Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
File: J582UuRFj6ABxnOKQUJbB-cMkaE.mft (raw, json)
Hash identifier: Utt1DtBWyX44j/hoQTuj7LJ8osujTMQ0SXraw0J06rA=
Subject key identifier: C3:47:58:9B:6B:05:09:A9:75:B3:3A:18:55:B3:B0:B5:65:DC:A1:50
Authority key identifier: 27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
Certificate issuer: /CN=279f3652e4458fa001c6738a41425b07e70c91a1
Certificate serial: 0199FBEB76B43A683E7067A3714C33DBBFA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
Manifest number: 135A
Signing time: Sun 19 Oct 2025 10:02:16 +0000
Manifest this update: Sun 19 Oct 2025 10:02:16 +0000
Manifest next update: Mon 20 Oct 2025 10:02:16 +0000
Files and hashes: 1: J582UuRFj6ABxnOKQUJbB-cMkaE.crl (hash: OKstDkGlKaODBOB0o0uz7WluXEhk3/0116CfTARNKZI=)
2: M2Kelg9WxvDQBMzJqioPXlZdWcE.roa (hash: mQA6DzGnOtrnPFm8tdzPvg5lmx/E+CRmFPMNFXsiBjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:76:b4:3a:68:3e:70:67:a3:71:4c:33:db:bf:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279f3652e4458fa001c6738a41425b07e70c91a1
Validity
Not Before: Oct 19 10:02:16 2025 GMT
Not After : Oct 20 10:02:16 2025 GMT
Subject: CN=c347589b6b0509a975b33a1855b3b0b565dca150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:19:b2:a0:d4:9d:a6:cf:1a:4f:72:68:9b:63:
a4:a1:e0:30:ac:0f:ca:1f:53:1b:8d:12:f2:7f:a1:
a3:08:89:4c:73:5a:2c:d2:81:b7:84:14:1e:a4:45:
aa:89:e7:27:bb:d2:3a:87:c7:b5:72:bd:66:00:a5:
4c:13:46:9c:c7:91:61:82:f0:be:d1:a6:cb:9f:24:
57:73:f4:99:96:a1:af:0c:0c:46:59:6e:e5:70:c6:
13:92:2b:67:a6:2a:96:96:61:bb:7f:e1:5a:18:61:
84:a4:f0:c9:97:aa:96:1d:c5:74:87:88:91:69:e8:
04:19:a1:33:22:fc:de:62:4e:88:84:47:d0:62:5c:
75:a7:d6:a9:38:aa:28:7a:1b:20:4d:f7:ff:2f:b6:
1a:95:70:63:dc:5d:4b:13:18:fa:d7:33:f7:7d:61:
5f:ad:d4:b6:4c:ba:ad:14:51:54:ea:fa:cc:49:3e:
0c:fa:b5:22:c6:fa:48:3b:51:82:f6:7b:20:f9:d3:
e6:5d:2a:63:a3:4c:26:c9:05:c0:21:e6:f7:fb:b1:
4c:0d:ad:00:ed:5b:8e:cb:5f:ff:84:fb:61:6e:f7:
66:71:c1:77:77:94:6e:91:fc:a5:f5:c8:76:53:fd:
c6:a6:53:fd:c9:1d:d4:6f:1d:f0:a8:c9:64:38:8b:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:47:58:9B:6B:05:09:A9:75:B3:3A:18:55:B3:B0:B5:65:DC:A1:50
X509v3 Authority Key Identifier:
keyid:27:9F:36:52:E4:45:8F:A0:01:C6:73:8A:41:42:5B:07:E7:0C:91:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J582UuRFj6ABxnOKQUJbB-cMkaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b9c2e2-37b6-42c6-acda-f8e6bfe1adfb/1/J582UuRFj6ABxnOKQUJbB-cMkaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:3c:ab:2d:60:9b:df:62:a4:b9:89:22:06:ba:ec:e8:7f:f7:
b3:2e:5a:02:ef:15:84:24:f4:de:1b:90:b1:8c:a8:64:b9:30:
0d:74:6c:14:20:87:d4:57:97:74:8b:5c:f6:5f:ce:5a:07:78:
4b:64:20:f4:ed:de:fb:e0:d1:25:0c:cb:7f:5b:de:44:ab:c0:
75:6c:e4:5f:0c:93:d0:d4:3e:31:82:7f:d6:88:65:0c:fb:ae:
38:2a:c8:50:02:6b:fd:74:d5:02:b9:9a:bb:de:fa:af:2e:90:
ac:cd:df:4e:9d:e1:c1:dd:1a:31:fc:8b:d2:df:94:5e:9c:28:
dc:0c:90:80:e6:c3:15:33:82:34:a4:55:20:60:4b:94:44:3b:
a8:52:2e:b4:de:d1:37:3e:8a:f2:d3:79:61:ec:7c:05:80:b8:
8b:63:ac:52:7c:20:f9:ba:a4:77:bd:85:24:e9:ca:1d:f2:cf:
ec:04:97:f5:ff:92:c7:7a:59:28:c3:95:c2:d4:2f:d7:07:88:
0c:08:c7:40:5a:81:62:b6:e5:76:be:8a:8c:bd:0b:9c:35:1b:
d3:8b:33:2d:c6:22:62:85:46:5c:da:0b:6b:35:73:68:3e:67:
40:f1:f1:44:f9:51:1e:cf:b6:ef:b3:88:ee:72:b0:7d:b9:9b:
91:bb:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:02 2025 by rpki-client