Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File: J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier: s6eUecLcgHC6/SItEaN4Mn1uqZxBSJdyRs+Ma0STzyM=
Subject key identifier: B4:18:D6:6D:91:82:DB:87:35:71:11:5F:2A:59:F3:77:26:61:7C:81
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer: /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial: 019936EE7B50B02E0ABB29CBDFD49710B088
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number: 0D5D
Signing time: Thu 11 Sep 2025 04:00:22 +0000
Manifest this update: Thu 11 Sep 2025 04:00:22 +0000
Manifest next update: Fri 12 Sep 2025 04:00:22 +0000
Files and hashes: 1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: pLOiufEAGhv2VLDyy4uELv2VLllN2njjYha44MlOQfg=)
2: UEg2a8frOwQJ_ocv6mZt898VwKc.roa (hash: HhDZ6hinLTKa6qeDqW6QogtlJ6a4udPeZaa3rESZ/rM=)
3: zUk84pMkBH7qM-5eyE2RTVXesY8.roa (hash: 1Rye/GoMkKTXa8JBFflyaNlKfqeLYK+b0R1zK9MVT4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:7b:50:b0:2e:0a:bb:29:cb:df:d4:97:10:b0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Validity
Not Before: Sep 11 04:00:22 2025 GMT
Not After : Sep 12 04:00:22 2025 GMT
Subject: CN=b418d66d9182db873571115f2a59f37726617c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:46:2a:94:90:17:fb:8e:6d:24:83:98:da:09:
0f:d0:f8:39:08:45:d2:0c:a1:0b:ad:c1:19:85:fd:
19:42:2d:c7:5d:5d:a2:6c:ee:14:4a:1c:55:50:9b:
9a:71:e2:4c:78:95:15:01:b2:60:0e:3b:37:1c:1a:
fa:63:40:e5:57:2e:bb:4a:9d:49:cd:e3:1d:28:4a:
0e:7e:ce:b9:bf:9e:a2:f0:f8:d1:f0:44:9e:72:fb:
22:3f:e4:15:e8:e4:17:9c:a2:b2:7b:7f:03:f7:73:
44:f4:9e:21:66:62:41:fc:39:38:26:48:f4:73:84:
d1:d9:30:67:59:ec:dc:52:a0:af:23:85:eb:3b:5a:
cc:04:37:75:ca:be:87:88:40:f8:70:4c:10:20:a9:
f1:95:1c:8c:54:61:f1:57:9d:5c:ff:53:fa:5c:a5:
7c:d5:25:41:6b:1e:28:c5:60:1d:ff:0f:e3:a4:b4:
8b:11:c2:ea:65:71:61:a0:1e:2e:f1:e8:a5:04:08:
0c:25:f8:9c:24:39:38:74:c1:3b:af:58:1b:05:7a:
61:73:0e:ad:19:a7:25:5a:8e:28:93:f9:0b:4e:07:
5e:bc:21:76:83:fe:d4:6c:66:8b:16:c8:fa:15:7f:
25:a4:a0:6a:5d:76:ad:85:5f:33:66:a0:6b:cf:4e:
02:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:18:D6:6D:91:82:DB:87:35:71:11:5F:2A:59:F3:77:26:61:7C:81
X509v3 Authority Key Identifier:
keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8a:29:b8:14:8f:81:f4:0f:84:8a:1e:dc:57:af:fe:94:a9:
9d:bf:b4:98:0c:74:17:01:67:a1:2d:58:1d:44:a9:8a:bf:a8:
8c:c0:b4:a7:a2:e5:b0:5f:e7:b1:35:f3:75:60:8f:0b:48:e4:
17:5c:d3:d9:e7:85:95:ca:b5:ba:c8:0a:67:07:af:ff:e9:0f:
2f:97:ab:08:d9:19:4e:07:8a:40:f2:27:e8:f8:e5:2b:6d:e0:
42:5c:59:7f:bf:a3:dd:b8:ce:78:e8:c4:09:b4:9d:8a:49:8c:
57:dd:ba:b0:da:da:2f:01:78:2f:0f:c8:87:cd:2c:99:63:7f:
65:ed:1c:c9:66:72:a0:1b:67:6e:c2:6d:de:f3:1f:ae:73:6e:
07:48:32:ab:50:df:a3:8a:44:fc:d5:01:c3:2d:cb:75:80:60:
c9:9d:76:8c:93:27:6b:16:36:39:2c:f5:cf:62:bf:0d:55:7c:
73:f8:d0:5f:94:9b:fa:2c:3d:b7:84:a3:a2:3b:62:d9:41:d9:
bc:1b:b4:fd:12:2f:83:1f:76:66:e7:a1:bb:9f:23:97:3b:ee:
f2:36:43:26:92:21:36:d4:1d:5d:be:cb:42:d4:cf:2b:18:00:
ae:03:0e:9b:2e:4c:a9:03:4f:7e:45:90:95:3e:11:04:cf:cb:
48:62:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 07:47:32 2025 by rpki-client