Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: stzCfLFR9MLxO6BigglxxTBYtmqpIxAJ6f3ZjtkKqGc=
Subject key identifier: 0E:6D:FD:DF:A5:A4:20:50:84:75:18:EB:4E:57:32:F5:97:C6:AB:A2
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 0199FEB521399E84B0467BF276EFE86A6A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 017D
Signing time: Sun 19 Oct 2025 23:01:47 +0000
Manifest this update: Sun 19 Oct 2025 23:01:47 +0000
Manifest next update: Mon 20 Oct 2025 23:01:47 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: F0Ee9U+OGwfVpoh+KnEVdIXWrxHakVyzojp5AJ+PKUk=)
2: PXQZ8Kqy_mx9lBo5_cDxC51se1U.roa (hash: 9tHWBrF2ZmcSWuE44cZk0kByYXScp8kTGOAiMALH64w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 23:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:21:39:9e:84:b0:46:7b:f2:76:ef:e8:6a:6a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Oct 19 23:01:47 2025 GMT
Not After : Oct 20 23:01:47 2025 GMT
Subject: CN=0e6dfddfa5a42050847518eb4e5732f597c6aba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:26:ab:86:a6:29:0e:c5:d8:34:01:ad:5e:7e:
04:ff:c8:a1:de:f9:da:1e:92:3d:f3:94:d9:16:e1:
09:09:56:2f:65:78:84:fb:76:69:64:8b:3c:d0:0b:
33:e6:f5:37:23:90:04:4d:3e:f0:a1:9d:ad:f1:2e:
53:a8:17:01:80:07:b6:4e:ce:6d:03:4b:0e:04:5d:
7d:4d:5c:5d:53:12:88:48:15:ef:89:69:35:c3:e5:
e5:aa:43:de:3b:f8:14:d2:c1:73:da:54:3e:93:8b:
2b:14:72:32:8c:65:eb:7f:55:ad:8f:8a:6e:90:e6:
08:8c:d4:f1:15:47:37:e3:65:4b:bb:60:3b:4f:19:
6d:78:00:28:a9:d3:17:ce:e4:c8:c0:a3:0e:e4:88:
c4:0d:ad:de:a5:8b:aa:59:b7:05:94:10:31:f8:06:
c4:cc:d0:81:f2:21:e3:06:c1:35:7a:c4:72:b1:4d:
85:36:3a:51:01:af:63:69:99:34:a9:77:27:a3:a7:
d7:25:ef:cc:90:c8:5c:2f:63:eb:14:31:77:c4:ca:
05:73:0b:88:09:39:72:5a:26:8a:e3:a7:74:a2:a8:
b3:01:82:26:92:57:f7:51:76:79:6e:ae:ed:eb:d4:
15:39:49:ed:02:90:99:a7:fc:ed:4d:b2:5a:c8:17:
4e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:6D:FD:DF:A5:A4:20:50:84:75:18:EB:4E:57:32:F5:97:C6:AB:A2
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:be:4c:f8:c3:12:ea:e3:84:de:7a:63:90:19:58:2c:4d:09:
95:86:8a:77:5a:7f:75:f1:87:01:31:b6:3e:ad:e6:08:6d:51:
29:c9:a3:d4:c5:14:c0:83:6a:75:db:4a:7a:8f:11:70:e2:96:
18:92:3e:e5:db:2e:8a:9a:d2:c9:7b:98:bd:0b:51:94:fa:a2:
f1:01:e7:09:56:7f:f6:86:71:64:53:11:43:fd:32:d2:93:54:
c6:96:1c:39:cb:be:31:c0:a2:ad:fc:75:fa:5f:e6:0b:ba:b3:
3d:2d:22:9c:22:57:bb:aa:52:18:f9:01:73:89:25:c9:33:2d:
bb:45:24:d8:25:b9:33:44:b0:c3:88:f3:8a:c0:2e:9f:85:c8:
2d:32:e7:95:5e:b3:e6:9e:18:93:00:32:fb:13:f9:6f:7a:f6:
01:ae:c9:38:ac:63:ab:15:cc:25:2f:cf:9e:a8:b9:aa:51:de:
1d:24:65:61:32:d1:03:63:d2:df:13:7d:f9:9c:48:61:88:42:
ba:71:1b:fb:6f:ae:14:3f:43:a4:d9:52:57:14:4a:f2:25:06:
fd:f1:1c:58:6b:89:4d:19:37:7f:8e:b5:5c:9f:4e:e5:b3:15:
6b:4d:76:a1:1c:d4:9a:2e:58:55:3d:9c:90:ec:46:db:d4:17:
fd:03:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:19:55 2025 by rpki-client