Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: /4Tdm4JqUGJ+5229CPZ5O//P7G3uybduxFRLkHBeo+A=
Subject key identifier: AF:D9:21:7F:74:1A:E5:88:8F:CF:E6:21:AD:64:D2:0A:74:7D:8E:E2
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 019845892FA57F9356B4885F3F320155795D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 145F
Signing time: Sat 26 Jul 2025 07:01:15 +0000
Manifest this update: Sat 26 Jul 2025 07:01:15 +0000
Manifest next update: Sun 27 Jul 2025 07:01:15 +0000
Files and hashes: 1: 3WjmScxyPShGMsEmfTcZS4RZUd0.roa (hash: 5cWtsZDvpUp+XvqnrWOkzcAs96EsLhbvVP+8UGNRG5Q=)
2: Fi_TM4K4PYpSezLxC5qNEiPOZ3Q.roa (hash: DTiudzjdSu7JP8slciOiBe/Ykx5OQa6RusVSJBvKWj0=)
3: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: KOdgs9yKBYOwcOqh4zcMPVDSN5JcVEEBLxTsCQpl2q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:2f:a5:7f:93:56:b4:88:5f:3f:32:01:55:79:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Jul 26 07:01:15 2025 GMT
Not After : Jul 27 07:01:15 2025 GMT
Subject: CN=afd9217f741ae5888fcfe621ad64d20a747d8ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:97:db:7b:fa:87:ca:07:2d:cb:00:db:d3:
94:37:b9:94:83:16:e1:84:07:f9:68:23:74:dd:c9:
15:4b:b4:72:bd:2b:59:82:cf:85:1a:01:40:64:2b:
dc:4c:a5:14:35:9b:63:4e:ef:0a:e6:db:bb:70:28:
0e:0b:ac:63:9f:e2:2d:f2:0f:6a:a2:37:65:31:29:
83:4a:8d:ed:e1:0d:de:cf:80:ba:bb:55:6b:d5:0e:
58:28:33:20:fe:92:fc:28:72:23:04:27:b5:2a:f0:
80:5e:6b:16:bd:61:e5:19:3d:ed:4c:76:c4:c0:75:
da:2d:6b:c2:7e:d9:04:4a:8e:1b:fb:45:35:48:5b:
a4:6d:82:7e:d4:eb:64:6b:7e:53:c2:12:1a:e7:4c:
b2:ad:1b:29:28:e1:1e:74:08:34:f4:74:b5:dd:b0:
e4:14:c7:7d:5c:e6:86:6b:36:d5:dc:cc:40:d9:05:
7c:ef:10:e8:a2:5e:ad:6d:12:6b:03:75:8c:79:76:
23:42:04:5a:1a:80:4e:5d:c3:0a:d8:92:14:82:14:
2d:1c:bd:87:a2:5a:89:01:05:60:6d:6d:94:da:dc:
70:09:d6:2b:0b:8e:ab:7f:24:eb:85:75:74:8b:56:
76:00:5b:a8:90:64:8b:d4:c3:55:94:c5:50:b5:26:
eb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D9:21:7F:74:1A:E5:88:8F:CF:E6:21:AD:64:D2:0A:74:7D:8E:E2
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e1:9b:ec:b7:09:f3:2a:17:94:59:de:3c:d6:f1:0b:54:d9:
a7:f9:d4:05:ed:e4:b6:a3:3c:6c:7c:c8:6a:c5:8a:e8:74:84:
8b:b7:b2:89:13:53:a3:d9:50:f2:f1:27:db:f6:44:ae:2b:4d:
9c:bd:32:7a:a0:c3:d2:c1:0a:0c:97:df:90:ee:06:6f:31:c4:
02:51:9b:74:47:c7:21:33:d7:70:7f:68:dd:37:f5:4f:db:64:
8d:cf:21:af:cf:1c:38:bb:02:9d:10:b6:e7:f0:8a:08:8a:bf:
b4:d5:c6:8e:ce:ba:8d:91:03:24:65:7b:12:4b:33:04:8e:f5:
7c:d1:8b:d2:ea:76:78:0e:b5:38:86:56:ad:0e:43:77:4b:67:
f5:56:44:91:6e:2a:43:58:94:6d:8f:e1:b5:f4:40:b8:f2:5a:
fb:a5:a0:5b:a3:e7:05:fc:41:4c:fe:ad:9e:50:05:9e:50:b1:
00:03:6a:82:08:a7:6d:ac:58:87:a9:7e:83:33:86:2f:79:eb:
a0:67:e9:a5:4e:36:0d:78:86:9e:27:3b:5d:a1:fb:11:38:fa:
ce:b0:6b:54:0a:4c:f5:09:33:04:e2:39:f2:a1:a5:a6:95:7f:
d8:de:b6:36:47:31:81:b3:19:68:09:d2:80:a6:7d:a0:ec:cc:
ba:f3:e8:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:18:30 2025 by rpki-client