Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
File: JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft (raw, json)
Hash identifier: gf6BTDInkOdq4FMJ1AKxeIIGrhL60/sC0iUrvU9g9bU=
Subject key identifier: 10:09:A5:77:F2:EA:4C:5B:1F:34:70:0D:BB:53:0B:59:32:B8:DB:E0
Authority key identifier: 27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
Certificate issuer: /CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Certificate serial: 01984A779A08361B8FFFB242FDBF82057360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
Manifest number: 0352
Signing time: Sun 27 Jul 2025 06:00:08 +0000
Manifest this update: Sun 27 Jul 2025 06:00:08 +0000
Manifest next update: Mon 28 Jul 2025 06:00:08 +0000
Files and hashes: 1: JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl (hash: nkO9T3Q7cwPdAx5gWKbYJuAWbt947Q0D3KlLUX7zrcg=)
2: gm-1FgU2aGaeL3uBWUTc78I4FE8.roa (hash: 7heZcqbabPmaXzDUlAW6gffQrzGOH/CbDbfHIPp7ikU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:9a:08:36:1b:8f:ff:b2:42:fd:bf:82:05:73:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27189ab53f32eff65726fd49d08d42ff812c6db3
Validity
Not Before: Jul 27 06:00:08 2025 GMT
Not After : Jul 28 06:00:08 2025 GMT
Subject: CN=1009a577f2ea4c5b1f34700dbb530b5932b8dbe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:77:0b:54:00:08:25:0a:0e:9d:c3:88:4c:
46:3c:f4:40:74:66:8e:d8:72:a3:7e:19:e8:4a:8f:
ed:e0:14:e6:9f:2d:b1:32:53:73:e7:49:88:84:26:
f7:46:da:43:d8:af:e7:71:a7:e3:34:71:71:fa:38:
77:8d:b4:2e:ff:16:02:71:11:06:ca:c6:4f:fd:0a:
59:2e:98:51:dc:d0:b6:25:33:25:aa:f6:56:5c:a0:
2c:d2:f6:50:e8:4d:be:f1:64:e8:b0:19:68:9f:ce:
eb:b0:2e:5c:58:85:20:39:ba:6d:1f:db:15:da:67:
10:45:54:1c:9a:32:18:2d:91:fc:b7:c1:ea:3c:e5:
4a:9e:53:ee:57:05:aa:46:63:26:ac:dd:39:7b:67:
61:04:e4:df:b7:1f:4d:9e:17:22:5c:ec:5a:de:0a:
ce:3a:94:b9:5a:ad:08:0b:c3:e8:87:c5:da:98:70:
b6:a5:ff:26:0b:84:2c:16:fb:64:ce:19:68:e6:47:
f2:af:e1:ec:bf:a5:43:57:69:a8:b4:22:fc:86:51:
a5:e7:b9:c2:a6:44:99:d2:5f:2a:f2:36:74:d5:89:
89:5f:f7:30:74:d0:51:22:99:6f:19:3d:aa:7d:9c:
ee:fc:e0:1c:e7:5c:d0:aa:4e:2d:ff:3f:a6:e0:a0:
33:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:09:A5:77:F2:EA:4C:5B:1F:34:70:0D:BB:53:0B:59:32:B8:DB:E0
X509v3 Authority Key Identifier:
keyid:27:18:9A:B5:3F:32:EF:F6:57:26:FD:49:D0:8D:42:FF:81:2C:6D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxiatT8y7_ZXJv1J0I1C_4EsbbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a34c1e-1881-4d6c-aad6-5070258dbf2f/1/JxiatT8y7_ZXJv1J0I1C_4EsbbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:b9:a4:cc:ae:71:99:01:a4:88:a6:00:cf:38:f4:49:d9:90:
58:ae:bc:62:58:87:16:43:68:12:90:1e:5d:fa:9b:22:11:a6:
cb:cf:ae:99:43:19:6e:2f:1d:cc:2b:55:6d:c1:34:f3:27:62:
ec:9a:59:5c:a1:19:66:0f:3f:a1:6b:5f:c7:fd:4a:96:5f:ab:
b4:d9:96:38:5b:f3:58:78:b5:52:ee:4f:00:32:3d:17:ea:e0:
fb:f7:bb:83:da:18:77:b4:ec:cc:88:6a:6d:c7:08:c2:c0:74:
ee:a9:d1:0c:cd:4c:23:90:09:df:54:24:64:0c:82:30:c6:7e:
e5:9e:08:09:b6:16:85:dd:a9:03:89:b6:41:c2:00:db:47:16:
7a:42:fb:6c:36:d1:3d:a9:c1:2f:ad:5a:8f:a7:de:e1:6b:d9:
e2:06:b2:16:8a:c5:be:2c:e8:ef:a5:5a:e6:b6:91:bb:28:f4:
3e:de:fc:3a:37:08:7b:14:09:be:12:c0:a7:d1:9a:37:54:b7:
a2:b6:77:b7:fa:07:b8:9c:e3:0f:d2:90:78:55:fc:69:08:63:
dc:cd:26:cb:19:a2:50:c8:18:a5:32:24:0b:3a:dc:f7:7e:5b:
e4:db:e6:93:ce:6f:ae:d1:8c:5a:e3:29:99:57:52:45:0c:39:
70:97:69:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:50 2025 by rpki-client