Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: dJofGgluAVvjhV3G3VXp55nhfTin7KAZfUh2r1lnsYQ=
Subject key identifier: 9A:83:83:D9:9C:A3:37:18:EF:81:03:D8:03:B5:75:F3:1D:A8:E5:DF
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 01974A436F11B89356299DC4235E02A52BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 12:00:22 +0000
Manifest this update: Sat 07 Jun 2025 12:00:22 +0000
Manifest next update: Sun 08 Jun 2025 12:00:22 +0000
Files and hashes: 1: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: 55B3QAHTnGB8CnjSVdE9C6ovj42DgcQ0WGEM37ifxdQ=)
2: aaN-bs2N1cRQu6wVRlnpd2mwkBQ.roa (hash: /bC3V57krNUgmm/Cc9N1e1boJHyImaptM9rUrHdc9Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:6f:11:b8:93:56:29:9d:c4:23:5e:02:a5:2b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Jun 7 12:00:22 2025 GMT
Not After : Jun 8 12:00:22 2025 GMT
Subject: CN=9a8383d99ca33718ef8103d803b575f31da8e5df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:5e:35:f9:c4:b6:22:a8:af:d2:8e:a4:e6:
ce:56:11:56:4d:65:24:78:8a:51:85:c4:4a:d3:59:
99:31:64:73:8d:84:43:4c:53:9b:67:54:8e:a4:a8:
c8:5c:73:86:d8:ce:34:54:81:75:8e:06:1c:ab:76:
ec:b8:77:de:0c:da:00:f2:d1:4a:a4:20:19:ad:54:
5e:26:05:bd:0c:70:c6:54:0d:d2:16:23:72:f7:dd:
82:e2:9d:0a:7a:ea:6c:45:7e:70:66:72:21:3a:62:
7a:1f:5f:62:4c:d2:85:0b:56:83:9c:86:d5:0d:86:
37:30:42:e6:21:2d:46:7d:d8:47:55:a2:1e:7c:b3:
73:e8:c9:2a:2c:db:b6:5d:db:a1:35:5c:6b:7f:54:
7c:80:13:af:19:c6:2b:61:2c:b3:00:f0:7e:e6:a9:
55:6f:11:c3:36:dc:1f:89:33:6e:b2:b8:a9:34:3a:
19:b4:a7:e3:ac:32:27:f5:b2:cf:d8:8d:6f:8b:0c:
5d:6e:b1:34:7f:02:91:04:12:e0:87:47:99:0d:a7:
0d:68:a9:df:ae:23:bd:73:f0:68:e0:36:75:16:98:
4e:6d:c2:37:dd:9f:83:bb:fd:03:ce:cf:99:55:ba:
04:5f:88:22:ad:05:13:2e:aa:ca:35:dc:8d:92:9c:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:83:83:D9:9C:A3:37:18:EF:81:03:D8:03:B5:75:F3:1D:A8:E5:DF
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:30:30:19:0d:16:51:66:03:6f:da:72:58:d1:49:97:0e:7b:
f2:05:e8:da:da:90:4a:c4:3c:db:6f:f7:8b:c5:b5:68:a6:21:
dd:db:66:18:e4:ea:30:32:74:b6:91:0e:25:41:8f:44:88:7b:
75:c6:b7:83:5a:14:13:c6:61:e0:67:18:bc:a3:9f:3e:e3:5f:
d6:b1:40:44:9b:46:68:d6:5f:5d:3c:4c:ae:a2:fd:12:a7:8a:
ce:8d:1d:93:09:f0:a0:e5:fa:8a:4e:21:3d:24:9f:be:17:68:
66:0b:3a:bd:f7:2f:97:a4:01:81:41:5e:f7:06:d6:68:86:10:
22:d9:68:1d:1a:99:9b:d3:ab:63:81:29:4b:81:7d:56:cf:51:
a7:d2:ce:e6:8d:d6:50:3b:b8:af:9d:9e:95:6d:4f:f3:98:75:
64:04:23:d4:2b:2a:d7:60:f2:e4:64:30:d1:36:2f:65:ea:4c:
2f:b8:0b:b3:de:2f:67:f7:bb:84:8c:33:6e:c5:29:fb:96:0a:
8d:3b:9e:ef:be:de:4d:c6:8c:e1:d4:93:07:07:72:bc:b5:83:
05:a7:a0:38:7a:fc:9e:33:2c:47:2a:d3:1e:98:18:bb:bc:33:
4b:6d:30:fc:53:12:8a:ef:58:78:fb:fa:12:32:6c:28:d9:b8:
01:50:38:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:35 2025 by rpki-client