Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
File: J4dqqRe20B2U_yVmKwj7IT8P570.mft (raw, json)
Hash identifier: hRSjtuCJJSxhykf/UHrbk1b8wMpPRBHms5traBk0O80=
Subject key identifier: 00:20:BC:33:8D:AD:DE:13:2A:88:27:79:F9:A6:7A:4F:92:6D:01:6D
Authority key identifier: 27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
Certificate issuer: /CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Certificate serial: 0199180A15D96F36ABEEAFB4CDD05A5CD04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
Manifest number: 0FF8
Signing time: Fri 05 Sep 2025 04:02:17 +0000
Manifest this update: Fri 05 Sep 2025 04:02:17 +0000
Manifest next update: Sat 06 Sep 2025 04:02:17 +0000
Files and hashes: 1: J4dqqRe20B2U_yVmKwj7IT8P570.crl (hash: uVJvXkKGmt8wzv7c1O6IflGCswKNvaSdg7sTw/QGMVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:15:d9:6f:36:ab:ee:af:b4:cd:d0:5a:5c:d0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27876aa917b6d01d94ff25662b08fb213f0fe7bd
Validity
Not Before: Sep 5 04:02:17 2025 GMT
Not After : Sep 6 04:02:17 2025 GMT
Subject: CN=0020bc338dadde132a882779f9a67a4f926d016d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:68:0d:a8:39:bb:b4:d7:e9:cf:e2:69:45:
f0:ad:59:d6:53:97:50:e0:85:9f:64:f2:ad:79:24:
f0:a2:1c:3e:ea:9b:db:00:73:8d:65:54:2f:38:06:
6c:cd:56:d1:20:02:60:b8:d3:a1:64:d9:f1:96:cd:
48:a7:29:6c:ff:f9:99:bf:21:ee:58:4d:82:65:7f:
69:61:3b:0a:70:ec:b7:1d:61:3f:00:0b:63:d1:a3:
cf:62:38:4f:58:e0:fc:43:2a:76:97:c4:27:bb:5b:
9a:02:fb:72:5d:1e:6f:d5:e4:41:bb:a8:38:7b:f6:
a0:7c:00:f5:86:b2:a3:d8:59:20:d9:7a:3a:8f:d5:
1b:23:9d:17:08:5c:a3:ec:f6:0d:5e:10:7b:e4:8a:
2a:4f:a7:1c:2b:e9:8b:d1:57:1a:5a:c3:0f:3e:53:
ab:f9:a0:e6:8c:cf:cd:a9:48:34:8a:ba:01:5c:d9:
84:c9:f1:e8:95:85:6e:9d:2c:64:eb:d7:73:f5:fe:
68:96:6b:56:02:82:42:d3:48:be:93:4f:a4:64:a9:
7a:84:c6:a3:05:75:fb:c8:a3:f9:df:63:74:2b:76:
41:f2:6f:d9:9e:cf:47:75:5f:22:86:24:34:6b:c4:
9a:26:7e:eb:e9:b3:2b:39:20:f8:08:54:55:db:75:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:20:BC:33:8D:AD:DE:13:2A:88:27:79:F9:A6:7A:4F:92:6D:01:6D
X509v3 Authority Key Identifier:
keyid:27:87:6A:A9:17:B6:D0:1D:94:FF:25:66:2B:08:FB:21:3F:0F:E7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4dqqRe20B2U_yVmKwj7IT8P570.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4b37db-042c-4041-8797-f0a7a4c58673/1/J4dqqRe20B2U_yVmKwj7IT8P570.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c9:ea:b6:69:b2:7c:b4:cb:a4:dc:86:37:26:66:f7:e3:e0:
72:5d:3b:1f:7e:6e:54:a5:c8:df:f9:5b:2c:81:24:8e:5f:0e:
02:00:a9:3b:b4:61:8d:fe:55:cf:61:45:7d:e3:3d:a3:35:01:
5f:69:42:a4:f4:ce:32:5f:9d:64:f9:6e:14:fb:09:6d:8e:46:
86:20:9c:ba:7d:1e:88:04:79:e0:28:02:7f:97:ad:a1:e5:a0:
df:7b:48:36:53:83:e7:3c:fa:43:33:5a:d9:33:14:fe:26:17:
d5:df:09:80:c2:6a:45:b8:8c:f0:f9:af:12:26:93:c1:d4:e2:
92:d5:1f:92:62:6c:4b:83:33:e2:1c:4c:92:8a:8c:3c:94:50:
1d:fb:bd:4f:75:18:86:d1:8d:52:ea:82:55:c7:e6:c8:95:6d:
f2:b2:07:02:16:cb:b6:ec:7e:2a:d9:98:21:09:a5:82:cb:4b:
65:82:45:f1:7f:4e:94:b7:f0:7e:10:5b:3e:1a:62:e7:86:c4:
c3:8b:be:a1:3b:a4:a8:90:61:6b:51:d4:85:97:07:e0:9b:95:
29:96:2c:74:eb:9b:1d:97:8d:45:40:14:bd:bb:c6:6f:e2:23:
ba:59:48:65:79:64:8e:6c:09:10:8f:97:14:a0:9b:ff:ed:62:
90:71:25:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYChXZbzar7q+0zdBaXNBPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODc2YWE5MTdiNmQwMWQ5NGZmMjU2NjJiMDhmYjIxM2Yw
ZmU3YmQwHhcNMjUwOTA1MDQwMjE3WhcNMjUwOTA2MDQwMjE3WjAzMTEwLwYDVQQD
EygwMDIwYmMzMzhkYWRkZTEzMmE4ODI3NzlmOWE2N2E0ZjkyNmQwMTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQVoDag5u7TX6c/iaUXwrVnWU5dQ
4IWfZPKteSTwohw+6pvbAHONZVQvOAZszVbRIAJguNOhZNnxls1Ipyls//mZvyHu
WE2CZX9pYTsKcOy3HWE/AAtj0aPPYjhPWOD8Qyp2l8Qnu1uaAvtyXR5v1eRBu6g4
e/agfAD1hrKj2Fkg2Xo6j9UbI50XCFyj7PYNXhB75IoqT6ccK+mL0VcaWsMPPlOr
+aDmjM/NqUg0iroBXNmEyfHolYVunSxk69dz9f5olmtWAoJC00i+k0+kZKl6hMaj
BXX7yKP532N0K3ZB8m/Zns9HdV8ihiQ0a8SaJn7r6bMrOSD4CFRV23W4sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAgvDONrd4TKognefmmek+SbQFtMB8GA1UdIwQY
MBaAFCeHaqkXttAdlP8lZisI+yE/D+e9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRkcXFSZTIwQjJVX3lWbUt3ajdJVDhQNTcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80YjM3ZGItMDQyYy00MDQxLTg3OTct
ZjBhN2E0YzU4NjczLzEvSjRkcXFSZTIwQjJVX3lWbUt3ajdJVDhQNTcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80YjM3ZGItMDQyYy00MDQxLTg3OTctZjBhN2E0YzU4Njcz
LzEvSjRkcXFSZTIwQjJVX3lWbUt3ajdJVDhQNTcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8nqtmmy
fLTLpNyGNyZm9+Pgcl07H35uVKXI3/lbLIEkjl8OAgCpO7Rhjf5Vz2FFfeM9ozUB
X2lCpPTOMl+dZPluFPsJbY5GhiCcun0eiAR54CgCf5etoeWg33tINlOD5zz6QzNa
2TMU/iYX1d8JgMJqRbiM8PmvEiaTwdTiktUfkmJsS4Mz4hxMkoqMPJRQHfu9T3UY
htGNUuqCVcfmyJVt8rIHAhbLtux+KtmYIQmlgstLZYJF8X9OlLfwfhBbPhpi54bE
w4u+oTukqJBha1HUhZcH4JuVKZYsdOubHZeNRUAUvbvGb+IjullIZXlkjmwJEI+X
FKCb/+1ikHElew==
-----END CERTIFICATE-----
Generated at Fri Sep 5 07:36:23 2025 by rpki-client