Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
File: J97R2QxNUraHECO8cSltCKmMTNs.mft (raw, json)
Hash identifier: TE3JIiBDX/h3qRdB8tK1FfRfw+7TskjxRNnGUOketSo=
Subject key identifier: D2:88:B5:2E:92:73:F0:B1:0B:21:5D:C5:3A:72:F7:23:76:43:99:A8
Authority key identifier: 27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
Certificate issuer: /CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Certificate serial: 01983FBED1033B3B1945270CD8C316CD0EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
Manifest number: 0BBD
Signing time: Fri 25 Jul 2025 04:02:06 +0000
Manifest this update: Fri 25 Jul 2025 04:02:06 +0000
Manifest next update: Sat 26 Jul 2025 04:02:06 +0000
Files and hashes: 1: J97R2QxNUraHECO8cSltCKmMTNs.crl (hash: JIXi2ptaOm1PH8gzUTLJV8jLWAwOkso/ghTw80qN16E=)
2: X3QMt1fmV4wTFAQPHZ4zsROv8I0.roa (hash: Whnqs1Wwvsp0OIKAaEg9kGiqf108NquKFQHaJWKxLGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:be:d1:03:3b:3b:19:45:27:0c:d8:c3:16:cd:0e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ded1d90c4d52b6871023bc71296d08a98c4cdb
Validity
Not Before: Jul 25 04:02:06 2025 GMT
Not After : Jul 26 04:02:06 2025 GMT
Subject: CN=d288b52e9273f0b10b215dc53a72f723764399a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:25:4f:3f:16:59:cd:c2:ef:73:d6:26:a0:e1:
71:ea:c7:e4:32:c8:2a:5a:fd:7a:f4:cd:14:af:38:
0e:05:90:d9:b0:00:8f:74:54:9f:31:99:45:4b:57:
21:ac:74:fe:2b:d8:84:1b:66:45:ae:3a:dc:57:77:
ba:b4:6c:b3:1f:d9:e8:db:f3:69:11:6f:03:65:ee:
c3:1f:3d:c5:85:d2:67:8c:1c:d9:7b:2d:6b:ee:68:
d2:df:9d:0a:5b:7b:cb:76:3b:5f:b6:36:53:82:d2:
5d:6b:f5:3f:aa:54:a8:dd:1b:19:94:a3:a6:f8:86:
44:5b:b6:d9:39:ed:3b:15:69:5e:7a:f1:a8:f3:2b:
f8:ff:14:dc:e3:4f:44:fb:8b:6b:8c:a6:06:63:8b:
1e:06:ec:34:41:a9:1e:30:00:97:7b:00:48:9e:98:
19:b7:16:31:5c:89:9a:9a:21:52:a1:30:a7:93:c2:
34:62:f5:fc:4d:ff:09:57:a7:f6:14:f4:a4:8a:3b:
ad:ac:c1:a9:de:40:6e:72:ef:e6:da:a5:82:aa:41:
04:62:b0:59:b0:d2:ed:a8:e4:fb:02:0e:bb:70:20:
3d:ec:7e:c2:b2:be:cd:83:ed:36:7a:1b:fd:e8:b5:
55:47:88:c6:1e:e2:a0:7f:57:c5:d4:34:3b:ba:20:
41:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:88:B5:2E:92:73:F0:B1:0B:21:5D:C5:3A:72:F7:23:76:43:99:A8
X509v3 Authority Key Identifier:
keyid:27:DE:D1:D9:0C:4D:52:B6:87:10:23:BC:71:29:6D:08:A9:8C:4C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J97R2QxNUraHECO8cSltCKmMTNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/338212-38a7-468d-b874-351ab9f236b0/1/J97R2QxNUraHECO8cSltCKmMTNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e7:bd:57:2f:aa:5a:0f:30:fa:d6:17:08:d4:2e:d7:1b:5c:
57:06:e1:38:22:24:8d:00:5f:5c:36:39:08:40:bd:7b:ca:e7:
4e:49:34:16:27:cd:f3:1e:a3:09:c7:04:c5:ef:30:68:26:77:
d2:ce:0c:1c:bb:71:5e:81:c1:7b:79:e3:38:ab:3b:87:39:99:
e3:69:9a:1d:06:8f:c9:94:46:38:ea:d7:5c:d6:bb:de:37:ab:
5b:49:22:47:0e:5e:ce:22:3f:86:bd:7d:76:01:1f:9b:8d:4e:
78:39:4d:9e:cc:58:e0:c3:50:e2:8e:87:9e:79:e5:13:c9:e8:
ab:53:5c:e9:08:77:61:66:02:b7:ae:c3:13:d0:a6:72:50:1a:
d5:f2:f2:b8:e1:b1:a9:13:5b:a6:fd:5e:dd:d6:59:d3:a9:c6:
d8:10:42:50:fb:28:55:72:97:1f:6f:50:0c:21:d9:c0:fe:c2:
1e:91:1d:92:d3:04:0f:2a:8f:b5:0c:2e:f1:84:48:af:85:94:
6f:7e:4b:f8:1f:e6:82:4d:f8:8c:18:18:db:ca:f7:8e:f6:04:
1d:fc:05:39:05:0a:d0:d3:fa:d1:85:29:8c:a5:2f:86:60:19:
22:76:3b:ee:64:81:58:0e:3c:ca:27:46:02:72:1c:73:7f:b9:
ad:5a:aa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:45:42 2025 by rpki-client