Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
File: J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft (raw, json)
Hash identifier: m19VvGBhXsVIq6fZrcpsWUc8ap/un95488lPs2vWk8g=
Subject key identifier: B8:05:F8:4A:A1:EC:2A:1E:E1:FD:57:4A:FF:B1:E2:CD:08:8A:21:DF
Authority key identifier: 27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4
Certificate issuer: /CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
Certificate serial: 0199FCFDA6800DB873A521C7F27FB37F2A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
Manifest number: 02AD
Signing time: Sun 19 Oct 2025 15:01:45 +0000
Manifest this update: Sun 19 Oct 2025 15:01:45 +0000
Manifest next update: Mon 20 Oct 2025 15:01:45 +0000
Files and hashes: 1: J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl (hash: FM4C7fV11cQFbow2pT5syjV+e5JFSfjtrPZbnn8NLkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a6:80:0d:b8:73:a5:21:c7:f2:7f:b3:7f:2a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277d80f0fe2b43d046beb3d79bac197a7989c2e4
Validity
Not Before: Oct 19 15:01:45 2025 GMT
Not After : Oct 20 15:01:45 2025 GMT
Subject: CN=b805f84aa1ec2a1ee1fd574affb1e2cd088a21df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:94:5e:f0:db:e4:7d:dc:e7:be:4f:fd:cf:43:
10:af:e6:5f:54:aa:98:fe:96:f8:d6:18:f3:83:99:
30:5a:24:76:27:83:1f:fd:77:ad:e9:82:f7:6d:cf:
1e:9e:26:6c:07:70:e6:58:38:fa:36:fc:0b:c6:56:
00:25:c0:d1:70:30:7b:6a:f7:64:a1:83:b6:33:7c:
a3:8e:b2:49:e9:63:9a:78:90:f9:01:5c:18:80:2e:
81:c5:81:e6:80:04:de:fd:52:1b:07:e4:66:cb:65:
e1:79:88:a0:7b:f9:b2:a4:b0:33:3b:3d:ef:28:b8:
62:51:45:50:9a:3f:a6:68:88:bc:3b:55:bb:ed:24:
9c:66:9a:3a:1a:9a:d4:31:79:13:73:fb:49:ac:82:
ec:49:77:bc:5f:4c:4e:ba:d2:cf:00:5b:9b:f9:75:
cd:e2:1b:04:0c:33:93:de:97:df:8e:e2:f6:90:f6:
4a:c0:38:5e:4d:96:c9:4c:24:1a:ac:76:3e:1b:28:
c8:2b:db:e0:a2:08:b1:92:88:80:34:17:bd:bd:cb:
73:ca:69:19:97:9e:1e:76:31:74:53:a8:db:6e:e2:
d6:eb:6f:f7:28:33:ac:1b:07:01:e0:9b:7c:24:83:
38:2b:26:0d:88:07:92:53:c0:d5:a0:a6:cb:b5:32:
be:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:05:F8:4A:A1:EC:2A:1E:E1:FD:57:4A:FF:B1:E2:CD:08:8A:21:DF
X509v3 Authority Key Identifier:
keyid:27:7D:80:F0:FE:2B:43:D0:46:BE:B3:D7:9B:AC:19:7A:79:89:C2:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J32A8P4rQ9BGvrPXm6wZenmJwuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/190950-d41c-4d26-85bc-5184b55f1cff/1/J32A8P4rQ9BGvrPXm6wZenmJwuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f5:8c:28:b1:80:04:8a:02:ed:7c:4f:5d:85:a5:ce:cb:b8:
fe:43:07:d1:8e:d6:11:81:50:cc:8d:a6:39:8e:f2:9a:23:bc:
aa:41:44:76:d3:03:0a:a0:cc:fc:af:88:02:70:be:83:d1:2f:
39:48:3e:f4:82:d6:56:46:bb:fd:cc:a2:ad:de:70:21:80:3b:
b4:97:28:f4:60:43:0c:17:21:6b:d3:83:47:bb:45:ba:ab:e9:
39:0a:f4:fb:98:71:99:39:4e:b1:b3:9d:7f:ed:52:14:3b:85:
ee:fd:36:1d:70:03:58:15:12:d9:d9:3f:7b:1c:18:7a:11:a4:
1e:1c:78:a4:7b:36:b9:b0:47:93:67:3d:17:c6:28:33:e7:43:
10:ab:63:b5:eb:39:a3:28:14:72:85:53:e9:5d:26:cc:57:8c:
83:a0:ec:6f:44:a9:1c:39:73:03:0d:5b:76:e8:9e:ab:ed:4f:
76:6f:c2:0f:d9:df:e3:e9:c1:65:42:2b:67:ac:44:69:88:d9:
14:b3:cf:8e:21:50:53:56:be:9a:a8:33:c2:ea:6f:c8:e3:6d:
88:ab:40:c6:5f:60:78:43:e6:f4:6d:7d:91:cd:53:63:c2:57:
e3:40:7b:0c:72:0e:bf:9a:b7:51:e5:ec:ab:a3:56:12:6b:f6:
ea:4d:19:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8/aaADbhzpSHH8n+zfyqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3N2Q4MGYwZmUyYjQzZDA0NmJlYjNkNzliYWMxOTdhNzk4
OWMyZTQwHhcNMjUxMDE5MTUwMTQ1WhcNMjUxMDIwMTUwMTQ1WjAzMTEwLwYDVQQD
EyhiODA1Zjg0YWExZWMyYTFlZTFmZDU3NGFmZmIxZTJjZDA4OGEyMWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJRe8Nvkfdznvk/9z0MQr+ZfVKqY
/pb41hjzg5kwWiR2J4Mf/Xet6YL3bc8eniZsB3DmWDj6NvwLxlYAJcDRcDB7avdk
oYO2M3yjjrJJ6WOaeJD5AVwYgC6BxYHmgATe/VIbB+Rmy2XheYige/mypLAzOz3v
KLhiUUVQmj+maIi8O1W77SScZpo6GprUMXkTc/tJrILsSXe8X0xOutLPAFub+XXN
4hsEDDOT3pffjuL2kPZKwDheTZbJTCQarHY+GyjIK9vgogixkoiANBe9vctzymkZ
l54edjF0U6jbbuLW62/3KDOsGwcB4Jt8JIM4KyYNiAeSU8DVoKbLtTK+rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgF+Eqh7Coe4f1XSv+x4s0IiiHfMB8GA1UdIwQY
MBaAFCd9gPD+K0PQRr6z15usGXp5icLkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjMyQThQNHJROUJHdnJQWG02d1plbm1Kd3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xOTA5NTAtZDQxYy00ZDI2LTg1YmMt
NTE4NGI1NWYxY2ZmLzEvSjMyQThQNHJROUJHdnJQWG02d1plbm1Kd3VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xOTA5NTAtZDQxYy00ZDI2LTg1YmMtNTE4NGI1NWYxY2Zm
LzEvSjMyQThQNHJROUJHdnJQWG02d1plbm1Kd3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfWMKLGA
BIoC7XxPXYWlzsu4/kMH0Y7WEYFQzI2mOY7ymiO8qkFEdtMDCqDM/K+IAnC+g9Ev
OUg+9ILWVka7/cyird5wIYA7tJco9GBDDBcha9ODR7tFuqvpOQr0+5hxmTlOsbOd
f+1SFDuF7v02HXADWBUS2dk/exwYehGkHhx4pHs2ubBHk2c9F8YoM+dDEKtjtes5
oygUcoVT6V0mzFeMg6Dsb0SpHDlzAw1bduieq+1Pdm/CD9nf4+nBZUIrZ6xEaYjZ
FLPPjiFQU1a+mqgzwupvyONtiKtAxl9geEPm9G19kc1TY8JX40B7DHIOv5q3UeXs
q6NWEmv26k0Z7Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:47 2025 by rpki-client