Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: KfscGdwVC3o5s8QZk7d2KihoajargBWHBl9cjofkYr0=
Subject key identifier: 89:FB:92:E6:21:44:17:02:7A:76:29:00:C2:98:DB:EE:C2:62:13:F1
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 0199FC58CDA05E4573BE3BCA966460E35D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: IjluqbVdM5zm7wvPSgQZOmXQjag.roa (hash: QKwqMUOeWOJatNvuP/XT/XSpsSd9RiOppxhqX3P9KPo=)
2: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: 9P5muIYwTYKfRHPzqj7nHvwyOh16v9uZBGs+8OayZFs=)
3: YY-hoyGXDDo8SiePezL_ZO2nNOw.roa (hash: A3j7uoljgavovkzwgqN6nFVhnXRD4UmTm39D3QvLFO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:cd:a0:5e:45:73:be:3b:ca:96:64:60:e3:5d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=89fb92e6214417027a762900c298dbeec26213f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:56:f4:a9:96:64:21:6e:53:47:08:31:b8:d0:
70:39:ec:b9:59:36:1b:bf:70:bc:ea:1f:10:2e:9f:
6d:c2:14:7a:d4:c4:3a:a8:b4:b5:b6:b6:af:fb:17:
ce:e7:29:0f:5d:e9:45:ae:56:73:3c:a1:d2:ae:52:
a7:ca:51:56:7a:92:c3:9f:03:0b:81:a2:95:07:9f:
c7:bb:9a:78:f0:6c:c9:1b:6c:c0:58:4c:a9:e1:89:
22:ba:49:ab:e6:30:94:11:96:7a:b6:a5:1c:ae:16:
37:b6:03:8b:83:33:a8:9a:9f:c7:63:c1:e6:31:52:
ff:ab:50:3e:6d:98:2c:50:a0:00:77:9a:bb:9d:82:
cf:64:2d:f2:1b:b8:28:68:f5:be:22:75:11:dc:a9:
df:29:31:e1:d3:87:3d:b3:c3:94:9e:02:46:e5:ca:
a1:d5:cf:77:af:05:4a:68:3f:2a:a5:a2:94:7e:71:
8c:df:a3:14:60:4c:f3:5c:45:c2:5c:b1:21:50:4b:
89:81:5f:39:fd:5c:a1:6a:1f:c1:84:2c:e0:04:0c:
7e:fb:f1:c8:25:45:25:e4:3e:25:40:2a:f8:f1:af:
4e:92:91:4a:81:13:55:8b:ef:fb:36:53:99:e3:39:
60:51:0f:dc:05:24:d2:4e:7f:4d:31:ca:68:2a:81:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FB:92:E6:21:44:17:02:7A:76:29:00:C2:98:DB:EE:C2:62:13:F1
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a9:4f:8f:26:ed:3c:44:0d:57:6f:74:b5:27:da:f0:23:7f:
b2:9c:89:03:b7:ad:e0:4b:17:0a:1e:64:6e:dc:5d:5b:d7:5e:
c7:04:47:17:c0:9b:4c:8d:eb:3f:3c:52:bc:ee:62:8d:33:e0:
20:1d:87:ea:2e:91:e9:6e:86:0a:d9:4e:86:be:91:25:bf:ee:
42:e5:c2:07:03:ce:ae:cc:eb:d1:af:03:a7:bc:20:05:ed:16:
25:04:22:81:d5:bf:98:39:a5:82:b5:ae:51:e7:ac:c9:ca:58:
3b:5e:8d:f8:46:d8:3f:24:fc:ef:0d:67:5b:66:f2:f2:4b:53:
1e:2d:f4:85:9d:b0:4e:fb:af:1a:e1:21:49:e6:ea:15:25:04:
91:5a:82:59:4f:7c:99:4b:70:c9:0a:2e:f5:db:84:f7:c1:6a:
5f:75:93:fd:c0:28:31:0c:fd:b3:15:73:3c:99:34:32:7d:01:
78:77:83:16:44:ca:4f:6b:40:40:0a:fc:07:43:65:7f:3b:4d:
12:cf:58:38:99:00:d6:15:7d:4f:80:e7:7f:a2:82:80:bc:c8:
17:ca:03:0c:c6:57:a3:29:b4:e2:cb:72:9f:9f:58:eb:55:98:
8a:fb:d3:17:4b:d5:e1:dd:8d:26:71:2f:80:7b:bb:12:6c:c4:
27:69:84:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:16 2025 by rpki-client