Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
File: J83PK9CaINK63Tq2yMft-h_Vwsw.mft (raw, json)
Hash identifier: FP/lDqYeCjTpd7pCOM2OF0ELm0tOd/45dhy624s2j7k=
Subject key identifier: 97:A5:3C:CA:AD:8E:95:A8:F4:3D:98:71:00:F1:F8:7B:1B:7D:E1:DB
Authority key identifier: 27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC
Certificate issuer: /CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc
Certificate serial: 01983D60D7A9BD70A7640AF84A7FD306779F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
Manifest number: 0314
Signing time: Thu 24 Jul 2025 17:00:13 +0000
Manifest this update: Thu 24 Jul 2025 17:00:13 +0000
Manifest next update: Fri 25 Jul 2025 17:00:13 +0000
Files and hashes: 1: J83PK9CaINK63Tq2yMft-h_Vwsw.crl (hash: iCRkQCZrBRLxrp+2tKcyDwsbMP8irH00tGm5Eka/IKA=)
2: kxpaHhhuxaN-Jg9For9SY2Nccrk.roa (hash: Q31rgNDFAzRPHBiMS/f4s6A4eZqCkoNUT9MdgG2F6C8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 14:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3d:60:d7:a9:bd:70:a7:64:0a:f8:4a:7f:d3:06:77:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27cdcf2bd09a20d2badd3ab6c8c7edfa1fd5c2cc
Validity
Not Before: Jul 24 17:00:13 2025 GMT
Not After : Jul 25 17:00:13 2025 GMT
Subject: CN=97a53ccaad8e95a8f43d987100f1f87b1b7de1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:ab:3e:9a:49:c7:ee:e1:9f:15:2f:b0:5b:
1e:da:4c:b8:e9:9b:de:f6:78:e1:38:cb:7e:35:21:
68:d0:95:3b:61:c3:4c:28:c9:40:2b:01:d7:5b:1a:
8d:ef:82:a7:6f:48:27:5f:e5:c2:a6:7e:1e:c0:70:
d4:52:0e:0e:fb:29:81:58:57:81:87:69:f2:98:30:
11:cf:ac:27:36:02:ee:88:94:4b:f2:13:85:75:d3:
d4:95:ff:ca:ec:37:9e:c5:0b:90:bf:01:fe:12:13:
4b:bd:7f:23:ee:40:4f:0d:73:6b:ef:00:23:61:50:
47:4b:cf:07:31:d6:5e:21:63:f5:c7:e3:15:6f:92:
94:8d:a5:84:de:ff:85:e0:b6:6c:9f:23:10:43:77:
75:ba:ea:d8:0f:91:c0:42:9b:fd:d4:f5:9e:81:35:
30:02:f9:05:66:d3:d5:45:74:72:42:af:f8:37:be:
87:65:ad:62:ca:56:93:29:bb:df:67:84:36:43:9d:
0e:cd:74:fd:a7:5a:bf:91:71:4d:c0:25:9b:35:77:
17:55:4b:1b:85:e8:93:de:85:3f:df:fb:63:e7:e2:
fb:94:f4:2a:dd:f1:aa:af:2f:5c:d6:e3:21:27:38:
a8:c0:e8:63:3d:09:09:36:5f:be:c7:56:7c:0f:61:
d7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A5:3C:CA:AD:8E:95:A8:F4:3D:98:71:00:F1:F8:7B:1B:7D:E1:DB
X509v3 Authority Key Identifier:
keyid:27:CD:CF:2B:D0:9A:20:D2:BA:DD:3A:B6:C8:C7:ED:FA:1F:D5:C2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J83PK9CaINK63Tq2yMft-h_Vwsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/d2bc90-2950-4322-a92e-c63fcd03a89b/1/J83PK9CaINK63Tq2yMft-h_Vwsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f4:78:16:4a:10:48:bb:17:b0:09:d6:db:52:31:ae:f6:3a:
4e:2d:bd:05:39:42:a7:94:c9:a0:00:0e:91:25:66:3b:75:9a:
ab:29:f4:8d:2f:4a:39:00:77:58:f9:94:77:05:45:53:51:c9:
d3:da:18:85:fb:3a:28:5c:9e:e3:34:24:87:32:57:2d:f5:65:
1f:a0:71:5a:e3:48:ab:87:02:ac:7a:37:ab:78:ba:fa:c4:e7:
29:12:dd:87:d3:86:8c:3a:60:9b:71:bc:bc:85:8b:10:4f:00:
03:0d:6d:bc:a8:83:da:cf:85:18:6d:c1:fe:86:c7:88:7b:f9:
99:4a:7d:4e:fe:a9:ed:92:6f:9c:c1:53:8d:42:46:12:9f:43:
3d:5d:a6:a3:7f:37:49:e5:f3:43:b9:f0:0e:cd:0e:12:13:6b:
4d:fa:7a:8d:f5:a3:8a:b6:06:56:44:bb:f2:2c:e2:66:19:64:
f1:0a:d8:9e:ce:91:3b:e1:36:b4:bf:fc:65:f3:9e:52:ab:db:
07:60:f9:be:ab:00:42:a5:47:a7:07:16:1d:a2:35:c6:2d:58:
c0:d9:78:09:1e:9a:75:c4:ea:ec:42:65:12:42:01:c2:f1:c6:
5a:5d:78:0c:2c:1c:57:9d:08:d3:10:4d:75:7a:71:2a:1e:df:
be:39:53:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg9YNepvXCnZAr4Sn/TBnefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3Y2RjZjJiZDA5YTIwZDJiYWRkM2FiNmM4YzdlZGZhMWZk
NWMyY2MwHhcNMjUwNzI0MTcwMDEzWhcNMjUwNzI1MTcwMDEzWjAzMTEwLwYDVQQD
Eyg5N2E1M2NjYWFkOGU5NWE4ZjQzZDk4NzEwMGYxZjg3YjFiN2RlMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTSrPppJx+7hnxUvsFse2ky46Zve
9njhOMt+NSFo0JU7YcNMKMlAKwHXWxqN74Knb0gnX+XCpn4ewHDUUg4O+ymBWFeB
h2nymDARz6wnNgLuiJRL8hOFddPUlf/K7DeexQuQvwH+EhNLvX8j7kBPDXNr7wAj
YVBHS88HMdZeIWP1x+MVb5KUjaWE3v+F4LZsnyMQQ3d1uurYD5HAQpv91PWegTUw
AvkFZtPVRXRyQq/4N76HZa1iylaTKbvfZ4Q2Q50OzXT9p1q/kXFNwCWbNXcXVUsb
heiT3oU/3/tj5+L7lPQq3fGqry9c1uMhJziowOhjPQkJNl++x1Z8D2HXkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJelPMqtjpWo9D2YcQDx+HsbfeHbMB8GA1UdIwQY
MBaAFCfNzyvQmiDSut06tsjH7fof1cLMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjgzUEs5Q2FJTks2M1RxMnlNZnQtaF9Wd3N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kMmJjOTAtMjk1MC00MzIyLWE5MmUt
YzYzZmNkMDNhODliLzEvSjgzUEs5Q2FJTks2M1RxMnlNZnQtaF9Wd3N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kMmJjOTAtMjk1MC00MzIyLWE5MmUtYzYzZmNkMDNhODli
LzEvSjgzUEs5Q2FJTks2M1RxMnlNZnQtaF9Wd3N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvR4FkoQ
SLsXsAnW21IxrvY6Ti29BTlCp5TJoAAOkSVmO3Waqyn0jS9KOQB3WPmUdwVFU1HJ
09oYhfs6KFye4zQkhzJXLfVlH6BxWuNIq4cCrHo3q3i6+sTnKRLdh9OGjDpgm3G8
vIWLEE8AAw1tvKiD2s+FGG3B/obHiHv5mUp9Tv6p7ZJvnMFTjUJGEp9DPV2mo383
SeXzQ7nwDs0OEhNrTfp6jfWjirYGVkS78iziZhlk8QrYns6RO+E2tL/8ZfOeUqvb
B2D5vqsAQqVHpwcWHaI1xi1YwNl4CR6adcTq7EJlEkIBwvHGWl14DCwcV50I0xBN
dXpxKh7fvjlTvg==
-----END CERTIFICATE-----
Generated at Thu Jul 24 23:31:54 2025 by rpki-client