Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
File: J97R2QxNUraHECO8cSltCKmMTNs.mft (raw, json)
Hash identifier: lOzATKlYLIBhi+UokghoeZnsshh7cdbIlNBJedOFZ1k=
Subject key identifier: 3F:28:35:76:71:E3:9E:65:45:3B:4E:1D:18:B0:0D:B9:00:73:DB:FB
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Certificate issuer: /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial: 0199FDD9FF7502CCAA43D025F8CD58CA6BB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
Manifest number: 0CA4
Signing time: Sun 19 Oct 2025 19:02:26 +0000
Manifest this update: Sun 19 Oct 2025 19:02:26 +0000
Manifest next update: Mon 20 Oct 2025 19:02:26 +0000
Files and hashes: 1: J97R2QxNUraHECO8cSltCKmMTNs.crl (hash: 7ZfTULvicCBazKHLlf49HWCWJjDwere7gfFSGBZuRjs=)
2: X3QMt1fmV4wTFAQPHZ4zsROv8I0.roa (hash: Whnqs1Wwvsp0OIKAaEg9kGiqf108NquKFQHaJWKxLGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ff:75:02:cc:aa:43:d0:25:f8:cd:58:ca:6b:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Validity
Not Before: Oct 19 19:02:26 2025 GMT
Not After : Oct 20 19:02:26 2025 GMT
Subject: CN=3f28357671e39e65453b4e1d18b00db90073dbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:71:5a:ea:44:27:03:98:a2:41:d8:47:a3:16:
2e:10:ee:40:d5:91:2d:a7:c3:f5:99:e0:1c:43:c8:
1f:f8:f3:6d:6a:20:93:c9:2a:4d:8a:e6:a6:a2:5b:
b2:8a:42:51:c2:ef:bb:93:2f:1c:5d:9f:43:3f:4a:
28:d2:52:98:22:c0:17:58:3f:ab:94:bc:5b:21:bc:
87:ea:e7:21:9c:90:eb:cf:27:dd:11:6b:4c:f7:45:
4e:a7:6a:48:16:e2:fb:0c:35:91:89:3a:15:e8:58:
d5:3e:bf:4e:8c:9e:fc:a6:38:b5:86:22:81:98:9a:
67:66:f7:7d:58:2d:6a:d1:fc:a5:ce:39:ce:f9:d3:
d2:02:92:1b:97:56:8c:4f:a1:4b:66:83:b1:b2:68:
b3:3c:14:9b:e9:cf:e2:21:d7:9e:56:4c:7e:80:81:
50:19:28:27:28:c5:36:24:31:cc:1d:6c:ae:ae:87:
4a:0f:57:8d:27:ab:b0:aa:0f:1c:f8:1d:3c:c4:f1:
26:16:28:01:98:59:68:87:17:90:13:55:a2:d5:f5:
dd:cd:0d:36:b1:fb:22:fe:86:70:ac:a6:ed:dd:fa:
33:33:a1:c4:29:c7:82:79:9e:ab:40:12:3f:63:e6:
12:27:44:83:03:67:a4:73:1e:7d:f5:cd:a2:ef:66:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:28:35:76:71:E3:9E:65:45:3B:4E:1D:18:B0:0D:B9:00:73:DB:FB
X509v3 Authority Key Identifier:
keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bf:00:ce:1c:6f:83:48:4a:f3:12:4b:3f:31:d0:29:8c:45:
8d:c9:e8:8a:e0:0a:f0:6a:01:8c:cd:02:4d:e4:a0:3f:15:b6:
4d:0d:c8:c8:50:97:fd:66:58:11:e5:c2:7f:5c:40:ca:d4:4d:
a8:fa:33:13:42:f8:8c:87:ba:f2:51:b4:96:ab:44:f7:41:21:
1c:1a:da:54:c1:8e:f8:dc:2a:80:42:68:09:34:b9:ec:c2:ea:
12:0b:6c:30:89:4c:34:f0:b7:6e:a9:ef:1f:38:a9:78:98:db:
ec:2f:2b:e7:a7:32:e7:47:31:30:bd:42:ec:d0:99:4f:f4:f5:
4d:7f:26:7b:37:68:a3:14:19:84:f0:85:58:04:52:6e:57:a9:
7a:77:26:20:07:fa:0a:d0:f7:a8:05:d0:e3:31:71:01:9c:eb:
a1:33:b6:87:02:1b:e0:f5:80:dc:f1:9a:92:bc:a3:4c:0a:35:
69:67:03:64:44:40:93:64:1f:37:8e:08:ab:32:78:57:fd:57:
a6:8a:43:0c:1f:0b:ac:ac:33:8c:3b:b1:a0:61:54:4b:a4:4c:
af:09:5f:44:f3:af:5f:cd:2e:fe:d7:ab:03:70:99:a3:45:49:
ff:15:8b:36:39:9a:77:da:71:49:23:7c:ec:99:97:53:6d:e8:
d8:14:ae:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:15 2025 by rpki-client