Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
File: J_8gRAummKTcBDm8F5-zOj7hzJU.mft (raw, json)
Hash identifier: P4g4u5m1rvpR9wDRZ3Sp6x9MQvG0pmVAOUPeTqTZpCo=
Subject key identifier: 19:CC:7B:C3:56:5F:2A:A8:3B:A4:D4:D0:64:9E:2A:F4:2B:AA:89:1A
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial: 01974A7ACD099F4EC27A1425DACDE9E0D868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
Manifest number: 0C53
Signing time: Sat 07 Jun 2025 13:00:51 +0000
Manifest this update: Sat 07 Jun 2025 13:00:51 +0000
Manifest next update: Sun 08 Jun 2025 13:00:51 +0000
Files and hashes: 1: J_8gRAummKTcBDm8F5-zOj7hzJU.crl (hash: qewBLTbglIlrI9qXcphywHRzbLxOv6GYCAyyyAr4Vlk=)
2: _tUXooY9b06bDKDjgo1P9zjilGI.roa (hash: eyE2Sp1NPUfSOv01mHhVH2OIahlIo+oZSctInWb+NT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:cd:09:9f:4e:c2:7a:14:25:da:cd:e9:e0:d8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Validity
Not Before: Jun 7 13:00:51 2025 GMT
Not After : Jun 8 13:00:51 2025 GMT
Subject: CN=19cc7bc3565f2aa83ba4d4d0649e2af42baa891a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:a4:25:e2:31:d2:90:a1:bb:57:5a:a1:ce:
fa:3a:3e:18:e9:bd:a9:45:2b:65:5b:5c:83:67:68:
05:f7:7f:42:8c:c3:76:1d:99:8d:21:01:4b:67:4f:
dd:fe:39:c0:ab:9b:bf:0b:fb:a5:b6:4a:17:92:a0:
b5:52:29:7b:6d:f0:86:6f:90:d5:28:7d:69:c2:4d:
4e:2a:66:25:2e:25:0b:30:58:99:c7:cf:19:b4:2a:
04:04:5f:92:81:5e:46:05:04:22:7d:04:92:9d:6a:
c9:91:dc:cf:8a:b1:97:6e:07:0e:d5:37:c5:6b:8b:
17:c2:08:b7:ff:44:cf:97:fd:8e:5c:72:2c:6a:f0:
e2:be:ec:55:ce:65:20:b9:49:13:27:39:90:06:71:
f2:a8:fc:72:48:e4:a8:a6:8c:fa:2a:6c:7e:46:00:
42:c0:09:ee:da:50:34:7d:b6:32:d5:14:31:61:35:
88:7c:5c:f4:fc:a1:59:00:ab:21:dd:a3:5c:4e:a1:
7a:3e:c0:34:25:c7:38:18:60:ff:37:18:55:37:9a:
27:52:f9:ac:82:76:f9:c6:e1:15:28:70:16:b9:9b:
90:90:2e:fd:3e:ec:71:59:80:01:be:61:7d:6a:89:
c0:18:40:41:1f:58:50:21:21:c0:26:41:1e:90:21:
77:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CC:7B:C3:56:5F:2A:A8:3B:A4:D4:D0:64:9E:2A:F4:2B:AA:89:1A
X509v3 Authority Key Identifier:
keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ca:cd:69:64:8a:15:1e:37:06:ea:66:00:2b:8f:b3:a8:f5:
46:fa:51:64:f3:d0:3c:40:98:2f:91:c8:16:5f:54:d3:08:bd:
cb:6e:d5:55:07:b7:eb:3b:67:70:c7:2c:90:51:01:42:85:19:
d7:ef:bd:6a:e3:5b:17:19:f6:62:59:0c:57:f7:ea:c2:06:18:
7b:9c:1c:b5:f0:13:61:19:aa:6d:0a:f7:8a:89:bd:b3:13:ab:
00:48:3e:58:fe:48:9a:e5:5f:0a:a4:78:4e:f6:ab:2b:3b:f7:
13:e7:c8:7b:70:6f:f1:18:87:c0:77:09:65:76:6b:62:0b:94:
aa:99:24:81:7e:d7:36:f9:eb:2a:85:3b:c0:61:7e:75:24:66:
89:75:e4:0b:a1:4c:5e:d5:26:bf:93:c8:ad:f3:04:9b:65:10:
71:99:66:07:36:a5:66:4a:b2:2d:79:95:70:d5:43:83:83:fb:
b0:16:50:11:c1:be:6b:36:14:98:b6:1f:2a:07:ac:6f:37:f3:
8b:28:98:13:08:86:f9:56:fc:2e:45:3d:82:0b:af:95:7f:e0:
7e:61:5a:72:8a:74:7f:64:df:49:05:61:6a:18:a6:2c:84:f4:
2d:9c:8f:c7:cb:24:5e:77:3d:23:66:a8:c8:2c:6f:02:0f:14:
a2:58:68:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:44:36 2025 by rpki-client