Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier: fpflZE3LTYt1xpPkJ6nBfdbEok0Oxt+rUeYfcmEy6GA=
Subject key identifier: 59:DE:4A:31:2F:A0:E1:FD:89:C9:98:6B:89:C2:53:E8:D5:6F:B6:26
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 0199FD347680D7379FF6105E0945F00697F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number: 0F10
Signing time: Sun 19 Oct 2025 16:01:37 +0000
Manifest this update: Sun 19 Oct 2025 16:01:37 +0000
Manifest next update: Mon 20 Oct 2025 16:01:37 +0000
Files and hashes: 1: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: x9e9oJDP8RsyGB2DWjc4se5/8cJqC+l4Os6WOY4QNa4=)
2: U98Pywp0SW8RSqZF3Ge6Si9krK0.roa (hash: O0xR8BO72Q1293Dodh+ahx0zgwd8SQ9b7GDuhK6uN4w=)
3: fonqMENkUurdTSsmls1gVlg_WJ4.roa (hash: BkPWWaoPqGMFHcArMOr28SMuQJKUdO9RrrY9l2uEtM4=)
4: hRMqKbI5ZBKlaiDQw_wO9nw88a0.roa (hash: tQTOlSI2XH6rsXW1nhJPPPkXPxhSWEfkvDRnTJEB2Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:76:80:d7:37:9f:f6:10:5e:09:45:f0:06:97:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Oct 19 16:01:37 2025 GMT
Not After : Oct 20 16:01:37 2025 GMT
Subject: CN=59de4a312fa0e1fd89c9986b89c253e8d56fb626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:15:30:c8:6e:01:5c:ef:c9:1f:63:7e:a4:
a4:a2:ff:8c:5d:1a:ac:e2:1e:dc:1b:6c:53:ca:04:
1c:86:95:da:1d:ac:ac:12:91:ca:15:e4:f0:f4:b2:
c8:3e:a3:7b:0c:11:0a:7e:54:b2:0c:f0:ae:dd:ba:
46:be:de:9c:03:fe:81:82:c8:07:c6:79:6c:e3:70:
62:2f:3a:19:97:4e:35:c3:e3:04:a7:bf:17:42:83:
79:c1:56:97:87:39:d0:80:ac:fb:2d:61:a9:3f:51:
22:35:3a:69:78:fc:7d:53:ea:76:0d:5b:7b:9e:f4:
03:fb:f8:70:b0:79:fa:8b:7c:a6:bf:72:08:4b:c2:
1b:73:50:d2:f8:60:e4:a2:4c:3f:a6:79:98:80:fa:
21:0b:aa:52:f7:6c:36:7b:c2:b5:1c:3f:1d:a0:cb:
e1:85:13:73:62:70:de:37:73:79:43:ea:7d:d3:e0:
e5:d0:b1:98:a7:15:8c:15:17:d1:8d:33:4c:70:74:
5d:21:94:bd:ce:2c:79:41:f1:4c:03:04:57:65:3c:
cc:5e:bf:70:a8:89:a0:d2:67:c5:94:67:2e:b0:38:
79:1d:a6:08:fa:fa:c3:3d:44:98:b2:7c:74:a7:21:
c1:61:55:9e:71:db:b7:66:7d:c0:4e:0f:bd:02:b5:
0e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DE:4A:31:2F:A0:E1:FD:89:C9:98:6B:89:C2:53:E8:D5:6F:B6:26
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fa:9c:08:a8:fd:1e:55:de:01:a8:61:57:2a:60:c1:a0:93:
02:d4:36:fb:07:05:47:ce:5e:c7:c0:1b:7e:4c:9b:e6:46:c4:
c5:6d:37:38:9a:df:75:64:ea:5c:03:51:f2:ed:b1:3a:af:f6:
91:23:0a:1d:62:28:b4:c0:a8:df:33:85:f4:cc:53:8c:17:32:
2b:75:32:c3:ca:a0:85:9d:50:52:26:91:b0:78:73:b9:db:f2:
53:65:ae:8e:01:78:87:6b:80:35:e4:21:3e:ff:fc:50:90:91:
6e:21:ae:5d:81:fe:4c:f8:b4:a2:06:f9:2d:a8:32:a8:af:e9:
05:de:5d:49:85:1c:16:ad:60:52:58:04:58:9c:00:f6:f7:01:
27:65:eb:59:b5:f4:48:c0:5f:07:22:a6:15:c8:f9:a4:e5:cd:
cb:23:af:4f:ee:54:a6:18:d5:35:32:fc:7d:a0:0f:97:ea:95:
11:69:0b:04:1c:ea:c1:e0:33:7e:05:53:7e:b1:3c:4a:67:51:
cf:01:ad:5a:22:1d:c7:25:c0:37:f0:0c:98:07:01:fc:3d:34:
d9:45:6a:ee:d2:f2:1e:e1:08:d0:76:d3:08:a3:7f:43:e8:35:
2f:d1:e9:2e:71:0d:ab:d5:4a:35:cb:b1:18:06:01:db:59:05:
8b:0a:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:31 2025 by rpki-client