Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
File: J2zuYEMhsPEryjZ7VMBzmqil8To.mft (raw, json)
Hash identifier: UAiKxy/Z6lXa1n4zsJoJ9aBi5uMtQf5C8nQ2fSBswns=
Subject key identifier: 07:42:C4:68:ED:70:9E:AD:E2:27:5D:27:65:CE:D0:E8:69:34:6C:7C
Authority key identifier: 27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
Certificate issuer: /CN=276cee604321b0f12bca367b54c0739aa8a5f13a
Certificate serial: 0199FDD9721F21157469441321DA0D897BFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
Manifest number: 1035
Signing time: Sun 19 Oct 2025 19:01:50 +0000
Manifest this update: Sun 19 Oct 2025 19:01:50 +0000
Manifest next update: Mon 20 Oct 2025 19:01:50 +0000
Files and hashes: 1: J2zuYEMhsPEryjZ7VMBzmqil8To.crl (hash: LIxgkDGJC8J6e3MG6rTs97yR8TOwFnpRAjpqA/tPTnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:72:1f:21:15:74:69:44:13:21:da:0d:89:7b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276cee604321b0f12bca367b54c0739aa8a5f13a
Validity
Not Before: Oct 19 19:01:50 2025 GMT
Not After : Oct 20 19:01:50 2025 GMT
Subject: CN=0742c468ed709eade2275d2765ced0e869346c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:27:f5:03:16:b8:f5:32:08:0c:9c:43:ad:
a3:d6:39:53:fe:b4:de:c2:da:19:4f:6e:7b:5a:f1:
8d:1e:db:2b:46:0c:1b:38:0a:7d:9f:e4:9e:ad:ec:
a4:e2:fe:cc:2a:57:21:14:07:7d:d6:ab:f8:3e:eb:
5d:f2:f9:53:50:eb:32:25:98:58:12:d6:a2:6a:6a:
fa:14:7b:d4:c4:14:e7:01:ef:7a:67:48:0b:e5:43:
1a:aa:88:5f:1a:72:b6:39:ff:70:27:0c:47:70:d7:
59:cc:97:49:56:56:09:2e:8e:cf:d8:63:43:6a:30:
40:16:9a:51:ee:1f:3e:43:fe:62:44:02:d1:42:79:
5a:21:f1:bb:8f:c6:da:ea:59:f5:9c:0c:bf:6f:5f:
f4:5a:c1:a1:26:2e:58:d1:0d:81:78:76:08:6e:2c:
75:8e:bb:35:76:89:1c:d5:ee:06:d4:bc:27:e6:ca:
a0:f2:e0:28:b5:ee:a1:25:29:8d:0c:05:cf:74:bb:
02:4f:d6:09:ca:05:50:9b:ce:8f:d0:49:d9:1e:f4:
6b:6b:19:89:78:3d:ab:17:cd:32:27:58:0b:bb:70:
e8:f4:cd:f8:d0:28:43:27:09:71:fb:40:16:b0:aa:
d1:d2:38:ab:83:7a:27:1f:a0:36:df:9a:fa:56:51:
de:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:42:C4:68:ED:70:9E:AD:E2:27:5D:27:65:CE:D0:E8:69:34:6C:7C
X509v3 Authority Key Identifier:
keyid:27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b1:4d:91:51:0f:b5:18:89:1e:b2:40:4c:40:c2:9a:90:8c:
7a:24:5d:e5:3e:3f:e1:5c:01:3a:d2:8d:f8:b6:ef:3f:32:3f:
9c:f1:f7:4d:ca:f3:2e:20:6f:a1:fb:40:58:f3:70:d4:a7:26:
6d:28:a2:34:e9:4c:6e:58:de:97:3c:8f:b5:04:f5:2f:77:75:
52:67:49:63:21:78:1e:bb:8e:fd:65:4c:44:d2:f5:48:c0:50:
bd:de:a4:e6:2e:79:9a:d6:9e:a6:95:12:72:fc:9c:59:c4:0e:
12:97:06:55:82:2a:93:62:96:0b:e1:30:c7:c2:7f:12:2d:b1:
38:30:3e:ba:b4:a8:c6:e1:ce:b9:e7:51:ce:37:9d:e7:f6:5d:
aa:7c:25:16:34:d7:bc:63:59:c5:58:f7:b0:21:23:20:24:72:
8c:90:3e:1a:db:96:84:fb:2b:69:1e:7f:d3:bd:fb:ff:f6:c4:
41:a2:26:be:32:46:8a:76:bc:43:34:b7:c3:e6:6b:60:c0:ac:
3d:80:d4:bf:e6:6e:27:e6:42:9d:41:2e:85:83:86:09:9d:11:
c4:78:3b:0d:b6:1c:eb:0a:d1:c1:05:30:7f:63:ea:23:02:19:
a2:6d:f4:53:2c:ed:a3:92:a3:7a:49:7b:d2:c7:c3:39:e5:22:
01:ac:8e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:13 2025 by rpki-client