Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: mG/UKyL9hp372BhEdJL+PU5GFKqQjKtYAqD92N3MGaA=
Subject key identifier: 62:7E:D2:05:49:3D:9A:B2:08:61:AB:6B:E4:39:1D:B7:7E:1E:A0:6F
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 01984965FEC8FEE536A1DA484D96CA30E1D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 145B
Signing time: Sun 27 Jul 2025 01:01:17 +0000
Manifest this update: Sun 27 Jul 2025 01:01:17 +0000
Manifest next update: Mon 28 Jul 2025 01:01:17 +0000
Files and hashes: 1: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: KAiguJjS2eAP45zHtw91SZ4v/WuHVV17hePLEVlDU7E=)
2: omv1iA0sTwZqywTVYlUXXegJP1Q.roa (hash: lDFIRi5hNHf1aQj7xWQEmMDGw0C4yu9jECeYI1136N4=)
3: yYTpoAfaYghmHruP3VvWvB4Z38E.roa (hash: 9b9Mq3MlvIX2qX8DdTkiCTxQPYb+kWY/IW9meZtFMy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:fe:c8:fe:e5:36:a1:da:48:4d:96:ca:30:e1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Jul 27 01:01:17 2025 GMT
Not After : Jul 28 01:01:17 2025 GMT
Subject: CN=627ed205493d9ab20861ab6be4391db77e1ea06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:b0:6e:ac:cb:2f:e4:9b:b0:a4:c4:14:89:aa:
bf:a9:c4:13:19:74:84:a4:47:cc:47:4b:3e:2c:4c:
70:95:bd:4c:05:b8:2e:bc:bc:5e:b0:fe:c9:a1:51:
6f:5e:4e:c5:70:ce:d0:66:ba:98:9d:cf:4d:35:6a:
a7:cc:d4:85:96:5b:f7:d7:0b:8c:8f:75:c2:63:15:
68:7d:34:be:19:90:3e:d3:5e:d5:41:3b:d0:2b:68:
39:46:9b:d5:fd:93:9d:c1:98:da:7d:0b:2e:15:56:
42:63:ba:f5:51:8e:5c:76:55:2a:8a:f0:d6:6e:f6:
10:c4:34:a0:ea:f6:2a:aa:fd:fc:33:d2:28:7b:ec:
30:3a:4d:ef:ca:3a:4b:16:e6:04:fd:84:3c:84:09:
a7:3c:0c:a5:4a:7d:46:31:16:d9:d8:5a:28:85:f1:
96:2b:39:07:93:cb:bc:72:1a:8b:3f:f9:0d:65:e2:
a5:ed:af:1e:c1:88:88:85:03:2d:a1:22:b8:2e:1a:
7d:a2:6a:0b:44:64:a1:6f:77:8e:cc:7f:88:a8:87:
3b:b0:6f:86:47:63:64:ae:ae:cd:8f:59:cb:a5:70:
d8:d4:76:3c:cb:8e:21:62:13:8b:de:11:3e:18:da:
88:10:e3:4f:90:ff:85:b9:f3:30:0d:fb:9a:9a:c8:
71:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7E:D2:05:49:3D:9A:B2:08:61:AB:6B:E4:39:1D:B7:7E:1E:A0:6F
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f1:7e:b8:5c:66:cf:91:65:c2:34:20:de:27:e1:f4:05:d7:
8c:5e:9d:cc:29:a1:98:ef:e0:f5:84:56:52:35:52:b7:16:f9:
29:98:f2:6f:08:5f:ec:a4:c0:1d:d9:fe:1f:1b:49:a1:c7:ac:
5d:77:10:b3:4f:92:c7:b1:3e:c3:92:e5:ff:29:4b:37:e4:cf:
0d:6d:74:5f:d5:48:47:24:b0:88:00:aa:cc:75:17:3a:c3:07:
cf:a9:18:e1:7a:1f:74:25:76:dc:e7:2f:75:ac:8e:ef:10:fa:
05:76:55:b4:87:02:e3:32:a8:dc:2c:11:56:8a:06:18:5a:e1:
50:26:bc:a8:68:69:61:61:43:fd:6d:94:ba:d8:ef:80:89:8a:
a0:2c:ba:7c:46:5a:58:64:15:be:f9:11:ad:a1:d8:89:4e:60:
fb:e7:88:77:f3:57:c0:1b:37:92:af:53:38:31:88:83:b1:4e:
5e:8f:bc:18:2f:41:db:b6:73:f7:b0:2c:32:93:d3:db:18:1e:
1c:56:8b:a7:64:63:0c:11:77:77:7c:e7:1c:bb:8f:bc:7a:01:
dd:22:7f:ef:96:8f:4f:c4:dc:aa:ce:eb:cf:e4:f7:b1:47:c2:
39:01:3e:76:1b:fc:f5:3a:9e:dc:5c:75:08:bc:e8:c9:bb:43:
fc:95:47:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:10:13 2025 by rpki-client