Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File: J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier: LmLzeBWYNWai7kerOX7QCUKAToUxTHhIr2p6h2YmXYY=
Subject key identifier: 42:70:CE:EC:2E:C7:98:B1:B8:C1:41:D4:EE:18:95:27:A8:6A:D5:D2
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer: /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial: 0199FDDA17B01B12BCAE70E42D3F5F1F1B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number: 0DC4
Signing time: Sun 19 Oct 2025 19:02:32 +0000
Manifest this update: Sun 19 Oct 2025 19:02:32 +0000
Manifest next update: Mon 20 Oct 2025 19:02:32 +0000
Files and hashes: 1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: JqwoyUB/mEcQF3bm0ptUlerQtrvn0C7tp4hXUoozJUw=)
2: UEg2a8frOwQJ_ocv6mZt898VwKc.roa (hash: HhDZ6hinLTKa6qeDqW6QogtlJ6a4udPeZaa3rESZ/rM=)
3: zUk84pMkBH7qM-5eyE2RTVXesY8.roa (hash: 1Rye/GoMkKTXa8JBFflyaNlKfqeLYK+b0R1zK9MVT4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:17:b0:1b:12:bc:ae:70:e4:2d:3f:5f:1f:1b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Validity
Not Before: Oct 19 19:02:32 2025 GMT
Not After : Oct 20 19:02:32 2025 GMT
Subject: CN=4270ceec2ec798b1b8c141d4ee189527a86ad5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0b:b5:18:a7:e8:07:84:3d:ff:64:95:f4:ab:
88:3b:75:0b:7b:45:68:08:a8:08:30:03:46:c7:48:
45:51:e2:61:65:4f:ca:d1:85:31:f4:15:1e:35:cf:
2c:e4:08:88:51:74:2a:b3:aa:dd:58:ed:bc:73:c2:
d9:b4:8d:41:ba:1b:ef:e4:a0:61:7e:af:b3:8d:72:
32:86:0e:ed:e1:7d:a7:c5:7a:88:e8:ea:91:f2:7d:
88:d2:40:fe:7a:a5:69:4b:e7:30:1e:50:1f:5f:e9:
8a:50:ad:33:29:33:fd:97:a3:c5:90:c2:be:eb:56:
6a:bb:dc:c6:d8:65:20:d6:a0:0f:bd:1c:4b:44:5e:
d9:3a:88:74:c4:52:0c:7e:9a:d4:a8:da:a5:4f:df:
2b:97:06:c6:1d:03:80:84:c0:4d:a9:8a:f2:2e:61:
2c:21:96:70:21:1c:ed:57:b8:d4:88:21:e2:83:84:
b6:e2:71:d9:d2:ab:1d:84:89:d0:ae:c7:e8:f7:1e:
e9:07:ed:a3:c0:9a:dd:a9:e5:e8:07:56:6d:0e:53:
a8:f2:e8:70:3d:ca:e3:df:f1:f2:e1:8e:f4:eb:7c:
0b:33:6d:86:0f:1c:5c:55:c6:fe:b7:01:da:a4:5f:
6b:0a:5b:c2:15:68:c3:94:71:34:14:15:ad:f7:f5:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:70:CE:EC:2E:C7:98:B1:B8:C1:41:D4:EE:18:95:27:A8:6A:D5:D2
X509v3 Authority Key Identifier:
keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:e0:52:a6:87:51:8f:51:b5:db:fc:3b:ec:77:b5:91:3b:45:
e5:78:b1:96:5a:b4:1e:37:45:04:82:7e:ad:af:aa:8b:cb:12:
be:dd:70:49:ca:0a:bc:0c:aa:99:16:f1:82:26:39:64:80:2f:
36:69:cb:76:21:8b:07:de:e0:55:5b:b9:13:bd:83:e7:91:ee:
82:46:99:98:fc:a2:47:e3:86:99:f3:04:56:4c:40:0b:d4:bc:
43:bf:d2:ad:46:9b:17:65:0a:52:ae:f8:41:a9:88:7a:47:7f:
a1:de:4e:12:59:98:2d:2f:ab:39:28:a1:2d:cb:b7:59:eb:47:
c4:12:4e:53:ca:2c:62:8b:b7:37:82:2e:61:14:72:3f:ad:d7:
13:93:da:02:1e:1b:c5:fb:74:c3:c6:50:cb:6f:8f:b7:50:86:
47:65:1d:aa:22:c3:f0:6c:a4:31:98:06:27:ba:5d:fb:f0:4a:
35:ef:d4:fd:ee:7c:60:7f:ee:a4:8d:e7:3a:23:58:c2:3c:3f:
b9:aa:5f:37:cb:05:38:73:26:a4:a4:c5:dc:7b:07:70:50:31:
64:a7:e9:08:8c:fc:56:0b:b9:18:85:6e:c7:3c:ae:8d:fa:56:
6a:4e:9f:c8:25:9e:85:7f:d2:39:6a:aa:fb:b9:42:00:b1:64:
e3:a7:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:38 2025 by rpki-client