Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File: J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier: nk3awqYVLBnkdHU5qdU38m1SlbPf9JGCajKuptF+1Ac=
Subject key identifier: 92:26:76:D5:0A:B4:18:B3:5D:9C:FB:41:BB:CB:98:96:2A:D5:A9:3C
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer: /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial: 01984D421794F31F0B606757D047A74DE6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number: 0CE4
Signing time: Sun 27 Jul 2025 19:00:33 +0000
Manifest this update: Sun 27 Jul 2025 19:00:33 +0000
Manifest next update: Mon 28 Jul 2025 19:00:33 +0000
Files and hashes: 1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: eTL+3cRLemX3/S/SKnixBLcNlQ5uWHzRpXyJvp8wKmo=)
2: UEg2a8frOwQJ_ocv6mZt898VwKc.roa (hash: HhDZ6hinLTKa6qeDqW6QogtlJ6a4udPeZaa3rESZ/rM=)
3: zUk84pMkBH7qM-5eyE2RTVXesY8.roa (hash: 1Rye/GoMkKTXa8JBFflyaNlKfqeLYK+b0R1zK9MVT4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:42:17:94:f3:1f:0b:60:67:57:d0:47:a7:4d:e6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Validity
Not Before: Jul 27 19:00:33 2025 GMT
Not After : Jul 28 19:00:33 2025 GMT
Subject: CN=922676d50ab418b35d9cfb41bbcb98962ad5a93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:79:e4:73:53:a9:a3:6c:0a:8f:bd:a1:6b:
fd:fc:a7:29:43:fd:db:40:df:15:9c:e7:77:be:52:
30:0f:fc:b2:37:b4:80:8e:75:45:af:32:7f:04:4d:
80:de:8b:93:0b:29:1d:f0:1c:40:a5:fa:ae:13:d1:
34:18:70:c4:5a:b0:5f:d7:b1:0e:b9:87:d6:66:b2:
f7:17:86:41:7c:33:7c:8f:71:cd:57:31:55:c8:12:
19:b2:b2:2c:6d:e3:15:26:8a:4b:21:0f:d2:ea:18:
f7:1c:ec:88:70:2c:99:73:28:ea:65:ea:74:d0:6e:
8d:64:e3:d0:63:fc:9d:cc:52:6a:30:cb:59:34:df:
01:15:a3:fc:a5:cf:67:26:1f:f0:c2:63:b5:9d:5c:
90:82:51:41:37:cd:6b:42:47:63:cb:fb:28:cd:6f:
e5:c9:42:93:da:04:cc:23:ee:69:95:41:4c:bf:d6:
6c:5f:c0:ee:b0:ef:63:50:fd:70:d0:24:b0:19:e3:
13:b4:0a:d8:85:69:db:92:fb:c5:9f:d7:99:08:14:
50:84:d8:4a:10:d1:68:a4:bd:3e:ac:6b:6e:5d:ac:
a7:ad:f0:18:8e:8a:61:94:6b:70:50:c6:02:14:32:
0a:07:94:91:1b:e6:03:05:4a:59:70:f5:f1:b3:7d:
2c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:26:76:D5:0A:B4:18:B3:5D:9C:FB:41:BB:CB:98:96:2A:D5:A9:3C
X509v3 Authority Key Identifier:
keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:65:36:6b:24:bb:25:81:a7:44:3c:65:5f:cc:db:db:b7:d3:
71:ee:09:db:05:3e:ba:6d:d3:fe:b7:de:06:d7:90:15:fb:84:
29:e7:de:26:c9:33:bf:09:f4:6d:c7:f6:0b:01:06:83:f3:e9:
0d:e8:d1:8b:3c:e7:6f:38:60:f9:ef:1f:66:a1:3d:09:54:b1:
94:47:eb:3a:51:dc:db:12:fa:4a:fc:74:f7:01:db:a5:c9:01:
05:9e:ef:da:5a:d6:4e:6b:11:59:f0:f2:dc:be:2d:38:b0:34:
ac:e3:9b:d3:55:24:e5:6c:fe:bb:39:7a:be:0c:7a:94:46:f2:
9c:6c:b8:ff:41:20:a3:a1:82:03:73:d0:c9:09:d0:92:77:50:
57:75:80:25:50:f5:1d:ff:4c:2f:ac:00:37:3b:26:d0:61:29:
79:3e:77:fb:cb:aa:11:78:5c:65:ff:bc:37:3b:03:e2:e8:c8:
20:84:eb:b0:17:71:61:8c:1e:0d:10:2d:13:6b:f3:94:05:e4:
bc:5d:81:ef:3f:b5:2d:75:b1:aa:c3:5b:3c:41:d5:42:04:7b:
51:ac:e4:a4:ef:84:e9:5d:40:a5:c9:71:2b:19:79:ac:d7:cb:
e2:fe:03:10:25:5e:10:19:4c:2f:38:d0:4f:0c:b1:f6:58:2d:
0e:77:89:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 02:08:55 2025 by rpki-client