
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
File: J4dqqRe20B2U_yVmKwj7IT8P570.mft (raw, json)
Hash identifier: 7b5QetU3vEXPtv7fHw670uJGuDAN/zGziUmfWyCjcLo=
Subject key identifier: 91:46:F9:5A:96:EF:5E:BE:91:B6:DA:38:B5:EE:C8:46:D4:FB:6F:51
Authority key identifier: 27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
Certificate issuer: /CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Certificate serial: 0199FBEC14310FA213093E197643D4BB3EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
Manifest number: 106E
Signing time: Sun 19 Oct 2025 10:02:56 +0000
Manifest this update: Sun 19 Oct 2025 10:02:56 +0000
Manifest next update: Mon 20 Oct 2025 10:02:56 +0000
Files and hashes: 1: J4dqqRe20B2U_yVmKwj7IT8P570.crl (hash: WV34+IO6sIWBYH5UFRFAAftqPXXbezmPM9bBC6CEvC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:14:31:0f:a2:13:09:3e:19:76:43:d4:bb:3e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Validity
Not Before: Oct 19 10:02:56 2025 GMT
Not After : Oct 20 10:02:56 2025 GMT
Subject: CN=9146f95a96ef5ebe91b6da38b5eec846d4fb6f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1a:b1:83:47:a3:f8:3b:ef:09:98:a5:c5:17:
f8:0b:11:c9:5a:66:3e:b3:9a:bc:f8:dd:32:37:0e:
04:12:29:b9:1f:13:bf:b9:d3:e1:47:3b:61:e2:e7:
94:78:a3:af:b9:f9:a8:58:c2:0c:31:2b:4b:2a:2c:
b0:ff:bd:86:78:fb:25:69:3e:81:07:da:43:2a:88:
5e:46:74:32:09:11:85:12:bb:77:8f:dc:98:a5:d6:
e6:c3:d3:bb:69:dd:b6:c0:1f:c0:54:0b:9e:62:86:
af:80:bd:23:04:ec:a1:97:2d:f5:05:5d:9b:c0:eb:
a0:17:c2:de:98:e2:a3:f9:bd:fa:99:ae:5d:a2:56:
75:b9:00:0b:99:5f:31:b4:31:d5:68:43:bc:d5:28:
f1:c4:fa:73:f7:2e:27:f2:4a:e7:91:87:a2:6e:06:
de:d9:c2:18:44:4e:88:02:4f:e2:c0:8d:bf:a3:2e:
d4:f9:2a:f1:83:e2:eb:39:f1:d5:be:56:cc:85:35:
b0:9a:c1:91:43:bc:bf:97:87:29:bb:10:a7:f2:12:
bc:db:be:26:c1:c1:55:be:33:87:df:5f:38:7b:40:
30:ab:ae:d4:b8:64:05:f3:ec:c1:67:6a:0b:6e:44:
a2:87:f3:c4:3f:df:73:26:d2:b0:a2:41:2f:b2:55:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:46:F9:5A:96:EF:5E:BE:91:B6:DA:38:B5:EE:C8:46:D4:FB:6F:51
X509v3 Authority Key Identifier:
keyid:27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ee:8b:f6:2d:55:b7:be:7e:c9:1a:4d:81:7b:62:4a:26:c9:
2c:a9:26:c1:21:30:1a:88:02:a2:72:59:ff:9a:10:aa:2f:c1:
e9:0e:e7:04:ac:0b:98:1f:ba:ed:1b:6c:12:ab:40:db:0b:ee:
60:a2:73:d7:2d:15:c4:50:c4:37:14:69:9f:1f:65:44:c5:82:
f4:82:2b:bc:63:57:78:49:2a:99:2d:24:c9:5a:4f:f7:34:6c:
eb:1f:a1:4f:e4:e9:10:d1:e1:e0:5f:15:a4:73:7f:61:63:15:
67:a2:63:1f:9c:c9:75:d1:8b:6d:74:1c:3b:89:8c:ba:64:c2:
fc:90:c7:42:4b:0d:a5:27:3a:6e:d2:6f:dd:bf:c2:44:c1:e2:
e7:c1:ae:b3:6d:5a:7a:e7:35:a5:6c:d8:3a:57:4c:c4:5d:53:
27:3d:5f:98:b3:68:5e:80:ba:3e:37:36:02:48:78:5e:36:6a:
01:0c:5f:07:ff:9c:75:20:80:42:ff:75:0a:1a:d8:9a:ff:95:
78:5a:c1:74:e7:02:72:47:ec:a4:9d:55:c6:98:ab:43:f4:99:
f7:14:da:e8:7f:cd:bf:86:23:57:32:d0:94:b7:f1:17:67:ac:
8c:25:ae:34:3c:8e:4f:d8:0b:63:51:57:56:da:d2:de:51:f9:
d3:27:ee:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77BQxD6ITCT4ZdkPUuz7JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODc2YWE5MTdiNmQwMWQ5NGZmMjU2NjJiMDhmYjIxM2Yw
ZmU3YmQwHhcNMjUxMDE5MTAwMjU2WhcNMjUxMDIwMTAwMjU2WjAzMTEwLwYDVQQD
Eyg5MTQ2Zjk1YTk2ZWY1ZWJlOTFiNmRhMzhiNWVlYzg0NmQ0ZmI2ZjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hqxg0ej+DvvCZilxRf4CxHJWmY+
s5q8+N0yNw4EEim5HxO/udPhRzth4ueUeKOvufmoWMIMMStLKiyw/72GePslaT6B
B9pDKoheRnQyCRGFErt3j9yYpdbmw9O7ad22wB/AVAueYoavgL0jBOyhly31BV2b
wOugF8LemOKj+b36ma5dolZ1uQALmV8xtDHVaEO81SjxxPpz9y4n8krnkYeibgbe
2cIYRE6IAk/iwI2/oy7U+Srxg+LrOfHVvlbMhTWwmsGRQ7y/l4cpuxCn8hK8274m
wcFVvjOH3184e0Awq67UuGQF8+zBZ2oLbkSih/PEP99zJtKwokEvslU0QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFG+VqW716+kbbaOLXuyEbU+29RMB8GA1UdIwQY
MBaAFCeHaqkXttAdlP8lZisI+yE/D+e9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRkcXFSZTIwQjJVX3lWbUt3ajdJVDhQNTcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YjM3ZGItMDQyYy00MDQxLTg3OTct
ZjBhN2E0YzU4NjczLzEvSjRkcXFSZTIwQjJVX3lWbUt3ajdJVDhQNTcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80YjM3ZGItMDQyYy00MDQxLTg3OTctZjBhN2E0YzU4Njcz
LzEvSjRkcXFSZTIwQjJVX3lWbUt3ajdJVDhQNTcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATe6L9i1V
t75+yRpNgXtiSibJLKkmwSEwGogConJZ/5oQqi/B6Q7nBKwLmB+67RtsEqtA2wvu
YKJz1y0VxFDENxRpnx9lRMWC9IIrvGNXeEkqmS0kyVpP9zRs6x+hT+TpENHh4F8V
pHN/YWMVZ6JjH5zJddGLbXQcO4mMumTC/JDHQksNpSc6btJv3b/CRMHi58Gus21a
euc1pWzYOldMxF1TJz1fmLNoXoC6Pjc2Akh4XjZqAQxfB/+cdSCAQv91ChrYmv+V
eFrBdOcCckfspJ1VxpirQ/SZ9xTa6H/Nv4YjVzLQlLfxF2esjCWuNDyOT9gLY1FX
VtrS3lH50yfuMQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:11 2025 by rpki-client