Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: 8dZh2Dj75ftgd8gUhu3y4dLd1O3V6alZjUXayj0Li1k=
Subject key identifier: DE:15:03:63:4F:88:ED:AD:5C:27:C9:08:8C:21:83:87:BA:D2:A5:89
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 019853441CAF67EF5781037EE845DD2476D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 1607
Signing time: Mon 28 Jul 2025 23:00:29 +0000
Manifest this update: Mon 28 Jul 2025 23:00:29 +0000
Manifest next update: Tue 29 Jul 2025 23:00:29 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: k8/JriZIzDs0kh4S41CcAvZGn00uXN9KFGv2beIMgoc=)
2: UimTjYOP0EzrCaiSFBeZrUyW0Nc.roa (hash: ICMmUQQ3EZmWfRi2Atl6bpgSoSc4L6nW+n1fJyzn1Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:1c:af:67:ef:57:81:03:7e:e8:45:dd:24:76:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Jul 28 23:00:29 2025 GMT
Not After : Jul 29 23:00:29 2025 GMT
Subject: CN=de1503634f88edad5c27c9088c218387bad2a589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fa:bc:65:fe:33:fc:54:f9:a0:b6:e1:89:4a:
b6:21:f7:c8:d4:fe:25:6c:2c:44:aa:a4:cf:99:11:
68:e7:55:03:0f:8f:b7:f0:34:16:c4:d5:af:5e:71:
d8:5a:7a:be:b8:c2:a7:78:9a:8f:c4:72:38:db:b8:
47:59:2d:09:4c:7e:d4:d4:9d:ae:ef:71:c6:53:5e:
a3:ed:c8:d9:80:cf:9c:db:76:7e:38:43:ce:c0:d4:
b8:30:15:68:56:22:18:83:b1:20:2c:36:b1:0b:b9:
7a:0e:e2:40:ea:c9:6e:2c:95:68:f2:b6:5a:7a:67:
ba:90:b8:81:a3:6a:3c:17:46:57:ec:4a:2b:84:c4:
73:ff:7f:95:9d:16:2a:56:64:8d:a6:1c:2d:f5:1c:
5c:38:ff:14:b6:13:7c:f2:85:3c:cc:02:52:02:f9:
3a:8c:61:1f:ca:53:4b:06:6d:09:d5:00:ef:3f:81:
bf:cd:1c:a1:be:47:9b:8f:bb:7e:e5:a8:cd:fa:d0:
92:06:57:00:b3:fe:c8:bb:91:ad:6a:a8:c9:16:92:
29:a6:60:74:ac:e9:4a:21:c4:9b:a9:34:4d:dc:23:
c9:d2:94:f6:c9:62:3e:44:ff:70:38:31:b9:08:1b:
f4:b3:42:e5:d8:3f:d6:1a:74:d9:6a:7c:02:15:e3:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:15:03:63:4F:88:ED:AD:5C:27:C9:08:8C:21:83:87:BA:D2:A5:89
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:43:02:b6:05:ba:1a:b5:71:81:85:8e:bd:e4:7e:ba:44:6c:
b0:0a:f3:22:7e:91:70:e4:3f:11:8d:ee:11:4b:0a:41:33:e3:
e1:dd:2a:24:42:de:8d:6f:dd:76:8e:86:50:c4:c4:20:47:16:
07:fb:ac:bd:54:c4:4f:da:26:00:0b:ac:17:9b:e2:ee:d3:77:
89:2c:5c:a2:34:0a:34:30:e6:33:d0:54:00:a7:a7:b4:f1:ff:
6a:97:61:cb:89:04:e0:71:15:bd:1c:8f:fd:11:aa:d3:84:e0:
0f:6d:4e:d0:cf:78:49:1e:f3:93:22:35:29:2b:08:9c:91:eb:
3e:80:af:59:04:5a:ec:0c:b5:a2:9a:b1:bf:48:a8:29:96:64:
dc:3a:95:16:1b:25:8f:02:19:9d:47:0a:ba:d0:98:dc:8f:37:
e2:4d:81:b8:b7:91:e7:0a:32:ee:02:2c:75:57:5b:f5:7f:c8:
20:50:e1:8c:85:f5:6d:9f:9f:52:35:10:e2:6d:30:68:bc:a2:
91:1d:40:57:76:27:e6:69:d0:15:7f:60:26:fb:1b:fb:4a:1d:
b2:0f:7b:69:4b:36:81:20:ab:97:a9:aa:d5:9c:ee:65:3b:05:
16:67:6f:68:71:71:87:36:1e:f7:47:72:25:76:57:c5:f5:5b:
5e:5a:c6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:15:08 2025 by rpki-client