Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
File: J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft (raw, json)
Hash identifier: xr31KsLL8wSk3lV5+ORdD5Mpg0ftjVOWjx4SY+181l8=
Subject key identifier: F9:77:5C:BE:69:C8:F7:02:CF:B4:A5:92:91:92:57:7C:CA:10:FB:EC
Authority key identifier: 27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
Certificate issuer: /CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Certificate serial: 019A00A3037989AB77D93673C1565BA60B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
Manifest number: 0291
Signing time: Mon 20 Oct 2025 08:01:14 +0000
Manifest this update: Mon 20 Oct 2025 08:01:14 +0000
Manifest next update: Tue 21 Oct 2025 08:01:14 +0000
Files and hashes: 1: J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl (hash: I12Jt1tIC3dmNvNaCEbwZbGvIsNTQFGTycb5x1IFMyo=)
2: fTfqf3RzH3ibTJ1sVk6qwuCUTso.roa (hash: zZbWW91JqjxpGk5DcSBhXzXRcrXTOVjIQL0IYt57KX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a3:03:79:89:ab:77:d9:36:73:c1:56:5b:a6:0b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Validity
Not Before: Oct 20 08:01:14 2025 GMT
Not After : Oct 21 08:01:14 2025 GMT
Subject: CN=f9775cbe69c8f702cfb4a5929192577cca10fbec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:3b:af:ad:07:71:4a:f1:36:49:ae:0d:20:
ee:ec:c3:6e:95:51:08:dd:a6:a3:c4:30:36:2d:0e:
20:ef:53:b5:f1:0b:32:52:36:5b:d3:1b:26:a4:26:
a7:4d:bc:52:ac:83:2c:46:e3:2e:76:3d:f9:4e:27:
31:55:35:e7:e2:55:77:65:1f:0e:52:9c:4b:c3:2c:
ce:04:a5:14:1d:97:7b:da:cb:36:f5:ce:b6:50:fc:
1b:c3:dd:e2:5f:86:9a:74:4b:dc:20:51:a4:2c:e5:
49:95:43:26:04:68:db:48:07:98:b1:96:20:ab:64:
d8:ed:24:24:a7:4b:2a:a5:02:f2:34:a4:b0:13:60:
6d:72:75:b4:2b:95:64:7b:78:17:a9:2e:6a:3e:ce:
f6:8a:93:16:a2:50:43:6f:b0:5c:40:7a:3e:07:d5:
4b:7b:a1:16:4f:e1:7f:ad:80:4f:7a:95:f9:ac:54:
e5:39:a6:fd:b6:7e:cc:e7:05:4b:9d:45:cd:fd:04:
a7:40:6c:e9:97:56:46:18:7e:d6:c3:dc:06:02:b5:
38:a4:5f:33:5b:51:df:ee:db:f4:95:74:65:d8:b5:
30:ce:3a:bb:a4:b9:1e:b6:30:5d:e9:44:7d:74:60:
97:10:55:0a:ba:23:4e:e7:f8:a1:bc:ce:8e:d0:2c:
b3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:77:5C:BE:69:C8:F7:02:CF:B4:A5:92:91:92:57:7C:CA:10:FB:EC
X509v3 Authority Key Identifier:
keyid:27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4d:6b:ac:bf:ec:a6:19:9e:89:aa:6d:06:cb:b1:45:52:fa:
af:2b:f0:ec:47:e6:84:4e:1f:da:4e:d5:23:d9:42:42:03:f6:
2a:13:d8:89:2c:6d:55:e4:16:ff:30:87:61:98:5d:ce:9a:cc:
50:22:15:e6:ca:40:a0:a4:3d:d9:46:3c:74:1b:70:d3:4b:bc:
67:cc:03:1b:f2:93:69:99:ce:8d:a8:9d:0e:01:87:5b:b1:6f:
3b:8a:e2:46:d4:ad:f3:e9:b0:7b:c1:1c:25:6a:bc:95:9b:77:
d1:f6:0f:2c:b7:10:68:37:6b:02:54:cc:09:02:1b:70:0a:a2:
d1:03:d0:97:ae:bd:fc:bb:9f:56:6e:1b:8e:7a:80:32:4d:22:
90:c7:81:d2:57:71:91:4c:53:2e:29:13:67:ed:f1:90:3e:8c:
ce:43:da:93:b1:27:1b:7a:82:b8:bf:02:ba:6e:55:78:12:a9:
0a:57:86:b1:1b:b8:a9:6b:00:b9:fd:cf:84:ea:65:6c:7d:c1:
10:18:29:80:46:c3:d0:d8:23:a9:b4:91:77:40:3f:ea:5a:1e:
c3:f0:97:6b:de:b9:fa:f9:bb:f4:cb:5c:31:6c:20:0e:25:a5:
79:1b:d8:b8:eb:d8:ad:c4:8d:c5:4a:11:f2:28:87:2f:58:7c:
6d:5b:f3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:45:05 2025 by rpki-client