Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: /hT1HWDdqc7keIz3iWIVe+L2/3+LzC7Qwm+CysvsODo=
Subject key identifier: A9:89:D6:AC:B0:3C:DF:60:88:64:59:C5:60:86:DB:47:D0:B9:BF:1E
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 0199FDD8FAFC3C189DB3CE9D0AD5B1ED6A50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:01:19 +0000
Manifest this update: Sun 19 Oct 2025 19:01:19 +0000
Manifest next update: Mon 20 Oct 2025 19:01:19 +0000
Files and hashes: 1: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: x99CeSin1rzNZyyOTPvcSVeLVrksQS2IgWf2EFAeRYs=)
2: aaN-bs2N1cRQu6wVRlnpd2mwkBQ.roa (hash: /bC3V57krNUgmm/Cc9N1e1boJHyImaptM9rUrHdc9Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:fa:fc:3c:18:9d:b3:ce:9d:0a:d5:b1:ed:6a:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Oct 19 19:01:19 2025 GMT
Not After : Oct 20 19:01:19 2025 GMT
Subject: CN=a989d6acb03cdf60886459c56086db47d0b9bf1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:57:d4:59:75:d9:63:27:a5:d2:e1:11:89:
8a:ab:20:51:90:88:85:18:fe:12:26:b4:c3:ac:44:
0d:75:d4:d8:81:7c:a3:73:c1:aa:ad:6d:04:9c:68:
55:eb:2b:cc:44:c0:ef:ba:60:87:44:3e:28:e3:05:
06:73:d9:6b:b4:25:5f:58:f3:e1:2c:28:d9:cf:21:
ef:47:0c:19:d7:8a:b0:e5:7a:83:17:54:ee:9b:33:
16:b8:c3:3c:c0:8c:74:5a:50:92:39:35:fd:76:f1:
5e:1a:7d:c0:02:94:a5:30:9f:35:3e:83:04:5d:0c:
b7:f7:f5:f3:21:4f:58:1a:a5:08:d6:a9:8f:4e:47:
18:b2:59:3f:71:e9:13:9b:1e:ee:af:0a:15:27:12:
60:09:a8:c6:e6:9f:60:de:d2:d8:22:49:fd:5a:9a:
b1:76:d5:08:c9:54:ed:54:b0:1a:a6:fa:43:9c:38:
f3:c4:a1:b0:d1:cb:4c:13:52:aa:e8:d1:b1:f7:07:
98:e4:ca:ad:62:e1:7b:aa:d0:bb:cd:6a:85:82:40:
b9:a1:79:0c:8b:7d:12:60:f1:77:34:61:65:ce:37:
48:42:18:b3:ca:6f:2e:ff:36:45:73:0e:0b:3f:e6:
73:c0:0d:5b:d8:ff:8a:b1:65:dd:79:98:16:3b:c3:
ef:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:89:D6:AC:B0:3C:DF:60:88:64:59:C5:60:86:DB:47:D0:B9:BF:1E
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:d1:c2:8a:76:c3:9f:69:e6:58:93:7b:2a:4a:ee:84:3b:70:
e6:61:de:07:4b:ef:11:fa:41:0b:8c:93:0a:b6:3f:3d:62:65:
e3:a4:66:e9:b5:6f:c3:62:31:c7:40:e3:f8:22:f1:0d:38:c1:
fa:86:db:a3:17:59:11:6b:4c:ce:dd:05:ca:8a:41:51:cf:a5:
ef:6c:a3:49:33:a5:9c:59:c8:78:dc:33:57:eb:5c:32:1d:7d:
e2:68:25:e5:fa:91:b6:d1:e2:c1:c6:f8:92:99:db:58:59:92:
58:f5:11:26:ab:92:10:38:54:b5:d3:93:2b:b8:51:8e:4f:d0:
c1:8a:3d:a4:55:de:50:26:09:54:b0:6e:51:94:0f:51:03:1b:
6b:7b:a2:ea:87:f6:d4:be:a3:59:e5:31:e3:26:35:f2:7c:dd:
c9:96:7c:c8:8b:3f:8b:64:20:b1:c0:ee:78:39:ee:10:5d:bb:
8f:e7:60:b3:2a:50:4f:09:d5:98:0d:1f:41:a5:79:61:c0:b8:
46:a7:8d:c3:55:45:e2:f7:52:62:12:52:81:13:30:7b:23:85:
d5:8e:26:ea:2a:9c:11:08:75:0c:bf:66:89:d0:f3:01:c6:a3:
d2:08:ef:70:57:b5:c8:4a:74:56:c1:a1:03:72:95:2c:0a:bc:
0b:b6:64:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:18:02 2025 by rpki-client