Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
File: J6-AiEvc7y-e2bqXgRYKBnyMTws.mft (raw, json)
Hash identifier: ZhuG+z4gtVVAQT0VLYFqXn521ONUUVbPyv6WMc2K3Mw=
Subject key identifier: 2D:EA:6B:C2:65:C6:4E:25:3E:F5:04:77:31:79:31:4B:A7:DB:D7:78
Authority key identifier: 27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B
Certificate issuer: /CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b
Certificate serial: 0199FDD9A5E3943AC6B32537D518E667624D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
Manifest number: 04F5
Signing time: Sun 19 Oct 2025 19:02:03 +0000
Manifest this update: Sun 19 Oct 2025 19:02:03 +0000
Manifest next update: Mon 20 Oct 2025 19:02:03 +0000
Files and hashes: 1: J6-AiEvc7y-e2bqXgRYKBnyMTws.crl (hash: aAgtir0Aq8dgIVKRiMkZz+oVR9rURwDkSQnVlwNttC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:a5:e3:94:3a:c6:b3:25:37:d5:18:e6:67:62:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27af80884bdcef2f9ed9ba9781160a067c8c4f0b
Validity
Not Before: Oct 19 19:02:03 2025 GMT
Not After : Oct 20 19:02:03 2025 GMT
Subject: CN=2dea6bc265c64e253ef504773179314ba7dbd778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:29:54:02:f8:fd:4e:1f:38:71:4a:b1:ce:
b5:5d:d7:09:36:0d:e9:8e:df:d4:43:ac:b6:ab:e4:
8f:12:70:d7:6e:53:76:b0:60:20:77:4e:61:5d:89:
ae:d3:66:5c:a4:c6:f6:41:13:04:ec:06:03:78:24:
6b:83:c6:44:2c:d8:f1:ff:be:67:5f:02:cb:61:f9:
5e:47:96:5d:2e:c4:e6:c0:cd:fe:cb:88:66:e0:87:
6b:25:3e:b5:1a:32:ed:46:a1:d3:4b:6f:08:86:f4:
9c:3d:93:6d:1b:1c:a5:7a:01:eb:8b:eb:ec:31:ad:
2d:6b:4b:c4:b5:8c:48:9d:1f:ec:29:c1:6a:76:33:
6b:fc:ad:6d:e8:c0:21:e9:98:5d:6f:3b:10:c9:45:
25:bd:9a:c5:55:91:5c:3b:c1:d7:64:5d:87:19:a0:
cc:2c:4a:11:45:2f:69:06:78:a4:ec:6d:18:66:31:
c9:2f:4f:e6:2c:4a:3f:02:a7:f3:09:57:c4:0e:4e:
fa:e0:8e:d0:80:90:58:fe:e7:32:26:7a:7c:2d:10:
e2:f5:57:be:8e:79:a2:13:3f:36:56:b7:20:bf:0a:
82:8f:83:0e:0f:fb:81:01:6d:c9:c8:e3:75:85:c0:
0b:86:0d:3e:28:31:9f:f8:d6:68:b3:a6:63:7a:4c:
7b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EA:6B:C2:65:C6:4E:25:3E:F5:04:77:31:79:31:4B:A7:DB:D7:78
X509v3 Authority Key Identifier:
keyid:27:AF:80:88:4B:DC:EF:2F:9E:D9:BA:97:81:16:0A:06:7C:8C:4F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6-AiEvc7y-e2bqXgRYKBnyMTws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d873d0-bde8-4fae-9f6d-5c042dbd069f/1/J6-AiEvc7y-e2bqXgRYKBnyMTws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:04:c1:72:32:7b:79:cb:c7:3a:ac:ba:1d:a7:97:82:39:91:
f1:9c:79:2e:f3:87:2e:55:52:72:68:0d:de:79:f6:ca:0f:54:
21:03:d5:50:0c:ba:35:dd:24:75:1e:cb:4b:ce:3a:fd:36:ab:
2c:c1:54:4b:fb:ea:bf:90:b8:74:be:f5:25:64:21:f4:e5:5a:
4a:83:0e:1f:3f:c8:80:5c:93:a1:f8:5e:f3:3f:d3:10:c5:3d:
13:7e:06:02:61:6b:04:6f:de:7d:07:1a:86:9f:d6:cc:7d:f9:
c3:a2:29:fa:c3:02:6e:91:0c:ca:4c:31:ce:de:85:54:03:4e:
03:52:59:85:05:a3:27:dc:67:e5:a7:7c:1d:72:c1:d9:fa:8b:
1d:3a:9e:38:a3:b9:38:7c:ca:a5:74:4f:83:79:f5:56:4e:57:
31:d9:34:ba:e3:99:25:a7:e1:d3:51:78:b9:50:44:f3:70:66:
32:67:7b:fc:fe:93:7f:b4:92:b8:0b:f9:60:9b:62:d0:08:fd:
0c:07:68:c1:20:f9:b8:5e:de:e1:73:82:87:79:3d:06:83:c0:
df:9a:56:55:e3:17:89:51:45:1f:13:ac:f3:82:b1:32:ea:bc:
49:0b:f4:92:29:c5:8e:0a:e9:89:39:d3:f8:5d:d5:7d:ee:6b:
f8:59:2a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:16:25 2025 by rpki-client