Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
File: Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft (raw, json)
Hash identifier: WdvqFyT/8BiB4GLbybykW8QzSfXZSJSH+mWotpj/Cz4=
Subject key identifier: D7:9D:70:D3:F2:C2:45:6A:22:19:6D:75:14:33:18:C8:DB:AD:4E:E4
Authority key identifier: 26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
Certificate issuer: /CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Certificate serial: 0199FAD7B29FDA0488FE8369180D33E38F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
Manifest number: 0912
Signing time: Sun 19 Oct 2025 05:01:03 +0000
Manifest this update: Sun 19 Oct 2025 05:01:03 +0000
Manifest next update: Mon 20 Oct 2025 05:01:03 +0000
Files and hashes: 1: Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl (hash: bq89YHIqAwCucPPiNDK/zdb01GYGYYS3WDUBeeW+wyc=)
2: ajGVT2wMT_DA-qwpbPbVP8c_jy0.roa (hash: GrnSfoc+sA7GUobf1ORT86tQoZJGPO6xDsTsTxwitnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:b2:9f:da:04:88:fe:83:69:18:0d:33:e3:8f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267ef37f3dcd607f9871d239502badbf9b56bc57
Validity
Not Before: Oct 19 05:01:03 2025 GMT
Not After : Oct 20 05:01:03 2025 GMT
Subject: CN=d79d70d3f2c2456a22196d75143318c8dbad4ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:65:f5:21:8d:5a:04:ee:08:27:a8:fb:39:
4c:62:f2:dc:e1:47:01:38:b5:3e:7b:ff:85:26:f7:
ca:0e:01:d6:d7:dd:0f:64:91:53:ac:8b:36:0b:b4:
9a:98:a7:0b:11:52:a0:60:3e:b2:f7:7e:0d:36:5e:
dc:a0:f8:f8:ee:ce:e8:2f:d4:f6:62:04:cd:46:93:
0e:4a:37:5a:47:32:d0:1d:89:99:d0:70:f1:70:64:
0e:58:87:18:98:74:8b:0e:6f:5c:66:49:0e:9d:d5:
08:d7:a4:c8:fa:40:b4:d0:0a:c6:f8:01:fc:73:43:
83:15:01:42:86:df:a5:d0:98:69:b8:0a:34:59:f5:
e6:bb:f8:75:0f:a5:9d:21:6b:b6:f4:8c:79:f8:26:
67:40:1e:1c:d3:b1:da:74:4d:3d:26:c7:c7:67:89:
bc:e6:5a:ce:c7:71:30:d8:b0:7a:c4:3f:d4:67:49:
6b:ec:43:24:e5:a2:c1:0a:82:34:23:d8:f2:30:ba:
f3:fc:ab:15:d2:b5:2b:14:d9:02:0a:79:8b:d1:99:
53:c6:95:ef:1f:ff:70:0c:cb:3a:d2:4b:e2:32:db:
ad:fc:da:04:51:f8:82:81:ee:d9:b2:92:b6:33:57:
3d:62:90:03:24:f4:0a:9a:c8:cd:62:5e:1a:bc:ff:
35:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9D:70:D3:F2:C2:45:6A:22:19:6D:75:14:33:18:C8:DB:AD:4E:E4
X509v3 Authority Key Identifier:
keyid:26:7E:F3:7F:3D:CD:60:7F:98:71:D2:39:50:2B:AD:BF:9B:56:BC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn7zfz3NYH-YcdI5UCutv5tWvFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dea13d-6dfe-4d9b-9ef5-3628f06dbcc7/1/Jn7zfz3NYH-YcdI5UCutv5tWvFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:75:b1:5f:9e:67:61:55:1a:85:3c:b7:b1:9c:01:6a:74:c5:
05:23:10:90:9a:95:14:71:41:4f:31:b0:60:63:4e:1a:ef:c6:
a1:32:d0:13:80:cf:12:ee:00:36:e0:b3:8f:5d:bc:ea:71:cf:
ef:b5:f1:44:10:a6:bc:23:64:54:b1:0a:c5:e1:18:5d:22:37:
af:ac:39:d3:12:9d:f3:24:ff:b9:8f:d6:11:ed:c8:96:b8:77:
15:ff:23:3d:b5:6e:b5:9c:94:f2:71:74:ee:80:ea:ac:da:f5:
f5:8e:fe:0f:cd:81:63:9a:55:26:d6:e7:43:f6:16:76:76:fc:
d7:d9:71:9e:c7:05:6b:f3:db:6a:73:50:bc:88:55:cf:3f:06:
2d:c9:46:be:b8:e7:c2:d9:10:a8:9a:5d:cb:69:be:c9:8b:21:
4f:53:23:c1:1e:aa:43:e2:46:0f:80:a4:90:b4:a0:1c:a5:fc:
0b:72:94:cf:7f:fc:d4:b9:dc:39:71:99:04:50:dd:e8:61:4a:
49:2c:e1:ef:4b:06:70:05:92:c5:61:e3:66:a2:5b:e6:da:55:
d8:70:60:96:ca:91:00:19:b5:d5:e4:57:ad:20:d8:91:3c:22:
29:7f:32:6e:e4:0f:b8:a1:42:23:3e:93:8e:8e:0c:66:e9:d5:
12:09:0c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:47 2025 by rpki-client