Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
File: J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json)
Hash identifier: IOJbG19FY3SWZMm/pfMSEUHuoBTLZ3Ty5DL+uSQ7UEE=
Subject key identifier: 16:C2:D4:C1:7C:4C:EB:60:B1:05:70:5F:33:8D:8D:8F:6F:ED:7D:04
Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
Certificate issuer: /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Certificate serial: 0198537AC7277EFA8273BF896D5CA5FA1E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
Manifest number: 0F7B
Signing time: Tue 29 Jul 2025 00:00:11 +0000
Manifest this update: Tue 29 Jul 2025 00:00:11 +0000
Manifest next update: Wed 30 Jul 2025 00:00:11 +0000
Files and hashes: 1: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: RhdFSsMFgLOJoJMevqaZigiOTLi3PBLr4ofCSyrm/QM=)
2: vdjx6mVJjB2A5HRAp4zCXF1WOmI.roa (hash: nZy4/J4/xAAVv0Nm8r/1Dh/36Nz5IhwHl0WfPkQGlFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:c7:27:7e:fa:82:73:bf:89:6d:5c:a5:fa:1e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Validity
Not Before: Jul 29 00:00:11 2025 GMT
Not After : Jul 30 00:00:11 2025 GMT
Subject: CN=16c2d4c17c4ceb60b105705f338d8d8f6fed7d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8e:fb:97:5f:51:32:51:14:47:65:46:43:7a:
6e:41:25:95:1f:f0:48:9f:8f:e3:7a:d0:52:82:41:
20:39:64:70:e1:26:77:85:09:1e:19:a4:d3:bf:75:
91:47:aa:03:5d:52:31:0c:00:41:aa:0d:a1:ab:88:
4c:dc:95:61:2f:4b:8e:71:2a:12:3f:32:b9:4b:7c:
fb:6b:e4:46:9b:ec:3b:5b:03:fe:2d:e1:21:77:46:
8f:70:49:85:12:97:dd:6e:68:19:0b:35:86:ef:c6:
5a:59:da:71:8a:a5:ca:f3:d8:4b:73:e7:01:8c:73:
8f:df:6e:f7:dc:f0:06:bc:2d:a4:a8:aa:aa:5b:b7:
0b:c7:33:ce:79:da:8f:71:92:dc:3a:2c:11:04:95:
7d:c5:1d:8d:b3:76:4a:13:06:b7:83:34:a2:5c:32:
82:5e:f3:90:a0:a4:5b:a7:33:32:ba:6f:f8:fd:2c:
69:98:51:54:6a:9d:e2:26:19:e3:c5:a2:a1:d1:75:
32:9f:79:3a:83:8a:6f:34:7d:f4:78:35:dc:df:cc:
6a:4d:f7:1d:51:45:8b:00:49:b2:04:6a:6f:d8:9c:
f0:99:86:f9:33:fc:a9:c0:bc:ac:71:31:54:e9:57:
e6:71:a4:1e:1b:fb:2a:f5:d4:97:66:7a:39:64:3b:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:D4:C1:7C:4C:EB:60:B1:05:70:5F:33:8D:8D:8F:6F:ED:7D:04
X509v3 Authority Key Identifier:
keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2a:a0:0c:1d:a4:af:2f:67:05:2f:40:22:d4:ff:d4:78:5a:
2a:9a:b7:80:db:c7:fd:f9:67:4e:57:ff:4c:80:04:fe:41:9a:
b0:47:cf:d2:a9:10:0b:2d:a7:96:c9:35:eb:c0:a2:54:37:f9:
65:9b:53:b6:96:23:78:80:df:2e:8c:af:f0:97:61:2b:c3:0c:
db:4d:40:d6:f1:f9:75:fe:d3:2d:e5:d8:ed:c7:a2:e2:d4:c9:
6b:d2:fd:30:69:0c:e9:f2:83:6b:e9:8b:a9:ca:67:1d:01:70:
bf:c2:15:6a:4a:bf:2c:65:e3:8b:83:a1:c2:ef:90:ee:1f:88:
37:19:d8:90:08:2f:5b:c3:32:4c:b6:6b:b5:52:f5:53:8e:04:
3e:87:70:19:4e:b1:e6:28:f4:c4:97:07:f0:bd:66:0a:d8:e7:
46:68:f0:0b:d1:74:4a:bc:f0:9f:d8:f5:19:b8:f6:39:41:96:
09:e7:09:ba:0f:bc:e0:26:ed:05:8c:22:f2:15:c2:5a:84:c6:
d5:d9:3a:b3:3d:4d:73:95:29:a7:64:53:da:17:d2:70:bc:56:
f3:af:c3:8a:56:d1:89:5b:c6:19:2e:67:55:84:e7:2b:a9:fa:
a5:2d:51:80:b4:4b:2f:a2:a7:b9:64:7f:e4:91:a8:1b:57:2f:
a1:a5:c0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:25:23 2025 by rpki-client