Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
File: J-cRzjQCblevMpDH3izSHcZx4Pw.mft (raw, json)
Hash identifier: +BK8LTagwRv3A98SxINpU40bWgqJr+s8z/FBKACtWqY=
Subject key identifier: E1:21:BD:57:57:AD:5C:E1:5E:AF:BB:F8:2B:8D:06:89:03:79:C8:33
Authority key identifier: 27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
Certificate issuer: /CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Certificate serial: 019855A0EF1814053B37370C7F5450055924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
Manifest number: 160A
Signing time: Tue 29 Jul 2025 10:01:06 +0000
Manifest this update: Tue 29 Jul 2025 10:01:06 +0000
Manifest next update: Wed 30 Jul 2025 10:01:06 +0000
Files and hashes: 1: J-cRzjQCblevMpDH3izSHcZx4Pw.crl (hash: tSMl3XOlBpJuPXNB/soCD6as7J7RUS3CMl8p0NERhr4=)
2: cSxqzHQIFX03E67QT7FwyB0-2wc.roa (hash: ehpsqzEAcx4o5Hfss771kB3qGbR5m4ewO+AFeZ/9pUw=)
3: d1pbdA__eUq65yVNaUqfoJfF1gA.roa (hash: GBeDmf/sEIKh081o/6CjC+lT/hastrtkWuFWWekc6pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:a0:ef:18:14:05:3b:37:37:0c:7f:54:50:05:59:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e711ce34026e57af3290c7de2cd21dc671e0fc
Validity
Not Before: Jul 29 10:01:06 2025 GMT
Not After : Jul 30 10:01:06 2025 GMT
Subject: CN=e121bd5757ad5ce15eafbbf82b8d06890379c833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:41:f6:de:50:14:77:86:83:4e:d1:08:d3:a7:
e9:29:46:24:4d:ca:ac:93:a7:b8:b9:d0:f3:6d:33:
c9:7a:fc:d6:35:33:31:23:ee:28:d5:7d:b4:66:8e:
11:cc:af:14:e6:91:bb:a2:f1:6b:b6:4c:94:65:5d:
10:13:36:0c:1f:d4:d4:e9:89:35:84:a5:f3:3e:94:
6d:d4:e8:0e:c9:e4:70:6f:1f:54:0d:10:a3:aa:c4:
3d:2e:ee:0a:16:a7:d5:32:61:ba:68:13:cd:60:ca:
bc:8a:02:7a:65:1a:df:e9:4e:c0:de:cc:a8:62:52:
10:e3:01:2e:0e:4d:99:bc:63:c8:8c:50:c4:be:c3:
1b:c4:c9:ce:58:9c:df:00:1d:3f:f8:68:c8:47:54:
23:f8:14:66:10:00:d1:85:af:4e:c0:69:14:ab:f4:
77:59:68:d8:0c:bf:70:fc:79:29:86:31:b5:14:2a:
17:09:58:f7:c1:8b:4d:4a:f6:f9:46:31:df:f5:bd:
4a:80:6a:d7:f0:f3:da:df:8a:d8:94:dd:47:af:de:
34:3a:e0:f4:ea:a9:24:84:ff:1d:11:85:05:31:7f:
7b:17:29:8e:84:49:6b:db:ef:93:37:98:db:4f:e8:
2c:14:6d:28:0f:90:c0:ee:87:34:60:e9:d3:35:29:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:21:BD:57:57:AD:5C:E1:5E:AF:BB:F8:2B:8D:06:89:03:79:C8:33
X509v3 Authority Key Identifier:
keyid:27:E7:11:CE:34:02:6E:57:AF:32:90:C7:DE:2C:D2:1D:C6:71:E0:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-cRzjQCblevMpDH3izSHcZx4Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0f9-24a4-46fd-8042-b72e5fef886a/1/J-cRzjQCblevMpDH3izSHcZx4Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:78:2e:65:4d:29:12:2c:72:75:d3:d9:40:c6:79:e5:1a:fa:
e0:91:c9:46:fe:4e:41:9b:99:33:e0:6f:bf:f6:9e:63:7f:da:
02:e6:fe:99:62:ea:72:94:39:3b:cc:d0:ee:2a:6d:e8:bd:79:
87:21:1e:62:e5:8e:0b:8c:7a:16:2c:93:11:85:3a:4a:d0:66:
58:42:61:52:6e:f1:73:a3:5b:6b:a9:db:8f:92:ce:b4:01:8f:
ad:fa:fe:af:37:43:be:9c:ec:41:d0:55:89:f7:d0:e2:c0:2e:
8e:4a:a8:f0:33:bd:53:07:61:ee:5b:f6:fc:42:93:d2:6a:20:
93:7f:50:ab:8b:16:4b:52:0f:8e:d8:7a:3d:6c:db:c0:27:9a:
b1:01:42:bc:ae:44:d9:a3:8a:92:8b:ad:51:9f:74:3e:66:f0:
7d:2a:8e:9c:6d:b4:4e:6a:06:60:0f:6b:d0:89:8c:2b:00:77:
24:d5:04:dc:0d:2f:c2:09:f1:fa:93:45:dd:6a:1b:37:41:d9:
c4:9e:69:15:41:ed:b5:fd:f8:bc:f2:b5:c3:8f:4c:48:0a:27:
40:5b:01:fd:a3:b9:74:1a:30:ac:f4:f7:a0:5c:25:ea:a9:ee:
da:16:1a:43:7e:49:c6:a8:36:63:31:54:3f:60:70:6b:a1:f0:
1b:b3:76:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:07:34 2025 by rpki-client