
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
File: J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json)
Hash identifier: KxgQHw0FB/XlU/Rvj2bLKpRgtVTnUQpvzF8Kc0ew+T8=
Subject key identifier: B8:3F:93:A3:64:90:CF:EF:3F:52:2B:56:13:BE:09:9E:83:A3:E6:05
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01974A43B2E6FB524F3FFEFB4227FF89DCD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
Manifest number: 0AD5
Signing time: Sat 07 Jun 2025 12:00:40 +0000
Manifest this update: Sat 07 Jun 2025 12:00:40 +0000
Manifest next update: Sun 08 Jun 2025 12:00:40 +0000
Files and hashes: 1: 4Q0OMlDeRzDSOzAw8LxkvQaDF7E.roa (hash: U7GjqbV2dOQXajvpmYRAMgZ0b0HIaEV5bZmn2apsyWk=)
2: 5dNFvIO-zbznRLmVF6QAMVX2o0A.roa (hash: 9mx7HafqAu6Bu8FJ7Ab6X4jgT5Oz61/dm+ZXSP7PMrQ=)
3: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: C5DHjW3Q4kOcU9erGBtfxrXnRycvwxPizjq5MSny498=)
4: QMgP50QUErIVfe6bHrHbEcBqS0o.roa (hash: SzUA4iffOvayoUI6Lybdi08Ue69lvJ7eeJxQaa9p+NY=)
5: RXaHa7HQXaOor19kJAnyP5kxxU0.roa (hash: 1Jda3owwY018JsVQMIcmSKXtEtxhwgl86WeJsxIjRh4=)
6: Tw_Tm39J15PuLnPwr2dqvdn-Dh4.roa (hash: a0LH5SVtRHj2tzuff6IHJP/0pDujnltOOGwLPXcyclc=)
7: luLxlcgh627v0OkdM0129_I_xLE.roa (hash: 0IA00NfTMeZkBm2M+KVm/0zXxqax1M++emDllDikDHM=)
8: oQEA3DnBm500dJBYY9a5KgZXmQQ.roa (hash: TzJe0tF7p07+4ocoJWUSx+pyInMnz9/Rqe/WjvQu6+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:b2:e6:fb:52:4f:3f:fe:fb:42:27:ff:89:dc:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Jun 7 12:00:40 2025 GMT
Not After : Jun 8 12:00:40 2025 GMT
Subject: CN=b83f93a36490cfef3f522b5613be099e83a3e605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:a9:ca:e0:45:20:96:be:92:74:bf:e0:ef:
28:55:6b:bc:aa:aa:43:ae:e3:a4:f0:9c:31:05:92:
ba:fd:a5:26:7d:f1:3b:5c:2f:5b:df:3d:11:f8:cd:
e8:52:1b:29:65:b1:fb:fd:87:52:ce:eb:39:10:71:
aa:7b:12:35:03:45:ee:3d:d3:8f:1f:f4:e5:38:46:
e4:6e:37:52:48:14:4c:a9:89:f9:05:6c:94:8d:b0:
39:d4:c7:f8:5b:cb:6e:fe:24:94:e2:68:b3:a7:72:
f7:74:23:17:3a:14:a3:c3:69:4e:ca:7b:0c:ad:d4:
d5:5d:35:a1:21:96:11:3f:2a:a7:90:95:28:6a:2e:
88:d8:f7:95:59:df:9d:f4:ab:8f:c2:f0:bb:30:95:
65:85:60:1f:01:1a:0f:1c:83:d5:dc:11:7e:c8:3d:
37:df:0b:84:5f:b5:a4:25:6c:f7:d1:52:4f:2b:c7:
b6:7b:8a:8d:39:c2:5e:67:32:6c:d5:c1:87:77:f5:
a4:f4:39:24:a5:d5:0c:3e:06:94:23:ff:e5:ca:aa:
ea:ad:85:1a:3c:cb:7a:f5:ce:c7:76:1f:74:23:23:
4f:c2:b5:46:58:cb:36:ed:c6:89:8b:d0:95:a0:f4:
dd:11:56:a2:95:a3:15:73:87:de:7d:ea:32:ef:35:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3F:93:A3:64:90:CF:EF:3F:52:2B:56:13:BE:09:9E:83:A3:E6:05
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:27:3b:09:7d:40:c8:3b:a3:7f:ac:64:0b:ff:ab:32:ea:f9:
f3:ab:10:33:94:d7:cd:aa:7d:3b:95:6d:d1:46:e0:9d:07:ed:
29:e5:78:17:4e:ed:7c:c7:b4:60:d0:77:1b:66:e6:b1:7a:5b:
e2:1f:1a:fe:49:43:39:51:49:27:fe:b6:18:9d:9d:2c:2f:e5:
f3:c8:f3:e8:f9:09:98:19:78:f0:ae:5a:35:ea:ed:8b:5f:23:
c4:d5:04:50:80:cb:5d:d7:ad:0b:fb:c7:98:6b:a2:02:18:8b:
fd:10:ae:bf:e9:8b:4b:bd:9a:5a:f6:66:67:47:ac:5b:47:9a:
3d:f1:1c:6f:8c:bb:64:6d:34:15:3f:26:68:cf:69:22:4b:79:
8c:57:4a:7a:96:2a:b9:c4:f6:04:b5:a6:38:3b:cb:b2:9f:d0:
1e:88:dc:9c:58:cc:9a:c3:39:4e:45:bc:33:60:69:b9:6b:cf:
a7:06:7f:8e:54:9b:53:8e:8e:92:c6:0d:15:fa:58:56:26:12:
f7:a8:60:9b:b8:df:79:b2:84:3e:d4:d9:90:b8:a5:e8:a7:5a:
6b:f0:26:98:eb:18:8f:2a:a7:12:77:d7:ba:b3:e5:18:dd:af:
0b:21:af:c2:f9:1a:9d:ba:86:76:78:cc:3d:6d:8c:0a:93:21:
80:78:82:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:40:02 2025 by rpki-client