Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
File: J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft (raw, json)
Hash identifier: IbYDBd1tIDp3MjuHHYQdnBkWndlf+qHrMeZBwqE87lo=
Subject key identifier: 25:2A:04:CE:02:0D:89:54:72:A9:84:CA:83:82:6C:F0:FC:71:2F:14
Authority key identifier: 27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
Certificate issuer: /CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Certificate serial: 0199228CDF1442DA267618C67FBAB7D1CAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
Manifest number: 021E
Signing time: Sun 07 Sep 2025 05:01:21 +0000
Manifest this update: Sun 07 Sep 2025 05:01:21 +0000
Manifest next update: Mon 08 Sep 2025 05:01:21 +0000
Files and hashes: 1: J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl (hash: Y4Y6ME6ShlqQ4bAeshJJWJRV7w0m/CSE3AEAyUxJgI8=)
2: fTfqf3RzH3ibTJ1sVk6qwuCUTso.roa (hash: zZbWW91JqjxpGk5DcSBhXzXRcrXTOVjIQL0IYt57KX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:df:14:42:da:26:76:18:c6:7f:ba:b7:d1:ca:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Validity
Not Before: Sep 7 05:01:21 2025 GMT
Not After : Sep 8 05:01:21 2025 GMT
Subject: CN=252a04ce020d895472a984ca83826cf0fc712f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:25:23:f1:22:71:c9:bc:9a:58:fa:7b:0d:
4a:11:b5:9e:c9:c0:af:1b:3d:e8:af:6f:13:5c:47:
9e:b3:de:b5:ef:ce:2d:a3:68:b5:a2:00:7a:10:d0:
7b:1a:ae:c6:c5:04:01:ee:0e:0c:97:43:2d:33:01:
4f:19:e1:74:c0:9d:e2:9f:8b:7a:30:dc:20:c3:cd:
41:dc:1a:c4:8f:1a:32:3c:46:c6:a9:46:01:39:bd:
88:23:26:13:69:dc:54:c1:83:96:31:de:3f:43:47:
2e:f7:47:3a:ac:99:52:6e:a0:d4:9f:95:35:69:bd:
ba:ca:ea:ed:ff:3a:b8:19:83:fe:1d:3f:2e:36:c7:
9d:1f:a8:12:22:27:80:be:02:93:7e:a3:f4:99:ac:
dd:da:18:c3:c3:4d:12:d5:a5:8f:dc:a1:81:b3:84:
02:4f:9b:80:b1:32:69:e5:94:c7:b7:ac:c6:dc:f5:
4b:46:c6:ca:9b:16:bf:90:99:bf:a4:a8:e1:c8:17:
8c:46:ca:09:ca:1b:e6:bd:d7:54:9b:51:a3:b1:1f:
d2:0e:2b:94:27:21:3e:9a:fb:03:23:5e:f9:c1:7a:
cd:2e:8e:7d:3a:c2:b3:db:f8:c2:96:84:19:fb:8e:
d3:86:13:77:44:66:30:14:47:28:21:31:9e:8d:5e:
35:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2A:04:CE:02:0D:89:54:72:A9:84:CA:83:82:6C:F0:FC:71:2F:14
X509v3 Authority Key Identifier:
keyid:27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:19:b3:0b:5a:a2:6a:92:af:52:d1:c6:61:52:7b:17:76:a3:
54:57:3f:4c:48:14:9c:b9:a9:3c:fa:6d:5c:de:d0:81:23:38:
a4:89:0f:ed:36:aa:72:62:e9:f3:89:fd:ab:0a:b6:54:0a:3f:
80:a1:88:7a:6f:9f:29:58:27:c2:0a:76:74:30:40:fb:fe:9c:
35:4a:e6:aa:67:ac:a0:0a:ab:58:7c:9d:d8:2a:de:1a:00:54:
c6:1c:23:d4:e5:30:44:4a:b2:39:00:21:58:07:e7:d8:73:32:
d8:fc:42:62:ab:58:ef:af:76:55:b0:03:b3:fa:cc:ff:5f:02:
c9:bc:bf:47:11:95:e3:a9:60:5b:33:1f:be:2c:72:f2:15:1e:
eb:37:36:87:d3:24:18:63:28:a3:7f:cb:cf:8c:66:df:c4:e7:
db:cf:2e:1e:54:31:e7:43:44:cb:da:f7:0d:56:9d:5b:33:64:
cf:09:ad:57:e9:eb:d2:30:ef:3a:fb:a8:89:bd:47:ff:d3:1e:
f3:a8:73:55:ff:94:c0:31:21:fb:0a:1c:10:4a:9a:18:d8:bd:
cd:1f:5a:a5:b3:b4:0d:69:08:bd:17:8d:69:8f:4a:59:ef:00:
98:3e:ef:e0:f3:d2:69:21:38:29:d3:d2:fd:5d:35:f1:91:f9:
48:85:34:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:14 2025 by rpki-client