7b:d1:9b:ed:66:62:7b:d9:ea:0b:01:9d:6c:37:
0d:7a:c4:06:9b:7c:c1:a4:50:8b:7a:e9:9b:24:e1:6c:25:3e:
c3:39:b1:6a:47:02:06:d0:a9:73:9b:9d:ee:b0:1a:c1:0f:bc:
c1:44:f8:7c:84:29:ae:3b:3a:51:31:22:24:6f:b7:20:a2:a2:
49:5e:9c:4d:e5:3a:0e:bb:4e:08:c2:74:78:1e:05:66:e0:80:
45:dd:14:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:44 2025 by rpki-client