Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
File: J7JQwAtGuhgF8v5fanfo_-X-J3g.mft (raw, json)
Hash identifier: ZjEEt7l0XaV/bqi5Tll1CjZx+VSpzK/UQHq0AoZDkcY=
Subject key identifier: FE:F6:AA:28:78:55:3F:E2:1C:46:2E:5A:45:1C:9B:51:49:63:B3:3A
Authority key identifier: 27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78
Certificate issuer: /CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778
Certificate serial: 019921E73595613ACD10C0163B85CA2626CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
Manifest number: 017E
Signing time: Sun 07 Sep 2025 02:00:24 +0000
Manifest this update: Sun 07 Sep 2025 02:00:24 +0000
Manifest next update: Mon 08 Sep 2025 02:00:24 +0000
Files and hashes: 1: 2Xuz_XQe5kxj9Ta-txXKOZzo3-8.roa (hash: 4cAudEOa7B6QV2XVnZGGI65WlCpgsFSmPdilxFuHyN8=)
2: J7JQwAtGuhgF8v5fanfo_-X-J3g.crl (hash: imKh78RC6HxsQ4qdvTC0t2nXVqv0laH2+Js2gNhjINg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:35:95:61:3a:cd:10:c0:16:3b:85:ca:26:26:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778
Validity
Not Before: Sep 7 02:00:24 2025 GMT
Not After : Sep 8 02:00:24 2025 GMT
Subject: CN=fef6aa2878553fe21c462e5a451c9b514963b33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:8a:59:5d:37:f8:45:db:4a:ae:f8:9f:2f:
f2:75:01:85:96:8a:19:c1:4f:b2:af:f2:53:e7:f7:
3f:84:da:ab:c7:ef:29:2e:26:21:11:80:0a:b6:fe:
a2:97:4d:7c:cf:3a:7f:2c:54:5a:fc:5d:ee:4f:f2:
00:23:7c:64:ad:d5:b5:19:c6:e3:a6:00:b1:11:cf:
e9:2f:bc:56:59:ef:62:3a:aa:e1:b6:5c:be:75:32:
dd:52:80:84:8c:f2:01:c8:1a:6b:52:0d:94:90:0e:
3b:a5:1c:f2:7c:96:8b:7e:f8:a0:d9:b5:0c:6c:09:
45:3c:4b:1a:b3:12:52:64:b0:1a:2a:98:06:84:64:
99:13:c9:88:4e:cb:8d:ab:f5:03:25:31:11:0d:6c:
94:c0:d0:d9:3b:7c:90:e6:8a:22:2b:ca:9d:a2:46:
b3:fe:0e:0d:2b:32:13:ff:11:83:2c:7a:b2:6d:15:
4a:a0:ee:80:e9:fc:94:f2:99:bc:54:7f:3d:40:ce:
56:0d:2f:c3:41:18:1b:3f:a8:8d:a9:eb:aa:47:a4:
e7:c2:15:96:35:36:0e:54:b1:e9:47:95:98:91:b2:
32:2b:73:8d:69:57:ae:19:ec:03:fe:2b:58:a9:f3:
c3:3f:41:dd:2c:9a:ef:b2:51:d6:e6:8a:39:c4:7c:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F6:AA:28:78:55:3F:E2:1C:46:2E:5A:45:1C:9B:51:49:63:B3:3A
X509v3 Authority Key Identifier:
keyid:27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:71:a4:9a:0d:10:92:04:3f:e7:15:f8:1c:1e:7b:62:04:67:
cb:01:8f:ad:e3:84:78:3a:e2:cf:42:9c:c2:fc:5a:af:bd:90:
8d:c9:01:66:0a:1c:35:d1:f9:1a:cc:b2:9e:68:22:5a:13:0e:
dd:12:67:8e:8a:e2:4c:5f:cb:2a:8b:52:9d:fa:b1:67:3b:45:
1d:00:97:05:d9:0d:d7:dc:50:55:a4:60:c9:6b:b3:16:57:74:
8d:c4:55:1f:e4:29:4f:2b:19:1b:87:f6:23:81:77:49:d4:ca:
cf:55:d7:13:b8:22:ac:ea:f2:c0:a3:bd:3b:17:74:76:26:df:
bc:8e:f4:a4:82:26:8f:cb:34:04:e3:ec:31:c6:7a:15:b2:3a:
68:b6:02:8b:7d:f7:30:02:08:ea:c1:14:d9:0f:bd:d9:44:42:
8e:03:a3:f4:14:08:6f:3f:4c:ae:58:d4:be:a7:1c:43:ac:5f:
32:90:4e:b6:a0:20:85:0e:6b:5d:8b:42:0c:91:c6:fd:2b:c6:
d0:f2:35:c7:f2:df:1d:4f:a1:34:a5:c3:7d:ba:e8:b4:d3:d4:
d8:e6:fa:3c:1e:6d:31:a3:47:49:d9:d4:bf:8e:31:02:76:91:
9b:3c:c3:32:e4:e0:28:4e:ae:5b:5d:db:10:d6:90:b5:e8:66:
fc:77:fe:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:25 2025 by rpki-client