Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
File: J0PbfuNKwtTtV49JXgCWy5iv9xw.mft (raw, json)
Hash identifier: CNe7wb/CgYXBUC1dGLkS8P+9/JkdIQvSXrai7qe3mHo=
Subject key identifier: 1B:3B:7E:B4:AC:6C:40:6A:2F:89:C6:34:7A:FD:29:E3:DA:7B:2E:B4
Authority key identifier: 27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
Certificate issuer: /CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Certificate serial: 0199FC58E27B1E052457A5FC0444D8616CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
Manifest number: 022D
Signing time: Sun 19 Oct 2025 12:01:47 +0000
Manifest this update: Sun 19 Oct 2025 12:01:47 +0000
Manifest next update: Mon 20 Oct 2025 12:01:47 +0000
Files and hashes: 1: J0PbfuNKwtTtV49JXgCWy5iv9xw.crl (hash: 9WEimFx99BugvivbMD/HNkjz5NYmdNUiB904qvTkl6w=)
2: dDAgjd5fwQ3cte1EAxZ7pLJLl0U.roa (hash: 2txr4+GD0XgpxhSLLq5aM5yNR187eckG+kO4tKZmm3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e2:7b:1e:05:24:57:a5:fc:04:44:d8:61:6c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Validity
Not Before: Oct 19 12:01:47 2025 GMT
Not After : Oct 20 12:01:47 2025 GMT
Subject: CN=1b3b7eb4ac6c406a2f89c6347afd29e3da7b2eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:85:86:00:07:be:92:48:01:1b:8c:ad:95:
64:ef:7b:38:cc:77:5b:b8:a6:38:11:94:72:41:68:
5d:47:7e:d8:cf:96:3a:c8:90:8d:69:a0:4f:8a:f3:
df:8a:1b:7a:96:a4:20:e3:60:f6:b0:fb:69:97:44:
77:d2:08:0e:82:b5:e8:97:1e:79:5d:a5:01:75:d2:
20:b0:af:07:b5:2a:0f:fa:1f:85:3e:1e:dc:f1:d4:
4d:9e:46:04:e8:bf:87:7c:96:b5:4e:50:48:53:4d:
f0:83:60:4f:0d:4a:96:9d:41:7f:c6:83:f2:e7:3e:
8a:da:eb:d6:a9:61:af:5b:23:c3:e7:67:ca:33:da:
27:d0:b6:c2:17:31:c3:8c:18:c1:fd:5d:9c:a2:f0:
b5:b7:fd:9c:ee:89:a9:0e:57:c9:bc:c5:96:36:79:
13:58:2f:84:61:41:e3:fb:43:4a:90:1b:fc:fe:6d:
5c:31:61:2f:ea:97:01:22:82:bb:89:1b:d7:fb:0a:
37:f8:6e:62:c0:28:e9:76:08:9e:85:5a:b8:96:4c:
d8:6b:06:ef:76:84:28:6f:02:87:b8:29:d3:d7:b9:
ff:b0:df:64:b2:1c:f1:6c:64:13:91:c1:4a:5e:ae:
1d:d4:44:1c:57:90:e8:c8:9e:03:4d:f4:c2:d5:93:
d9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3B:7E:B4:AC:6C:40:6A:2F:89:C6:34:7A:FD:29:E3:DA:7B:2E:B4
X509v3 Authority Key Identifier:
keyid:27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c5:30:45:ce:68:34:64:da:1e:cc:d9:34:f6:fc:37:94:97:
f7:69:03:d9:51:f8:2d:5e:f1:30:85:b0:c3:4c:e7:42:52:9e:
92:72:98:d5:13:1e:be:cc:47:89:37:11:fa:6c:1d:6d:71:27:
9c:34:44:92:a2:a7:c1:de:81:0b:97:f4:42:a0:7e:df:95:45:
4d:6a:8b:6e:0d:ad:db:c0:03:d5:ea:53:6d:a1:8c:58:b7:7e:
87:f0:74:b0:c7:5b:26:4d:d8:78:ff:61:7e:03:e8:3b:fb:f9:
8a:20:3c:3f:7b:55:72:a3:5d:b7:7a:ce:20:82:f9:a9:17:3f:
9b:30:7c:cd:0b:e5:81:c4:04:38:53:e0:cd:bd:c1:3d:0b:4b:
fe:9a:a6:a2:83:da:80:22:07:ea:26:cb:1c:c5:2a:e5:45:4c:
d8:4c:fb:a4:fc:08:3b:c2:48:5c:12:f0:24:1b:b1:dc:2a:2d:
99:32:d0:9a:44:88:48:ac:79:e7:35:3e:86:29:2e:c8:72:9d:
c5:34:2f:f4:e4:58:02:41:7a:69:55:07:a3:f4:53:20:bb:2a:
69:6c:be:7f:ff:ea:9f:f3:9f:ae:9a:ce:93:9f:a2:06:9f:fe:
05:17:82:4e:98:f7:41:3d:17:05:04:e0:98:27:b7:13:ce:54:
40:7c:38:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:25 2025 by rpki-client