Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
File: JzWNbTPibSr4Q9WB3PacDREKneg.mft (raw, json)
Hash identifier: PGF+ZfLw9u4YOVc2LibCFhQZl57Qeg0zDG5+3c44NOM=
Subject key identifier: 8B:53:72:A7:CA:BE:C7:F6:A8:65:3E:86:C2:0A:CC:A5:E2:63:9A:95
Authority key identifier: 27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
Certificate issuer: /CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Certificate serial: 019836C184979A0C09CD37A6DE5961B0C72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
Manifest number: 0211
Signing time: Wed 23 Jul 2025 10:08:28 +0000
Manifest this update: Wed 23 Jul 2025 10:08:28 +0000
Manifest next update: Thu 24 Jul 2025 10:08:28 +0000
Files and hashes: 1: JzWNbTPibSr4Q9WB3PacDREKneg.crl (hash: bjUa+ZVfL+gBCgHbIpsI5Ib6ZLOafVMEe2cwygZiQGU=)
2: xCvl2MPRqLFevw92K1xWqEyP8xM.roa (hash: x5lJC5gSbKWJztGnWxiyT9yj/ffbvJ91buVaYTLqpME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 10:08:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:c1:84:97:9a:0c:09:cd:37:a6:de:59:61:b0:c7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27358d6d33e26d2af843d581dcf69c0d110a9de8
Validity
Not Before: Jul 23 10:08:28 2025 GMT
Not After : Jul 24 10:08:28 2025 GMT
Subject: CN=8b5372a7cabec7f6a8653e86c20acca5e2639a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c8:fc:6b:40:3a:e8:f0:55:1c:67:11:55:f6:
a0:34:a9:b3:34:68:cc:6f:b4:fc:39:d8:99:fb:7d:
0d:bb:f9:b2:a9:2f:f4:5c:22:c0:fc:e5:07:65:b7:
14:d3:02:6d:55:ac:6f:5b:8f:b7:8d:76:e3:60:80:
f0:15:af:aa:7e:2f:9f:10:a1:dc:48:de:eb:e0:21:
29:74:d3:a7:68:38:d0:c5:fb:70:f6:0b:65:8f:9a:
38:b0:6c:67:45:29:6f:c1:ae:ed:ad:5b:80:1d:29:
b2:4f:cc:70:3f:ea:4e:63:3a:9e:5f:03:ec:d8:cd:
3d:9b:d0:b5:43:21:10:3e:93:88:78:a8:9a:34:d7:
0a:f6:bc:9f:08:e3:d6:f7:85:cd:02:82:f0:b0:9b:
47:fd:01:e0:e9:7b:c5:f8:53:8d:6d:91:e7:57:ee:
23:b8:88:ea:09:b9:df:92:24:ec:45:26:66:cb:a3:
1c:15:71:0a:18:2b:5e:23:a5:f9:31:dc:ba:69:ac:
17:5e:9f:a6:96:1d:c2:83:5e:f9:41:4e:71:19:6f:
95:78:62:a1:f5:87:0c:40:d8:34:7b:81:4c:26:3e:
6a:44:2f:57:32:e4:08:c7:c4:44:05:84:6e:17:83:
47:a8:7e:3f:12:7a:cf:08:7f:53:e1:29:43:02:f6:
2e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:53:72:A7:CA:BE:C7:F6:A8:65:3E:86:C2:0A:CC:A5:E2:63:9A:95
X509v3 Authority Key Identifier:
keyid:27:35:8D:6D:33:E2:6D:2A:F8:43:D5:81:DC:F6:9C:0D:11:0A:9D:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzWNbTPibSr4Q9WB3PacDREKneg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc18f3-c0db-4cd2-a083-426d9ff207d1/1/JzWNbTPibSr4Q9WB3PacDREKneg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:58:7c:48:ea:c5:77:e7:e0:bf:e4:fc:1a:bb:c7:85:b1:d4:
46:4a:21:ec:8f:f7:d8:d6:cb:5a:98:82:7d:dd:32:97:a4:79:
ef:45:ae:30:33:cc:9a:3f:b2:f1:07:e3:e9:2d:75:de:2f:8b:
52:04:33:fc:74:0e:c6:06:db:15:be:bf:d6:29:a9:8a:8b:75:
36:df:62:37:3d:89:c5:a0:bd:97:d9:99:09:60:be:f3:1c:65:
87:1b:ba:ac:f5:42:7e:ba:5d:09:9a:fc:9a:89:0c:bb:9b:6d:
77:a2:64:b0:66:df:46:0c:69:ec:5b:e6:0e:6c:8b:71:66:9f:
24:c3:11:bf:df:94:b8:eb:3f:42:e2:42:96:27:4c:1b:79:64:
12:ec:7b:78:0d:c2:fa:48:81:0e:c5:91:f9:c4:66:c5:12:5c:
37:2e:d2:67:6a:e7:8e:00:bb:68:ad:92:8f:db:93:1d:ea:f0:
d3:df:4e:01:61:04:79:f9:96:a4:99:51:57:bd:2e:ab:3e:d1:
cc:58:82:f9:9f:19:1d:74:c7:24:53:5c:fc:03:58:9f:52:0d:
52:21:de:b6:7b:ab:dd:51:7d:8d:58:aa:d7:e9:c3:e1:ff:9d:
73:b0:92:27:38:b2:80:65:db:b6:d4:7a:ac:9c:12:64:0e:7d:
bb:89:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 17:25:30 2025 by rpki-client