Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
File: Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft (raw, json)
Hash identifier: 8VO476R+ZFNtbAUXSD1hXZZ9kDnnf0/n+OiVMvcvKdA=
Subject key identifier: 9A:16:2E:88:55:58:7A:AA:A1:D0:62:73:F5:6E:E9:62:9C:0B:D3:46
Authority key identifier: 27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
Certificate issuer: /CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Certificate serial: 01984B8A3D8E5471F8A6A1339C57F1381889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 11:00:07 +0000
Manifest this update: Sun 27 Jul 2025 11:00:07 +0000
Manifest next update: Mon 28 Jul 2025 11:00:07 +0000
Files and hashes: 1: Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl (hash: LS2qhMSmhrlT2ycT5MLdAsf7tbq2ll0iOwxaydhqYSo=)
2: RfXdB1uHqTBN6RI4Ei6Oa090sJU.roa (hash: dQnKrWhdakZ+384uTWhQC1swu7fczbqA0NfqM/pjIIQ=)
3: wtfqM181rNTZILTtZZuVyGYsV2g.roa (hash: jL1T6NkOiM+9LzgY51xQQ/S9ZQ9hPL5ZNlX1CHentpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:3d:8e:54:71:f8:a6:a1:33:9c:57:f1:38:18:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271d84369c155055ad9bd5b471558d3fa7b109d2
Validity
Not Before: Jul 27 11:00:07 2025 GMT
Not After : Jul 28 11:00:07 2025 GMT
Subject: CN=9a162e8855587aaaa1d06273f56ee9629c0bd346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:9e:82:c5:66:1d:30:60:99:56:c5:66:c7:
46:ab:2f:a5:c9:4c:19:39:67:ce:2c:4c:38:29:af:
ad:c3:9d:01:df:3b:68:93:3e:36:24:06:5d:0a:a1:
4c:e6:81:8d:7b:59:3f:0f:3b:d2:dd:17:ab:c9:47:
45:a1:2c:a3:a1:5c:58:6c:ce:04:ed:27:78:b6:76:
b4:b9:af:b2:33:f4:90:78:a5:77:20:6a:1d:84:ce:
39:7e:c2:e0:ee:10:14:9b:89:9a:e9:6f:0d:61:64:
96:b0:8a:27:cd:8a:a6:85:06:fb:61:bb:fd:46:7c:
ea:0b:b2:87:ea:54:77:dc:3c:d0:5e:2d:a0:26:29:
c8:76:c5:e5:7a:cd:27:5a:22:bf:6b:2b:79:fd:8a:
d7:45:c4:19:06:84:2f:d1:aa:a9:90:8e:ad:05:d1:
5a:50:0f:aa:64:5a:4d:89:2a:0a:99:af:1a:86:46:
16:2c:00:17:66:fc:53:2f:2b:63:5d:a8:b2:b0:48:
7c:45:ab:a9:27:01:15:43:d5:4b:ff:65:48:8f:cb:
41:7f:c6:40:c7:83:27:47:01:b0:39:74:d1:73:f6:
e7:d8:fb:6b:8f:03:51:4c:ec:cc:49:2a:4b:f7:32:
03:4f:0c:f8:87:e2:df:b5:a4:de:e5:4e:24:79:13:
17:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:16:2E:88:55:58:7A:AA:A1:D0:62:73:F5:6E:E9:62:9C:0B:D3:46
X509v3 Authority Key Identifier:
keyid:27:1D:84:36:9C:15:50:55:AD:9B:D5:B4:71:55:8D:3F:A7:B1:09:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx2ENpwVUFWtm9W0cVWNP6exCdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a32aba-e9c7-40ea-8162-91494ac3b6d5/1/Jx2ENpwVUFWtm9W0cVWNP6exCdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9c:14:31:24:48:ec:92:31:24:b1:43:17:f2:79:b8:97:60:
16:bb:6c:f8:5c:9c:00:21:d1:37:bc:ec:ab:de:d9:3d:02:57:
ef:30:a0:b6:af:6d:c6:6c:94:9c:11:90:9b:eb:e1:b6:ca:af:
d3:b8:03:0b:df:38:d2:ae:f1:64:0b:57:c5:1b:da:64:07:b1:
ef:7b:0c:87:b7:6f:33:91:6a:d2:41:77:a6:52:d9:28:ba:1f:
bd:9d:16:c0:c2:fb:3a:9b:90:f9:52:36:e6:5c:77:c1:60:64:
a5:d8:48:97:7d:dc:9b:68:af:11:6c:ce:a3:ab:47:5c:12:97:
86:63:56:83:8c:c5:cf:04:44:e1:9f:4c:2b:ee:3a:94:db:98:
46:cf:f1:12:3d:f7:a0:7c:f4:9f:2a:2d:05:47:0f:e8:30:ef:
02:d8:f9:1b:c1:ed:39:02:98:0f:79:09:bf:58:c4:5b:aa:73:
11:0f:78:88:88:8b:65:2a:f2:33:94:40:f4:21:cd:b5:c5:0e:
94:8a:a8:18:7e:4d:f6:97:8f:7d:93:dc:87:1e:41:e8:5f:c6:
b9:8a:6e:dc:16:00:dd:34:19:34:91:29:79:46:b5:69:1e:4b:
c3:8a:e5:7b:86:08:21:f9:3d:22:8f:9f:fc:e6:15:99:21:94:
d6:f8:be:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:06:03 2025 by rpki-client