Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
File: JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft (raw, json)
Hash identifier: f4LsuOhGqqPND3B/ADpB1PabGI7T7Y2W4qdINSkSOJs=
Subject key identifier: FA:47:D1:9E:EB:B7:52:80:7A:2E:CC:DB:FD:6A:02:A7:14:00:7F:34
Authority key identifier: 27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
Certificate issuer: /CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Certificate serial: 0199FCFD9EFCEF4D1840FB5371FA64EAEB91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
Manifest number: 0433
Signing time: Sun 19 Oct 2025 15:01:43 +0000
Manifest this update: Sun 19 Oct 2025 15:01:43 +0000
Manifest next update: Mon 20 Oct 2025 15:01:43 +0000
Files and hashes: 1: JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl (hash: jtbFJw9++A0Ux6wTVsxs6eUBeo/qHzN131pOkGyE4q0=)
2: gm-1FgU2aGaeL3uBWUTc78I4FE8.roa (hash: 7heZcqbabPmaXzDUlAW6gffQrzGOH/CbDbfHIPp7ikU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:9e:fc:ef:4d:18:40:fb:53:71:fa:64:ea:eb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Validity
Not Before: Oct 19 15:01:43 2025 GMT
Not After : Oct 20 15:01:43 2025 GMT
Subject: CN=fa47d19eebb752807a2eccdbfd6a02a714007f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:58:a7:5f:61:6d:ec:e9:2a:25:f1:63:04:
f4:c5:ae:5f:20:3b:a2:68:1b:d7:24:f0:af:90:1d:
0a:76:0d:6c:4a:2e:9f:57:b5:2a:c9:3f:f1:c9:68:
f4:bd:de:92:26:f3:9b:bc:5e:9e:a0:f2:1e:46:d1:
52:13:b7:81:e2:0b:7e:6a:4a:6e:5e:4b:c5:5c:dd:
25:ac:4f:d9:bf:9b:f5:c4:94:d9:3f:82:ad:1f:6e:
a5:d7:10:e3:17:c1:67:80:62:e7:3a:e3:96:7d:e9:
0d:79:69:e5:76:29:ee:8d:22:f3:41:1a:5c:2b:3f:
da:f8:63:0c:31:80:9e:3a:94:5e:07:a8:51:3a:07:
e8:92:a3:0f:5e:82:83:d6:7e:6f:bc:8d:a5:a4:23:
e5:4d:31:22:8d:2a:b0:d2:89:7b:6c:cd:65:8e:9c:
c4:01:1a:0e:93:d1:64:c3:6c:bc:5d:99:ea:e0:77:
b3:12:c8:af:40:36:0c:a6:f2:61:01:32:84:1b:39:
67:03:f9:88:d2:ed:7c:51:df:5e:fa:b6:13:43:a6:
ff:9d:94:b9:68:41:78:37:a4:bd:21:73:41:6c:51:
0c:7b:33:0d:4d:32:64:b1:c6:9f:5d:50:f0:94:05:
1b:35:84:9a:38:3a:25:a7:3f:af:b0:1e:57:4f:1d:
df:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:47:D1:9E:EB:B7:52:80:7A:2E:CC:DB:FD:6A:02:A7:14:00:7F:34
X509v3 Authority Key Identifier:
keyid:27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:9b:c2:cb:be:fc:1c:ba:38:57:cd:d4:1b:83:34:d5:b5:aa:
42:3a:42:fa:f9:48:39:1c:b5:42:77:dc:65:a7:8f:52:dd:71:
f4:b7:80:c3:05:9f:58:39:70:c6:43:97:5d:56:9f:25:68:f2:
de:a0:fd:07:a8:95:6e:57:4a:4b:b2:63:c2:34:19:f7:21:d5:
20:3f:16:17:b3:2d:ed:fc:c5:4f:80:37:76:64:8f:89:46:94:
6e:28:32:5b:07:ba:63:9f:2f:6b:22:7f:89:46:fb:4b:8a:87:
92:62:b5:ab:cc:3b:d2:69:7a:6f:60:f4:fa:77:49:cd:10:6f:
c7:b0:54:e5:43:84:b0:32:15:7d:89:13:94:d1:7e:e4:68:e6:
82:e6:bf:c9:f8:4d:80:05:be:b1:da:66:90:07:72:fb:32:a0:
22:c0:5f:75:0c:a5:4b:be:5b:43:64:ef:b2:0c:e0:12:cb:0f:
80:ec:b3:d1:0c:92:ed:88:07:2c:91:bf:02:22:f4:74:66:dc:
12:45:90:29:83:0f:de:0a:8a:e9:2f:89:2d:1c:22:69:d3:ed:
02:af:c1:fa:79:92:28:eb:7f:9d:65:98:86:cb:f8:8c:fe:0b:
12:8b:40:0f:97:f1:10:ea:fc:99:2d:f6:22:b2:33:de:42:99:
b9:09:53:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:50 2025 by rpki-client