Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
File: J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft (raw, json)
Hash identifier: Ehc82DM6EAZWg7DwCkcnqPo6NkxGC0zV1mPBtaCVaKQ=
Subject key identifier: C0:75:EF:87:81:5F:41:5E:22:FB:AB:36:07:B3:13:C1:FF:91:8A:DD
Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
Certificate issuer: /CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Certificate serial: 019857217782C4448084C1E4B514ABA439F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
Manifest number: 160B
Signing time: Tue 29 Jul 2025 17:01:07 +0000
Manifest this update: Tue 29 Jul 2025 17:01:07 +0000
Manifest next update: Wed 30 Jul 2025 17:01:07 +0000
Files and hashes: 1: J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl (hash: 7eoXc2KTq2PnlzfTp5EXdOeB1a9z3gjLH8jr7s161Ds=)
2: hwA0UWKL_slMireOaLXKWCZKMxk.roa (hash: Cs+6QJ4Ir+A+/zhLEyGmKYQ1SWGWIXNvlkhllKogGis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:21:77:82:c4:44:80:84:c1:e4:b5:14:ab:a4:39:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Validity
Not Before: Jul 29 17:01:07 2025 GMT
Not After : Jul 30 17:01:07 2025 GMT
Subject: CN=c075ef87815f415e22fbab3607b313c1ff918add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:af:20:ee:c8:eb:11:ab:62:f8:85:cc:5d:f7:
71:21:ef:da:f0:06:d5:59:2c:ca:20:d7:56:ea:cd:
04:c9:eb:ff:e2:53:b3:0b:10:90:9f:54:72:02:b4:
9e:61:a9:ea:95:04:92:b6:bc:74:7d:58:14:77:85:
b3:7a:58:9e:93:85:bb:44:bf:ca:62:40:71:7b:41:
fd:27:a0:ef:84:16:1f:d9:4a:86:25:c1:e3:6c:88:
43:ce:3d:ee:b5:49:9c:e2:0f:be:9f:0a:0a:6d:3c:
4c:6a:f9:cc:db:2b:70:c9:46:ee:c9:31:9c:b0:84:
e4:05:6f:84:10:27:2d:19:ed:5a:aa:cf:fa:40:16:
a3:66:c8:92:42:8e:3c:30:47:94:ae:79:c3:9c:1f:
67:d3:5f:2b:39:54:f9:eb:a1:77:c6:32:c3:4a:c1:
5b:c1:09:87:3f:ba:cf:85:d3:af:cb:4c:13:9a:70:
d5:fd:88:b9:c7:d8:53:7d:15:76:06:59:1f:59:c7:
a8:1b:bb:60:2c:32:8c:3c:2e:da:1c:c6:70:9a:01:
26:9f:fb:1b:02:49:5e:44:c1:24:96:91:f6:86:89:
71:6e:22:1b:4f:99:dd:44:1b:4b:93:e2:f2:e8:bd:
ff:1b:dc:1c:24:12:a1:d7:fa:75:23:09:b7:22:77:
5e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:75:EF:87:81:5F:41:5E:22:FB:AB:36:07:B3:13:C1:FF:91:8A:DD
X509v3 Authority Key Identifier:
keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9d:2f:9d:16:48:58:e0:d8:c2:af:16:21:63:8a:22:db:86:
56:26:41:92:84:95:06:d9:61:b9:5b:0c:2c:64:8a:03:21:77:
43:cf:cc:8b:28:11:6f:e2:38:32:27:f0:17:46:1f:4f:ee:b6:
a7:13:44:82:9a:5f:a7:4a:5e:30:35:f8:de:a9:52:8a:5c:bb:
0a:cb:de:64:9a:ab:f0:42:62:67:59:c4:94:03:8e:73:06:3c:
bf:1b:58:33:ed:90:18:af:04:a1:a2:03:d5:55:37:ee:cd:63:
ff:b3:a8:5b:52:91:c4:b5:53:90:09:86:df:e0:6b:f4:3f:28:
ae:af:fc:4f:7a:c8:7d:45:20:46:b5:9f:69:8d:1a:7a:51:51:
31:dc:82:3e:e8:7f:e3:5b:4f:fb:20:42:fe:eb:e6:38:02:b6:
e8:8b:19:b1:2d:e4:b4:c5:07:59:77:e9:06:19:07:a5:20:06:
b4:15:68:e2:b6:43:7e:f8:ae:a0:dc:8f:a3:6b:d8:cb:27:16:
f6:f5:6a:a6:91:9c:0c:46:a1:00:b3:28:a0:c8:b4:d1:4d:0c:
0c:a1:b6:8e:14:e0:31:97:69:a9:ee:f9:84:28:f5:86:c2:a6:
4d:07:ef:32:50:4e:52:60:c8:44:cd:7f:30:c5:bb:1e:87:bb:
cb:9e:a3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 02:41:22 2025 by rpki-client