Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
File: J2q7GtVn5bseR1pyoKaEU-P7oc0.mft (raw, json)
Hash identifier: L/chsG2qHNXqo93NOTqNUXj1ZzdguX7Y3a7njKAv+Tw=
Subject key identifier: FA:4B:D3:5A:5D:14:FC:24:1D:78:3E:F6:05:A1:68:FA:BE:C5:9A:56
Authority key identifier: 27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
Certificate issuer: /CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Certificate serial: 019851C4022C659A32695C28729FB9381909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
Manifest number: 0C24
Signing time: Mon 28 Jul 2025 16:00:56 +0000
Manifest this update: Mon 28 Jul 2025 16:00:56 +0000
Manifest next update: Tue 29 Jul 2025 16:00:56 +0000
Files and hashes: 1: CeCGyRgJTvMcLvc6bqV_Qp6eGCU.roa (hash: vD/F/679cA73k7OkjDpOttD102xB/cx2AgMSLChmbBA=)
2: J2q7GtVn5bseR1pyoKaEU-P7oc0.crl (hash: XYF//BiKzQ9tQR0vtx4jxCKYE1dV5tFjHJismJZ0Zbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:c4:02:2c:65:9a:32:69:5c:28:72:9f:b9:38:19:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276abb1ad567e5bb1e475a72a0a68453e3fba1cd
Validity
Not Before: Jul 28 16:00:56 2025 GMT
Not After : Jul 29 16:00:56 2025 GMT
Subject: CN=fa4bd35a5d14fc241d783ef605a168fabec59a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:79:38:f8:04:99:2e:ac:77:70:22:4f:f7:
87:8b:b1:4f:3a:ed:a6:cf:bb:18:64:8b:82:89:5b:
fe:4c:e4:eb:c8:3b:9c:47:f8:6b:78:a3:f0:d2:ad:
b2:23:b6:85:08:a0:3e:a7:0e:30:fc:a8:50:0e:fc:
b3:fc:e2:4b:56:bd:f8:c5:d5:80:95:51:ad:7f:28:
4a:9a:e9:0e:dd:9a:a3:8e:d1:7e:41:11:f4:17:42:
ac:29:dd:41:0f:bd:6d:83:60:93:47:c4:8f:c6:63:
dd:1d:ba:3e:cb:98:67:d9:95:3b:a8:0b:4a:0e:42:
20:d2:d0:53:31:c7:db:55:50:a3:48:3d:f5:a1:9d:
be:c0:c6:42:23:1c:e1:c8:b6:05:71:aa:29:c1:88:
b0:45:d7:59:17:22:fe:ac:60:32:09:24:b2:2f:60:
5f:36:1f:c7:31:d1:e5:82:f2:d3:16:7f:6d:87:33:
39:b6:2b:bb:18:ab:c6:aa:9a:ee:17:c8:e2:86:9d:
97:e3:88:63:80:ed:b8:db:a2:78:7c:03:c0:1a:fd:
27:a3:65:48:ce:d0:8e:d4:db:82:a4:f3:56:1d:4e:
4e:66:ff:e4:65:06:13:d3:76:74:43:c4:1c:c9:d8:
e8:7a:26:48:37:9f:36:44:1a:f6:4e:b8:ce:f6:5a:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4B:D3:5A:5D:14:FC:24:1D:78:3E:F6:05:A1:68:FA:BE:C5:9A:56
X509v3 Authority Key Identifier:
keyid:27:6A:BB:1A:D5:67:E5:BB:1E:47:5A:72:A0:A6:84:53:E3:FB:A1:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2q7GtVn5bseR1pyoKaEU-P7oc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/42694f-89a6-43c8-8346-bb0eed13f23b/1/J2q7GtVn5bseR1pyoKaEU-P7oc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7f:f0:03:54:3f:ec:34:43:06:1b:f9:b6:3e:c4:f5:67:2b:
23:e3:8b:c1:cd:8d:04:c3:ea:8e:1a:24:b2:eb:bc:c2:b4:a0:
22:47:d9:20:2e:1a:fa:42:16:87:c8:83:b2:7c:e7:63:dd:b0:
75:a5:5b:16:ef:70:bc:5b:58:9a:ca:66:45:7a:79:82:c1:97:
ec:6e:61:47:7d:52:02:c0:de:fc:61:17:93:4b:ff:22:bc:a0:
e6:9d:5d:6f:0c:3f:f0:45:ff:bc:a6:68:c7:41:51:68:ae:96:
f2:b4:12:9b:39:e0:a2:60:4a:d7:91:ee:4c:84:9d:1d:6e:a7:
6f:52:1c:56:1f:2b:12:49:19:a9:d4:6a:0b:46:14:a0:48:c8:
64:d3:93:78:32:df:06:b9:52:db:df:d7:a9:d5:ee:98:e1:7a:
67:92:6b:f5:29:bf:d0:5a:be:e2:08:c7:e7:24:f0:5e:5d:18:
88:39:2a:11:9b:db:0b:2e:cf:5f:e1:4a:89:e4:f6:3d:c1:1a:
5e:36:09:a1:15:55:3d:f5:eb:5d:0b:17:3c:f8:8c:26:3f:07:
2a:da:30:58:77:8e:f3:da:0b:0f:85:0c:3c:b0:84:c5:7c:96:
26:68:f6:60:7b:5a:33:ea:bc:60:03:54:24:08:5b:bb:d2:dd:
19:82:e2:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:10:44 2025 by rpki-client