Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File: J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier: 5w6A4nfnvGa96PdkMrU/ALW4WZ4iLEInS+uyn5BitGM=
Subject key identifier: B0:48:DE:F7:28:DB:A9:BF:22:57:03:24:74:ED:5B:D8:12:1C:38:1F
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer: /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial: 0199FE7DFCA7BC9B747778F30570DC26B815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number: 0D02
Signing time: Sun 19 Oct 2025 22:01:33 +0000
Manifest this update: Sun 19 Oct 2025 22:01:33 +0000
Manifest next update: Mon 20 Oct 2025 22:01:33 +0000
Files and hashes: 1: CeCGyRgJTvMcLvc6bqV_Qp6eGCU.roa (hash: vD/F/679cA73k7OkjDpOttD102xB/cx2AgMSLChmbBA=)
2: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: Ap63op1P984EgeBByENsq7AaNNnyCAgdVXm5jMZumEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:fc:a7:bc:9b:74:77:78:f3:05:70:dc:26:b8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Validity
Not Before: Oct 19 22:01:33 2025 GMT
Not After : Oct 20 22:01:33 2025 GMT
Subject: CN=b048def728dba9bf2257032474ed5bd8121c381f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:df:59:f0:4b:98:e9:2b:73:a7:69:64:7d:
bf:98:6c:81:ca:7b:5b:8c:75:91:bc:38:64:13:c8:
58:61:e8:a3:28:af:39:d5:f6:69:7e:a1:d3:42:62:
28:1b:0d:e0:82:7e:8b:e5:3b:d5:e2:cd:1b:37:02:
a5:0e:dc:87:df:19:38:86:c4:61:ce:99:7d:d9:52:
03:98:31:85:94:fc:88:7b:b5:e0:f0:ed:45:b4:36:
cb:fb:c1:88:37:1b:c3:35:47:0f:90:25:b2:ad:6f:
c6:f2:a7:e4:df:a8:38:f2:a4:e5:cf:65:81:33:5d:
59:f9:e1:4d:a9:aa:99:58:ca:a9:d4:ee:6b:a5:7a:
8f:af:0e:92:fa:bf:4b:6b:e7:aa:80:71:0f:0c:95:
e1:4c:cf:04:e4:55:3b:6d:d9:dc:12:26:d7:81:f6:
f6:20:be:fc:ab:85:f0:cc:42:6e:a4:ca:4a:6b:4f:
b0:16:63:6e:2a:e1:b4:45:47:43:64:cd:0b:b4:e4:
a7:28:81:b4:29:19:14:9d:7f:98:a9:88:a4:5f:2d:
18:42:23:da:f5:bb:eb:65:b7:3d:fe:11:77:1b:ea:
6f:57:6c:df:4c:0b:8c:15:95:1d:5e:3e:76:6c:66:
b5:75:79:37:f0:a1:43:16:01:90:58:57:e3:37:6d:
2a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:48:DE:F7:28:DB:A9:BF:22:57:03:24:74:ED:5B:D8:12:1C:38:1F
X509v3 Authority Key Identifier:
keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b7:10:cf:0c:7b:5a:dd:8e:2f:3f:5c:49:e8:2a:86:f2:d8:
e6:a4:48:29:d4:29:ac:91:22:cf:35:9b:ca:03:41:78:1a:1c:
65:bc:bc:b4:ec:2f:3b:a1:9b:76:88:4e:4b:c4:f0:d4:fb:51:
46:b0:2e:a7:dd:25:e0:cd:30:8c:ab:f6:26:1a:ed:b5:fd:ea:
6b:c3:4d:1c:46:77:5c:85:cd:67:f0:36:60:e0:33:e1:55:21:
7f:34:da:40:c7:47:b8:6e:31:4e:a7:c7:b3:b6:c6:93:40:d0:
97:a2:d9:d9:64:ba:72:26:09:99:63:30:87:fa:e9:2a:7a:7b:
cc:b9:1e:15:84:7e:78:1b:52:a0:f8:3d:4e:c9:da:ba:ef:cd:
7b:84:67:6b:3d:24:1b:ea:f6:e0:e6:2e:48:3b:26:a9:60:a8:
40:d5:56:e4:84:f2:bb:c1:bc:13:d0:fe:3e:55:c1:f0:40:02:
1b:3f:fc:77:09:e2:4a:dd:a6:2f:44:03:10:4c:98:73:f2:94:
0d:66:2d:e9:6c:21:83:e1:9f:7c:fd:15:41:7f:61:6c:b6:0e:
52:d1:c6:8c:b8:60:c1:7e:20:f1:bf:0a:c0:fb:40:76:41:04:
1a:b0:ee:29:ca:25:ee:3d:b4:bb:e1:00:04:ef:61:a3:37:e4:
3f:f2:4a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:16:04 2025 by rpki-client