Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
File: JwBs1Oq8VbNskwifFND6bg-gzG0.mft (raw, json)
Hash identifier: nH3zP2BSSNf0IrXE0kCeciflIUZytymeQscWsaRLfKQ=
Subject key identifier: 28:44:2A:4C:32:8E:F7:11:43:50:CB:99:64:34:3C:5F:A5:7D:37:42
Authority key identifier: 27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
Certificate issuer: /CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Certificate serial: 01984A40C8ADE5D288F4C37FD73C057E477E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
Manifest number: 1102
Signing time: Sun 27 Jul 2025 05:00:16 +0000
Manifest this update: Sun 27 Jul 2025 05:00:16 +0000
Manifest next update: Mon 28 Jul 2025 05:00:16 +0000
Files and hashes: 1: JwBs1Oq8VbNskwifFND6bg-gzG0.crl (hash: LKy0fPpBLWz0shttkvKdPZMwJdNLWWxaeSlybkf8Iyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:c8:ad:e5:d2:88:f4:c3:7f:d7:3c:05:7e:47:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27006cd4eabc55b36c93089f14d0fa6e0fa0cc6d
Validity
Not Before: Jul 27 05:00:16 2025 GMT
Not After : Jul 28 05:00:16 2025 GMT
Subject: CN=28442a4c328ef7114350cb9964343c5fa57d3742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:29:49:1b:0d:fd:8b:df:30:cb:a2:1b:d6:75:
dc:b8:ef:a8:0f:17:62:80:ba:a9:6f:80:11:b3:69:
f4:ae:dd:23:7f:6f:91:5b:28:2c:0f:fb:74:9b:6e:
33:a1:07:80:ad:1d:fa:e3:ed:9e:2e:04:41:7d:52:
ec:48:97:e1:ab:cf:58:ae:b5:14:7b:d2:65:eb:f9:
48:24:2a:23:d6:c7:91:8e:ed:b0:cb:9c:c2:45:10:
d6:a4:be:ec:64:a0:3e:f9:56:1b:33:da:f0:b4:1b:
ef:ec:e0:16:ae:dd:20:6b:37:70:3b:8f:d8:f1:43:
6e:82:c6:5d:a8:5a:09:89:8f:1a:f3:d1:5a:01:31:
a1:ed:60:0f:16:64:33:44:d9:77:32:8c:c0:89:3d:
b5:16:8a:c8:6e:42:e7:7d:c9:de:40:00:3d:6c:b4:
bf:4b:f9:de:28:0b:29:cd:6f:d3:29:96:15:61:5b:
76:36:9c:7e:4f:a4:2d:5b:fb:7b:35:f2:ae:4e:fa:
3c:c1:8c:e2:6c:d7:d2:34:a0:c9:a1:ff:5e:b8:f9:
9a:40:90:ea:30:de:39:d2:d1:b3:82:62:ff:db:95:
df:c1:d9:ca:ff:95:c4:ab:a0:6c:af:63:e8:c7:93:
96:27:0c:cc:b4:68:13:f6:f1:61:ea:61:ba:3e:87:
3c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:44:2A:4C:32:8E:F7:11:43:50:CB:99:64:34:3C:5F:A5:7D:37:42
X509v3 Authority Key Identifier:
keyid:27:00:6C:D4:EA:BC:55:B3:6C:93:08:9F:14:D0:FA:6E:0F:A0:CC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwBs1Oq8VbNskwifFND6bg-gzG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b57081-e16f-47ce-bd98-dce128022ac4/1/JwBs1Oq8VbNskwifFND6bg-gzG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:02:f2:88:08:40:aa:23:03:69:ee:6f:7c:87:fc:62:1f:1d:
5d:f4:1a:65:c9:de:76:50:f1:e1:0f:13:9a:64:21:ef:f6:a2:
d8:1d:05:8e:6a:40:32:ca:da:bc:a8:f5:f4:2c:23:b2:35:3c:
7c:73:d2:a0:c9:d7:c1:d4:4b:de:45:cf:75:ce:50:1d:0f:e2:
ea:a6:ff:59:42:51:4a:b0:dc:46:ef:27:90:58:f6:f6:83:73:
00:a4:d6:cd:ca:02:bf:67:c7:de:69:02:b1:46:40:87:ae:b1:
4b:57:5a:8e:67:01:f4:3c:bd:2d:74:a0:b1:8b:d5:5e:c7:4a:
59:de:77:2e:d7:f1:ac:98:a0:ab:ac:cf:f4:d7:ac:e4:8d:cc:
38:e0:eb:3b:54:22:e2:bb:7c:8b:e1:24:e0:bb:0f:3e:0d:b6:
c3:ed:96:b6:82:14:f1:fa:80:eb:6f:45:99:29:73:2f:1d:7f:
b6:21:1d:ee:3b:e5:45:7b:aa:71:82:2c:88:88:85:7b:d6:7c:
29:51:da:c6:77:a9:82:40:d4:b2:bd:a4:8b:f7:65:96:83:7c:
ab:42:5c:c5:23:1b:81:4c:a2:77:ef:66:fd:1f:d9:10:4d:25:
26:84:20:d7:65:13:37:0d:6d:68:0e:66:2f:ce:5e:0d:c3:c5:
b2:00:03:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:23:00 2025 by rpki-client