Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
File: Jw__IYVmW535AIyeG-YmARiafXw.mft (raw, json)
Hash identifier: FrZQyqWtx2ZQL1g9sJXjYujUg5n612NC3I6LxVfzwAI=
Subject key identifier: D3:4B:77:08:7B:69:1D:75:E8:79:0C:F6:E1:66:FC:BD:2E:27:A1:DF
Authority key identifier: 27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C
Certificate issuer: /CN=270fff2185665b9df9008c9e1be62601189a7d7c
Certificate serial: 0199FB7CFDBC5E51D875DA94BC3B42496287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
Manifest number: 0A8B
Signing time: Sun 19 Oct 2025 08:01:36 +0000
Manifest this update: Sun 19 Oct 2025 08:01:36 +0000
Manifest next update: Mon 20 Oct 2025 08:01:36 +0000
Files and hashes: 1: Fy2IYBN9hjZkWkvbtPQPrYui0qc.roa (hash: JelZKBaztB5j8Dd3i30kr2+tTI62dQSAVwbIQZ0Mhyo=)
2: Jw__IYVmW535AIyeG-YmARiafXw.crl (hash: RcGSxEDmQpvFJQnoSJtyMIEfFnU12u/7aXHTai445pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:fd:bc:5e:51:d8:75:da:94:bc:3b:42:49:62:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=270fff2185665b9df9008c9e1be62601189a7d7c
Validity
Not Before: Oct 19 08:01:36 2025 GMT
Not After : Oct 20 08:01:36 2025 GMT
Subject: CN=d34b77087b691d75e8790cf6e166fcbd2e27a1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:dd:de:75:e7:7c:7a:f0:0d:69:a9:93:00:
6d:3b:c9:26:f8:d8:ec:42:67:2f:91:9e:53:47:99:
e5:83:41:2f:61:e8:8a:3a:6c:4f:1f:cd:12:2d:03:
db:a4:99:32:1c:62:05:07:12:15:d0:fc:39:3f:b0:
79:d6:7b:37:86:ef:5e:d2:ff:3b:7a:6d:d3:c8:85:
5f:f7:aa:14:cd:c4:dc:4c:af:30:2a:26:db:eb:35:
b9:e0:54:70:2b:bb:4d:a2:71:34:fd:eb:35:7b:c3:
f9:58:ab:6e:ff:c4:57:76:c4:8e:73:97:92:46:8d:
d3:85:44:3d:b2:d7:0c:5d:b2:c5:f1:cc:d1:47:e9:
38:02:a1:03:6c:e3:44:ee:d7:9c:56:46:64:de:be:
a3:42:b1:dd:4d:75:ac:cc:06:91:47:21:e0:6a:7f:
af:c6:ee:f6:62:84:8c:42:45:0f:fa:7f:0e:15:77:
ad:90:e8:0d:13:e6:09:55:58:c9:07:49:f5:a6:5f:
01:75:f0:04:27:55:fd:9e:65:d3:b1:5c:e8:6d:01:
db:7e:fa:9c:1e:7d:49:ec:61:3d:d3:65:52:ec:15:
4f:b5:b5:38:74:9f:5c:95:71:d5:3b:db:d3:06:5e:
cc:68:c5:b4:3d:2a:1e:2e:9a:f0:fe:cf:ac:13:dd:
13:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4B:77:08:7B:69:1D:75:E8:79:0C:F6:E1:66:FC:BD:2E:27:A1:DF
X509v3 Authority Key Identifier:
keyid:27:0F:FF:21:85:66:5B:9D:F9:00:8C:9E:1B:E6:26:01:18:9A:7D:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jw__IYVmW535AIyeG-YmARiafXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7dc454-1516-4979-9c72-e4694afbb6fc/1/Jw__IYVmW535AIyeG-YmARiafXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:90:f8:d1:2d:f5:f4:28:13:a0:a4:5c:a4:0f:73:ea:d1:74:
2b:76:bf:05:57:a5:2e:44:a7:7f:ed:5c:cf:61:b6:00:27:8e:
5b:43:9a:83:46:82:aa:8f:2d:38:92:8d:39:a2:c1:73:be:0a:
1b:24:ac:87:39:1c:81:76:99:62:69:f4:21:5d:fc:51:7e:48:
f2:0a:2b:98:94:81:0e:a0:54:54:52:ff:79:1f:ef:31:5c:82:
1a:f8:cb:ea:ae:c1:53:d0:1b:ee:e9:02:f6:75:65:a4:81:a9:
db:c0:69:f3:32:7a:c3:10:eb:47:62:65:5b:2a:ab:6e:e8:bf:
04:0b:f3:18:44:4e:f2:15:4f:d8:fb:ac:25:fc:05:db:29:2e:
7c:42:be:16:de:ce:a1:0b:90:89:09:df:a0:e9:fd:5f:38:70:
8f:72:e6:79:f3:bf:0a:ce:7e:78:08:6f:fb:78:40:86:64:29:
3a:a8:68:ab:6a:f8:4c:49:69:a0:c0:33:5d:e4:1f:20:34:8a:
06:ff:2d:a2:09:ab:a3:99:46:b5:c9:f0:2f:00:bb:30:3e:72:
d6:34:ad:2f:04:4b:66:83:59:f9:af:37:76:3c:fd:51:e1:fa:
f2:62:26:d6:5c:46:aa:80:cd:49:48:17:37:35:16:3c:ab:a0:
d7:5a:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:47 2025 by rpki-client