Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
File: J83PK9CaINK63Tq2yMft-h_Vwsw.mft (raw, json)
Hash identifier: h4vJijEj3ZTXD3qiLUv8KTrFukTvH517oOPbgSrLNJs=
Subject key identifier: 52:F8:95:3D:38:4F:7C:27:09:31:1F:31:BE:C5:B8:ED:F1:F6:BD:4A
Authority key identifier: 27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC
Certificate issuer: /CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc
Certificate serial: 0199FB7C91E0F58AE8AC99A1D5B1B594D761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
Manifest number: 03FB
Signing time: Sun 19 Oct 2025 08:01:08 +0000
Manifest this update: Sun 19 Oct 2025 08:01:08 +0000
Manifest next update: Mon 20 Oct 2025 08:01:08 +0000
Files and hashes: 1: J83PK9CaINK63Tq2yMft-h_Vwsw.crl (hash: 1t6by27gl4Gd8Tm5SQta0Y5ApkJXsChpV7h/uJIrI7M=)
2: kxpaHhhuxaN-Jg9For9SY2Nccrk.roa (hash: Q31rgNDFAzRPHBiMS/f4s6A4eZqCkoNUT9MdgG2F6C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:91:e0:f5:8a:e8:ac:99:a1:d5:b1:b5:94:d7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc
Validity
Not Before: Oct 19 08:01:08 2025 GMT
Not After : Oct 20 08:01:08 2025 GMT
Subject: CN=52f8953d384f7c2709311f31bec5b8edf1f6bd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:ef:15:15:27:e2:6e:e6:44:55:01:fe:8c:
44:1a:d8:87:73:38:3f:c3:69:9f:43:21:fa:ad:49:
e6:b3:78:d6:76:ca:a8:bd:1b:f9:b8:be:93:62:c0:
bd:8e:ee:1c:ae:a3:c5:de:b6:44:1f:36:de:9b:a2:
c6:04:46:85:80:f2:60:c2:13:81:1e:b6:09:2b:1d:
ff:01:e0:c6:ba:01:34:3f:a5:20:02:27:52:d5:27:
69:54:08:0e:af:c7:e7:8d:4a:36:ce:00:e2:ff:72:
e0:6b:5e:bf:f2:be:8b:27:23:3d:17:b4:a6:cc:32:
99:bd:79:74:62:e8:cd:30:05:43:bb:43:85:b2:ae:
ae:bd:02:31:25:1d:a6:d0:eb:b0:76:9a:13:3e:03:
45:72:5d:96:eb:16:82:3b:0b:85:d3:6e:87:f4:d6:
e4:1f:82:10:38:3d:88:83:64:9e:11:ec:ce:95:f3:
36:6a:f7:e6:66:f1:4e:63:81:5c:a4:e6:72:3c:23:
09:11:e1:20:81:81:0a:1f:3b:f4:de:55:0e:4c:5f:
cc:b6:56:e8:94:ce:29:49:46:a0:71:4e:5e:04:63:
fd:ec:f3:d8:69:42:d3:36:d6:74:6b:3e:73:f3:25:
da:df:90:99:c1:10:38:86:a0:01:3a:36:1e:14:bd:
0f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F8:95:3D:38:4F:7C:27:09:31:1F:31:BE:C5:B8:ED:F1:F6:BD:4A
X509v3 Authority Key Identifier:
keyid:27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a6:b1:63:87:8f:c8:bd:b3:b0:38:f2:4e:f1:9c:17:a4:1d:
7f:fc:67:12:38:ab:ac:2a:cc:0f:46:0e:a5:fe:e4:52:5e:4a:
56:98:a2:5a:9f:6b:cc:fe:42:01:b9:83:28:67:df:4e:89:da:
f5:69:a4:9e:97:17:be:02:27:d3:96:25:b9:5e:89:5d:a9:1c:
57:31:27:0d:2d:7b:9a:a6:df:27:07:d0:ca:21:fe:9e:99:61:
27:39:ea:36:84:fc:6b:61:36:b1:e2:b6:cf:99:7d:63:f8:36:
c0:49:4b:49:6b:69:98:9b:96:33:64:d6:83:a4:5d:80:45:78:
0d:1a:4d:17:81:cb:25:a6:ea:a3:bd:f8:f4:3d:fc:f8:4a:71:
58:0f:a0:1c:27:ad:4c:a6:a8:74:3d:d1:8c:a1:30:b2:49:64:
95:c4:f8:72:ab:4d:31:5f:47:0f:d1:b8:e0:00:d8:b6:fc:f3:
7f:67:ed:1e:18:0e:7e:e0:ec:9a:ba:ff:7b:9b:8e:e0:e8:75:
d6:68:12:c9:3b:22:62:8a:ae:db:7f:c1:4c:51:34:d3:af:db:
f4:91:94:a4:30:03:f7:ac:47:66:e2:b8:1e:bd:b7:43:cf:76:
ed:70:5b:39:26:50:e8:49:c5:eb:ef:e2:e0:a2:5b:07:7f:95:
8a:47:95:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:45 2025 by rpki-client