Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
File: J0PbfuNKwtTtV49JXgCWy5iv9xw.mft (raw, json)
Hash identifier: sXaYRvSkejq2nwplQSBzzw9HIKUvn75eABltG2Nudek=
Subject key identifier: 57:4F:C7:5B:CC:0A:50:C7:C4:BA:0D:1A:81:18:FD:DE:DA:B3:CB:1C
Authority key identifier: 27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
Certificate issuer: /CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Certificate serial: 019845F6C80D374DAFB39C4895DE79F0B9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
Manifest number: 014A
Signing time: Sat 26 Jul 2025 09:00:57 +0000
Manifest this update: Sat 26 Jul 2025 09:00:57 +0000
Manifest next update: Sun 27 Jul 2025 09:00:57 +0000
Files and hashes: 1: J0PbfuNKwtTtV49JXgCWy5iv9xw.crl (hash: /MXPZqrrtcr+T7gy7b0I0DOMDrt5oeeordDBLplwlDM=)
2: dDAgjd5fwQ3cte1EAxZ7pLJLl0U.roa (hash: 2txr4+GD0XgpxhSLLq5aM5yNR187eckG+kO4tKZmm3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:f6:c8:0d:37:4d:af:b3:9c:48:95:de:79:f0:b9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2743db7ee34ac2d4ed578f495e0096cb98aff71c
Validity
Not Before: Jul 26 09:00:57 2025 GMT
Not After : Jul 27 09:00:57 2025 GMT
Subject: CN=574fc75bcc0a50c7c4ba0d1a8118fddedab3cb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a0:a1:8b:c8:97:0f:1b:aa:3e:a5:f2:ec:0d:
4a:e5:5b:22:0e:bd:bc:81:ae:09:55:db:c9:f9:40:
9e:af:78:ea:cb:ec:6f:2e:0e:4f:02:a8:0a:35:99:
ad:4f:6f:68:12:43:80:f1:ae:57:cc:ab:97:21:b7:
ce:4c:bd:e8:3f:34:fb:bf:fd:1f:72:91:c2:d0:2a:
1e:1d:a7:73:00:ff:53:7f:c1:a0:5b:1a:26:a3:ae:
02:0a:27:2d:cf:c8:f7:4b:f9:cb:bc:98:1f:a9:78:
40:63:ec:93:eb:d0:b0:1a:bc:94:3d:58:75:d8:52:
bf:f8:84:b5:aa:0f:5e:4b:3b:74:cf:43:80:fc:87:
c7:61:29:d8:88:94:44:52:6c:51:36:29:35:72:69:
7a:de:e8:ae:c2:35:19:14:86:87:d6:39:d2:e3:2f:
f4:f4:8f:a8:8c:81:b1:49:6f:03:8a:dc:49:93:2a:
a1:42:df:75:fb:e8:75:09:95:47:a9:66:2f:c4:ca:
5c:b6:da:bf:dc:96:a9:cb:81:e9:70:cf:2f:47:e8:
60:62:60:db:21:ed:fa:e8:1c:82:92:61:da:aa:3e:
35:07:cc:94:65:2e:c3:f4:1d:75:78:a7:13:8e:44:
22:ed:84:27:0f:8d:d4:96:22:6e:4a:4f:0a:c4:41:
6d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4F:C7:5B:CC:0A:50:C7:C4:BA:0D:1A:81:18:FD:DE:DA:B3:CB:1C
X509v3 Authority Key Identifier:
keyid:27:43:DB:7E:E3:4A:C2:D4:ED:57:8F:49:5E:00:96:CB:98:AF:F7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0PbfuNKwtTtV49JXgCWy5iv9xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2fbc67-d6f8-4ea4-bde3-53b31044ed5b/1/J0PbfuNKwtTtV49JXgCWy5iv9xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:dd:e0:4c:2a:88:34:2d:09:4a:43:47:1f:ba:55:0c:af:74:
2c:a6:46:fa:1d:71:d1:61:fd:6f:f2:da:fd:9f:eb:e3:24:6f:
c2:28:51:4b:01:90:9c:5c:7f:5d:54:eb:4c:75:3a:e7:bd:22:
4d:76:d0:8e:f9:de:d3:e1:49:71:97:9d:ee:75:7f:4e:46:f8:
ae:e2:d2:a5:e4:e9:07:0c:08:06:9a:de:80:11:8a:bb:10:90:
17:6f:63:78:c6:46:2a:30:5a:3b:cd:29:1c:92:43:5d:f9:3c:
3f:14:e7:75:a1:1d:ed:35:b7:e9:5d:d0:d8:49:ef:3b:a1:0a:
71:9f:47:22:de:9a:8e:40:68:6f:6a:7d:0d:8b:28:1a:3f:6c:
55:3b:b5:db:39:36:38:ba:fc:44:3a:0d:90:f5:50:3e:18:c7:
b5:b7:81:1c:e7:0c:11:3f:b5:5d:26:de:74:3d:fd:ab:e4:cf:
bc:92:cb:89:88:07:ae:04:c3:51:17:39:90:ba:5a:77:6a:45:
13:d8:b4:6b:f8:43:1d:de:a5:39:89:f9:4d:ee:29:c3:b4:96:
4f:93:ca:ba:8e:31:aa:78:be:70:52:b1:48:be:61:55:a9:cd:
26:30:b2:95:c4:75:40:c7:42:8a:b0:35:73:1f:ba:2d:6a:e8:
01:2b:54:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:06:02 2025 by rpki-client