Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
File: J_8gRAummKTcBDm8F5-zOj7hzJU.mft (raw, json)
Hash identifier: 0QQ4qIzFFeC68jhvB8NUqfz2i2SkHmHiZ+Ai+NP85pc=
Subject key identifier: 7C:41:6A:EC:45:C4:FA:07:E2:B3:DD:02:D3:30:57:C7:7C:7F:4F:4F
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial: 0199FF9028AB96E14FC51CC34CBFFF1AC245
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
Manifest number: 0DBA
Signing time: Mon 20 Oct 2025 03:01:01 +0000
Manifest this update: Mon 20 Oct 2025 03:01:01 +0000
Manifest next update: Tue 21 Oct 2025 03:01:01 +0000
Files and hashes: 1: J_8gRAummKTcBDm8F5-zOj7hzJU.crl (hash: 1YRBdypZopPFheQ9oFGzSPd5zVwv4yzM3cxCoiGB1bA=)
2: _tUXooY9b06bDKDjgo1P9zjilGI.roa (hash: eyE2Sp1NPUfSOv01mHhVH2OIahlIo+oZSctInWb+NT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:90:28:ab:96:e1:4f:c5:1c:c3:4c:bf:ff:1a:c2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Validity
Not Before: Oct 20 03:01:01 2025 GMT
Not After : Oct 21 03:01:01 2025 GMT
Subject: CN=7c416aec45c4fa07e2b3dd02d33057c77c7f4f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2c:57:85:2c:32:b8:ea:22:63:c0:e1:b9:b0:
9f:28:ce:56:df:58:47:65:fc:64:87:da:57:c6:98:
25:bc:c5:9b:79:39:48:4b:66:ed:9e:f2:3c:86:c9:
f7:dc:79:9d:ae:57:0a:e5:1c:43:f2:74:43:71:21:
ae:56:08:1b:eb:f8:48:a5:3f:c2:3f:c6:10:e4:ec:
5e:54:55:d7:8b:43:f3:98:24:8c:37:10:f3:c0:48:
86:64:ea:8d:67:32:f4:fc:ca:12:1d:c1:0f:92:72:
9f:ad:2f:32:fe:98:ec:4e:88:b1:c4:d1:50:66:29:
01:69:a7:f0:d7:1b:d1:dc:27:4e:7b:fa:f6:e1:99:
75:82:56:38:e9:c6:19:d2:c2:0b:31:8e:2e:84:80:
87:7c:73:dc:62:8a:db:96:29:78:bc:64:55:de:a3:
d1:54:76:33:01:61:50:e2:fd:7c:81:c3:88:86:8d:
18:e5:65:2a:7d:d4:1e:3d:c5:df:65:2b:8f:4a:ad:
29:46:cd:79:c1:8f:d8:e9:94:68:a5:75:05:58:8e:
01:83:5a:b3:0e:4d:46:5c:6a:f1:5b:1a:65:40:72:
59:a9:9e:7d:d3:48:11:5d:13:e1:49:80:8f:37:32:
dd:d5:39:3a:6f:40:ba:77:b2:e5:d4:b9:c7:f2:ea:
f8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:41:6A:EC:45:C4:FA:07:E2:B3:DD:02:D3:30:57:C7:7C:7F:4F:4F
X509v3 Authority Key Identifier:
keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ab:8b:44:47:4b:6a:45:25:e2:29:5f:c2:2e:1a:71:4e:1d:
6a:01:8f:e0:ce:b4:ce:bb:20:34:5d:26:e3:ad:20:8a:9b:3b:
80:56:5f:2c:74:1d:5d:78:c4:da:5d:0b:9d:10:7e:f8:3f:26:
4f:5d:44:b3:c8:68:5d:0d:a2:fe:43:90:54:5d:25:28:03:ba:
b6:d3:f4:6f:0e:9e:aa:01:97:c8:a5:25:82:e5:03:ae:b9:5f:
c3:6d:b9:34:eb:cd:1b:b7:cb:d8:ea:dc:61:3b:67:a1:a6:5a:
04:cd:92:b4:e6:6a:36:5f:2e:b3:6c:f4:a8:1b:0c:f9:b5:5a:
4e:74:a4:6a:60:95:35:ba:62:9b:87:23:01:25:39:db:14:7f:
e3:5c:2a:1a:e0:75:9b:61:3e:26:81:0d:12:49:86:b9:d5:be:
cb:77:ed:df:61:14:c0:55:d8:e1:96:e4:59:ed:49:84:00:83:
32:ad:2b:7e:2c:e2:cc:30:2d:ff:cc:d2:dc:d6:f1:c6:29:0a:
33:14:df:de:8b:8c:48:f4:01:65:6d:ba:98:b2:0a:d4:dc:58:
58:8d:4d:6c:f5:6f:74:fe:18:46:7b:ce:d8:a6:3e:22:92:10:
a9:09:c1:ce:7d:57:9c:0c:13:3d:73:06:fb:b0:91:c8:c7:65:
26:8e:5d:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/kCirluFPxRzDTL//GsJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmYyMDQ0MGJhNjk4YTRkYzA0MzliYzE3OWZiMzNhM2Vl
MWNjOTUwHhcNMjUxMDIwMDMwMTAxWhcNMjUxMDIxMDMwMTAxWjAzMTEwLwYDVQQD
Eyg3YzQxNmFlYzQ1YzRmYTA3ZTJiM2RkMDJkMzMwNTdjNzdjN2Y0ZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlixXhSwyuOoiY8DhubCfKM5W31hH
Zfxkh9pXxpglvMWbeTlIS2btnvI8hsn33HmdrlcK5RxD8nRDcSGuVggb6/hIpT/C
P8YQ5OxeVFXXi0PzmCSMNxDzwEiGZOqNZzL0/MoSHcEPknKfrS8y/pjsToixxNFQ
ZikBaafw1xvR3CdOe/r24Zl1glY46cYZ0sILMY4uhICHfHPcYorblil4vGRV3qPR
VHYzAWFQ4v18gcOIho0Y5WUqfdQePcXfZSuPSq0pRs15wY/Y6ZRopXUFWI4Bg1qz
Dk1GXGrxWxplQHJZqZ5900gRXRPhSYCPNzLd1Tk6b0C6d7Ll1LnH8ur48wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxBauxFxPoH4rPdAtMwV8d8f09PMB8GA1UdIwQY
MBaAFCf/IEQLppik3AQ5vBefszo+4cyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYt
MDkxMTVkNTkyZTZmLzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8yMWRlYmEtZGI2Ni00NzAyLWJkYmYtMDkxMTVkNTkyZTZm
LzEvSl84Z1JBdW1tS1RjQkRtOEY1LXpPajdoekpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiquLREdL
akUl4ilfwi4acU4dagGP4M60zrsgNF0m460gips7gFZfLHQdXXjE2l0LnRB++D8m
T11Es8hoXQ2i/kOQVF0lKAO6ttP0bw6eqgGXyKUlguUDrrlfw225NOvNG7fL2Orc
YTtnoaZaBM2StOZqNl8us2z0qBsM+bVaTnSkamCVNbpim4cjASU52xR/41wqGuB1
m2E+JoENEkmGudW+y3ft32EUwFXY4ZbkWe1JhACDMq0rfizizDAt/8zS3NbxxikK
MxTf3ouMSPQBZW26mLIK1NxYWI1NbPVvdP4YRnvO2KY+IpIQqQnBzn1XnAwTPXMG
+7CRyMdlJo5dgA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:33 2025 by rpki-client