Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: GsbF+uak/CVaocabH927c145N81L8i/7uvBejkPv9+M=
Subject key identifier: F9:2E:16:ED:F2:5F:FF:B1:CE:92:74:EC:92:2E:C0:00:55:1D:AA:76
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 01984BC1FD21A70D34B64998C0B3CFE0C597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 12:01:01 +0000
Manifest this update: Sun 27 Jul 2025 12:01:01 +0000
Manifest next update: Mon 28 Jul 2025 12:01:01 +0000
Files and hashes: 1: IjluqbVdM5zm7wvPSgQZOmXQjag.roa (hash: QKwqMUOeWOJatNvuP/XT/XSpsSd9RiOppxhqX3P9KPo=)
2: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: k+uJWEi8l22wFe5unF/8PVVGW3WVQP5PvsMguyx0psM=)
3: YY-hoyGXDDo8SiePezL_ZO2nNOw.roa (hash: A3j7uoljgavovkzwgqN6nFVhnXRD4UmTm39D3QvLFO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:c1:fd:21:a7:0d:34:b6:49:98:c0:b3:cf:e0:c5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Jul 27 12:01:01 2025 GMT
Not After : Jul 28 12:01:01 2025 GMT
Subject: CN=f92e16edf25fffb1ce9274ec922ec000551daa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cb:d0:d5:3b:cf:92:ad:e6:d6:fa:ed:ab:c0:
1c:54:db:0e:dd:19:00:59:79:42:c0:44:ea:7b:03:
1f:62:d9:e1:bc:25:86:10:5a:39:97:c6:58:d8:34:
36:70:41:31:90:88:c3:7e:79:0b:94:3c:6d:ae:74:
d8:2b:b3:33:9e:63:5b:d7:54:06:58:05:00:67:9c:
b8:17:69:12:14:02:a4:83:4d:8c:93:97:95:17:71:
78:c8:ce:d2:6a:65:c1:ad:6f:08:80:53:83:9a:21:
30:bf:56:da:84:04:f2:c7:e7:59:43:67:24:df:6c:
86:a4:92:e8:3e:69:83:07:e8:a2:50:ad:dd:83:51:
ba:0e:dd:b6:dd:d5:f4:9b:d6:a4:c1:4c:8b:3a:af:
db:83:e0:23:bd:6c:aa:89:11:8a:3e:cb:92:f6:d7:
27:05:b7:89:06:52:7d:d1:87:9b:1f:51:5e:ed:33:
a3:3b:4b:1d:5c:93:7d:ca:2f:02:68:c1:f4:df:19:
bb:77:ee:91:b8:ed:94:6d:6f:ed:2a:1f:53:0d:41:
5d:c1:e7:e9:e4:bb:76:f0:05:57:42:0a:3b:5c:30:
c4:c6:a2:73:ae:1d:b3:de:9a:77:7e:2c:30:fa:59:
bb:2f:17:cb:b5:13:fe:05:94:7a:ae:3b:81:03:d2:
20:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2E:16:ED:F2:5F:FF:B1:CE:92:74:EC:92:2E:C0:00:55:1D:AA:76
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:03:52:55:03:5d:f6:c7:5e:f2:61:ca:cd:24:a3:67:fc:83:
3f:91:d6:50:76:5d:a6:fa:4d:19:3e:c8:e2:e8:d0:dd:6d:48:
8e:b9:5f:3c:cd:fc:c6:f2:3f:19:ad:e5:7e:b4:91:c7:8c:a0:
b0:b4:56:74:d5:2a:14:2f:3f:a7:9d:4c:ef:27:d8:86:67:15:
96:2a:25:47:a0:25:ab:7d:12:dc:39:c2:1a:c1:7a:ce:11:91:
f3:fa:d9:77:ff:07:c3:e1:25:2e:12:b8:9f:07:53:b3:32:05:
52:22:02:0a:7f:73:cb:6c:6a:e7:31:45:76:03:55:8c:08:84:
b0:00:b7:cd:c4:05:08:d3:65:e4:d2:de:d7:98:8d:fe:4b:10:
c6:a8:1a:d1:5f:b0:15:79:ce:53:a3:b1:64:bc:f6:2a:f5:c7:
f5:b9:c8:43:d6:5d:86:82:c6:f5:5c:68:04:b3:6d:81:22:da:
c3:ae:89:f3:63:ef:cb:62:6e:e9:be:0a:ad:db:ab:0b:55:c2:
b8:4a:80:1e:cc:dd:fc:d8:48:f6:c8:03:f2:2a:1c:a8:1a:4f:
c3:19:d7:29:be:f8:07:79:f3:16:ca:67:2f:87:78:8f:7f:10:
e0:8c:30:a7:8e:50:dd:8e:98:30:31:dc:cf:f1:85:85:a3:6f:
09:ab:a4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:07:26 2025 by rpki-client