Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
File: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft (raw, json)
Hash identifier: QY83j68nB4hL1oCAVtGG5u2qHZ0eVz4L+JFWzxzMVKU=
Subject key identifier: 04:31:7D:0C:9B:54:10:69:3E:1F:82:56:A4:97:FB:D9:1C:1C:C7:2C
Authority key identifier: 27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
Certificate issuer: /CN=27e367d8decf7d626e54780f80e57360d2c078cd
Certificate serial: 019848F770BB2917A401B3B859AA5F3D29F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
Manifest number: 0CEC
Signing time: Sat 26 Jul 2025 23:00:32 +0000
Manifest this update: Sat 26 Jul 2025 23:00:32 +0000
Manifest next update: Sun 27 Jul 2025 23:00:32 +0000
Files and hashes: 1: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl (hash: wF/xwEkST8aiEdX98NUVJKF4G5QKJBdy2TwRJStaTEg=)
2: kH84XjWCF3YsEupBc9_NB-UJ1LE.roa (hash: vFi6ltA+YLY/2jEI7t4T0lx3r1xW2YaGJ9YVTzgeHZA=)
3: m8b-nSkJNQaQc9Ko3VmUYZ_aR5k.roa (hash: x/jmnJNzCw/+lpmfHMz6HsStw+fWqWLA6QrXjLJpCDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:70:bb:29:17:a4:01:b3:b8:59:aa:5f:3d:29:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e367d8decf7d626e54780f80e57360d2c078cd
Validity
Not Before: Jul 26 23:00:32 2025 GMT
Not After : Jul 27 23:00:32 2025 GMT
Subject: CN=04317d0c9b5410693e1f8256a497fbd91c1cc72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:c9:c0:13:a6:44:18:2e:a4:c2:1f:ca:6c:
b6:53:b1:07:31:ce:d7:0e:c2:37:da:13:67:6a:05:
89:c6:59:18:9e:10:6d:ac:4f:db:47:16:30:5b:95:
bd:f3:61:28:71:70:31:b6:16:2c:4f:ea:b2:7c:b3:
bb:dc:2e:69:a9:50:7d:4d:bb:fc:18:4b:85:6c:a4:
ed:36:d6:99:be:af:7a:34:b3:b2:94:75:f4:07:34:
73:92:f4:78:20:3e:66:07:64:87:55:f2:7d:57:02:
d1:13:03:7c:5a:f6:0f:60:c7:bd:56:ab:ce:6f:30:
fa:ca:48:39:01:34:ac:8c:f6:61:29:3e:41:f3:13:
3a:e5:d5:65:cc:51:46:25:11:5b:94:13:70:31:08:
1c:1c:09:f7:ec:e6:a2:fd:c1:45:da:93:90:84:e5:
a4:23:78:84:58:8d:84:f4:8a:6e:9a:d0:ee:dd:97:
1a:9f:2c:c1:df:15:21:fb:d4:9b:8b:d7:8c:c0:2b:
9a:99:28:86:7c:06:e5:ac:fc:b3:f2:dd:4c:fe:69:
a0:72:9d:1b:58:63:68:97:a2:76:6c:d0:f1:63:c5:
84:10:62:e1:5b:a9:cb:4f:dc:ed:56:85:12:8f:6c:
e9:7d:a4:25:18:50:cb:9b:83:20:79:87:c6:6a:bd:
d9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:31:7D:0C:9B:54:10:69:3E:1F:82:56:A4:97:FB:D9:1C:1C:C7:2C
X509v3 Authority Key Identifier:
keyid:27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:37:fb:a6:b5:24:73:bd:56:58:a6:3d:a8:e7:7f:8e:68:17:
79:d4:c5:89:7f:27:14:b9:23:68:1d:78:0e:aa:a2:9f:39:12:
f5:dd:7f:17:ce:90:ff:8d:16:57:c6:81:23:ba:97:34:bb:12:
7a:85:55:b0:10:91:f3:a4:34:57:42:e2:f4:99:0f:58:72:be:
ac:97:7b:e3:9c:71:06:d6:a6:bd:aa:0f:1c:77:d4:54:a5:ae:
be:40:88:af:bf:a3:28:6b:b7:0a:17:92:1c:17:d4:37:dc:36:
b1:37:9d:d4:9c:39:2f:35:56:ae:f3:91:a4:f9:19:c3:87:ce:
a1:4a:79:2c:d3:cb:a1:a7:da:21:1b:da:9e:75:30:37:e6:3c:
9a:3a:b1:88:dd:e7:18:8c:cb:dd:65:25:ec:f9:53:77:06:45:
39:bf:4b:29:34:97:70:dc:00:7c:db:e2:17:e4:87:3a:cd:c8:
a6:46:67:7d:cb:5b:99:e6:0f:b9:1d:3a:d4:45:db:58:ca:03:
cd:b6:dc:7d:e8:8c:2b:6a:86:ee:80:ca:72:f0:77:5c:03:f3:
ee:65:c4:26:52:48:da:29:3f:27:a5:10:a5:51:35:75:cb:5c:
d9:cd:e7:86:4f:73:57:91:74:b2:ee:ed:86:a4:ec:4a:11:32:
54:0d:44:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:38:17 2025 by rpki-client