Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: KTOQdoxjBH15M8c829FeMvwvAayAP7FZGxucZiSk2qM=
Subject key identifier: 13:E0:26:2F:80:76:88:6B:E2:A4:52:DD:37:A2:1A:59:3A:7E:96:76
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 0199FF9025B8BFC398C6150674B11033072E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 1544
Signing time: Mon 20 Oct 2025 03:01:00 +0000
Manifest this update: Mon 20 Oct 2025 03:01:00 +0000
Manifest next update: Tue 21 Oct 2025 03:01:00 +0000
Files and hashes: 1: 3WjmScxyPShGMsEmfTcZS4RZUd0.roa (hash: 5cWtsZDvpUp+XvqnrWOkzcAs96EsLhbvVP+8UGNRG5Q=)
2: Fi_TM4K4PYpSezLxC5qNEiPOZ3Q.roa (hash: DTiudzjdSu7JP8slciOiBe/Ykx5OQa6RusVSJBvKWj0=)
3: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: LliRs74KlQOmUNB5uxLRHxlVypcYJLHjI5hWChUJd2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:90:25:b8:bf:c3:98:c6:15:06:74:b1:10:33:07:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Oct 20 03:01:00 2025 GMT
Not After : Oct 21 03:01:00 2025 GMT
Subject: CN=13e0262f8076886be2a452dd37a21a593a7e9676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:03:91:6c:20:8a:5c:c7:3d:a1:1e:08:dd:b8:
b9:c0:6c:06:01:e2:be:f8:a8:b1:cc:83:a0:51:fd:
c3:1e:a3:46:57:18:aa:e7:6f:64:0a:63:c3:ad:36:
27:91:f7:50:9b:b9:8b:53:c0:0c:1a:00:3a:aa:a8:
79:ed:41:c2:94:66:8e:ad:70:ee:62:c1:0f:85:bb:
4f:4f:59:22:c9:07:02:3c:01:81:ba:ea:87:f8:93:
ce:c4:5c:ea:19:24:d7:91:39:60:5e:46:db:4e:c2:
a7:e0:25:d9:47:03:35:d1:53:54:41:26:6c:a5:28:
a7:82:32:e3:ca:60:56:4e:9c:61:f4:8d:8f:01:ff:
af:8e:5f:ce:f3:6f:b5:98:dd:db:0e:cb:53:b6:69:
a4:b9:4a:f9:1b:10:32:41:ee:1e:4c:c5:45:09:7f:
1b:c2:b6:b4:9b:f2:b9:0c:96:ed:b9:5d:60:7f:7e:
69:e9:b6:b7:89:63:8f:90:c1:73:47:52:05:21:19:
3a:d6:46:2f:ee:c3:1f:60:76:c0:b2:96:29:75:bf:
20:12:23:56:c3:42:a3:5b:df:47:f6:f1:c8:51:87:
a3:70:94:ab:7c:b3:83:b3:0b:21:ee:9a:78:36:39:
5c:29:87:d1:14:ee:16:8e:b8:44:2f:7d:2e:9a:7b:
8d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E0:26:2F:80:76:88:6B:E2:A4:52:DD:37:A2:1A:59:3A:7E:96:76
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:ec:66:bd:63:6a:d8:84:d6:6d:02:ef:b4:88:ca:e0:97:92:
8d:57:52:14:3a:6c:c3:eb:2f:50:76:f9:7e:30:65:b2:2b:0e:
09:40:a0:db:ed:3e:69:e2:dd:ab:f1:f6:56:bb:25:11:50:f9:
2d:e7:f0:98:1a:67:7a:62:00:11:fd:34:7f:45:4c:2d:2e:66:
6d:c0:6d:66:4a:7b:f3:ae:e8:c1:8b:aa:50:de:e6:e7:86:29:
a2:54:aa:3a:b2:60:9b:3f:91:ca:3c:d2:84:06:cf:72:af:a1:
a3:73:30:c8:8c:90:95:5f:85:c7:85:5b:88:c3:92:1c:ba:4e:
cc:e7:fa:9e:91:a3:d3:4c:79:fc:ef:e9:0b:07:7e:f6:9b:cf:
76:42:43:d3:62:c1:66:3c:89:1c:01:a3:b4:8d:6e:ae:39:8a:
55:6b:0d:71:cd:50:bf:7e:b6:51:05:1b:36:dd:62:6c:ab:ab:
dd:5d:43:72:aa:86:e6:59:cd:ca:79:6d:21:ac:7d:e7:10:b7:
29:b8:17:dc:4d:c4:e4:c5:61:12:69:0d:2d:f7:e4:c8:d7:e1:
05:f9:e2:b0:d5:f4:7b:e4:d0:ef:3e:ec:43:e9:2d:bf:e4:21:
fb:82:f5:cf:a9:af:a7:a3:4f:c1:ff:22:e2:c2:41:31:51:fd:
fd:e9:dc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:53 2025 by rpki-client