Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: aSAPOgs+OXajhmTR0xkhw1ViaskpxaXx/stjmqt7zwY=
Subject key identifier: 3A:0F:8C:90:21:D1:92:C1:0D:C5:05:7F:99:F4:32:82:2D:1D:F7:FE
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 0199FFFE5CF02DF9BA228EC173D93DD0C0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 05:01:24 +0000
Manifest this update: Mon 20 Oct 2025 05:01:24 +0000
Manifest next update: Tue 21 Oct 2025 05:01:24 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: hpG4mn48+rrbDpSp7ZzBJ2LAJuFTXvTaTVrIc6ZCZ1U=)
2: UimTjYOP0EzrCaiSFBeZrUyW0Nc.roa (hash: ICMmUQQ3EZmWfRi2Atl6bpgSoSc4L6nW+n1fJyzn1Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:5c:f0:2d:f9:ba:22:8e:c1:73:d9:3d:d0:c0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Oct 20 05:01:24 2025 GMT
Not After : Oct 21 05:01:24 2025 GMT
Subject: CN=3a0f8c9021d192c10dc5057f99f432822d1df7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:39:ec:ae:fe:e6:1f:d1:71:11:07:1c:94:
ba:d5:43:f1:fe:34:71:32:cf:40:3b:92:d4:01:f9:
81:4e:60:60:b4:8a:f1:60:64:e7:f1:07:82:89:44:
af:90:93:c9:aa:10:e0:80:69:68:df:4e:43:b5:59:
80:f2:6f:f6:95:cd:03:d7:48:c6:ae:7e:8d:7a:ac:
e9:e0:2f:5c:ab:df:e9:07:4d:0d:ff:ef:7d:f9:d5:
68:a5:8b:5c:28:e6:f0:12:d0:93:cb:a1:75:3d:7c:
74:64:fa:99:9d:57:1f:ad:84:cd:27:74:60:34:6e:
2e:11:ab:21:32:22:41:87:65:58:20:82:cc:ee:3c:
b0:40:3e:62:77:2d:1d:72:b9:97:f9:29:6d:86:2b:
a3:f0:cb:6d:f4:8a:c0:90:4d:80:b8:a8:42:9b:38:
64:06:03:7d:35:d1:9f:3e:1c:b9:78:51:a9:cf:71:
7b:3c:f9:e2:5f:06:b9:c6:99:24:e3:e8:b3:79:ba:
b2:5f:fb:76:fb:71:cc:63:6c:b7:38:f7:c5:4e:67:
4a:33:0a:41:89:9d:2c:6d:93:d2:f5:19:6d:13:be:
07:72:e9:0a:d8:97:ba:8d:03:f7:a6:ba:6f:e8:d9:
57:2f:c2:cc:92:d0:cb:71:51:f1:10:20:6c:50:05:
e6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0F:8C:90:21:D1:92:C1:0D:C5:05:7F:99:F4:32:82:2D:1D:F7:FE
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:6f:ed:3d:1f:7f:61:27:de:20:a3:dd:63:bb:7c:f6:3e:e0:
a2:64:80:c2:36:3a:ef:0c:05:05:ae:59:f7:d4:82:c2:0f:a2:
12:8a:1e:01:ea:8e:11:d2:04:11:6c:56:ea:e6:9b:42:77:87:
c0:e9:d9:23:76:2a:69:2c:33:7b:a5:f2:3f:c1:cc:27:22:51:
02:0b:8d:12:1a:e8:c3:b8:8f:52:da:2b:d1:cd:9d:23:ce:99:
ef:70:a8:56:65:f6:e5:70:de:08:8f:9f:b3:08:df:06:b7:e4:
dc:f9:be:0f:53:82:21:8c:15:53:80:ef:25:19:88:80:44:c9:
c7:03:f3:cf:e2:4d:81:fb:d4:41:cf:cb:9b:53:85:9c:38:e7:
be:64:3b:9a:6f:d9:77:0c:d6:61:71:11:63:82:35:bc:4f:5d:
5d:1d:e3:ee:8e:bb:78:ed:2d:4c:23:cf:e4:49:0c:2b:aa:65:
87:5e:0c:b4:bd:2c:da:15:49:34:73:98:cc:35:d0:a0:d5:c0:
a8:77:f7:6d:70:c8:78:70:02:59:e6:9b:b2:5b:91:29:90:3d:
61:db:20:b4:fa:df:05:b8:b2:31:a9:e8:f6:f8:66:7b:50:e6:
c1:8d:ac:8f:6c:ad:f6:a5:91:a7:84:65:43:70:a2:c7:90:5b:
3e:59:d5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:48 2025 by rpki-client