
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
File: JwafGIPczJOnhpxB7D6XL_X9SwE.mft (raw, json)
Hash identifier: L+jjUf/OD3+HrqZ5NkUYf1nROh3Sh2Vi8uVzw6k5sZU=
Subject key identifier: 41:95:06:DF:E2:50:C6:7C:90:CD:AF:52:F5:50:F0:F8:B5:9A:2B:D3
Authority key identifier: 27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
Certificate issuer: /CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Certificate serial: 019848F7910B9F5ED0EEAAC70D43D2D7F98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
Manifest number: 89
Signing time: Sat 26 Jul 2025 23:00:40 +0000
Manifest this update: Sat 26 Jul 2025 23:00:40 +0000
Manifest next update: Sun 27 Jul 2025 23:00:40 +0000
Files and hashes: 1: JwafGIPczJOnhpxB7D6XL_X9SwE.crl (hash: S4LNl99ckPP1fnzBRREgpl+/JKxDTQP7kXpDkKlaKuU=)
2: tSgs3XUIsHh7rxyC6KI4dfFcjtI.roa (hash: aP/8w3eyX9ywh3RSZ1FyfaCe/EGfUTND1DeYuxP49kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:91:0b:9f:5e:d0:ee:aa:c7:0d:43:d2:d7:f9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27069f1883dccc93a7869c41ec3e972ff5fd4b01
Validity
Not Before: Jul 26 23:00:40 2025 GMT
Not After : Jul 27 23:00:40 2025 GMT
Subject: CN=419506dfe250c67c90cdaf52f550f0f8b59a2bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:dd:37:4d:90:33:fa:b8:a3:9e:6a:69:2d:
e5:42:fc:8d:a2:00:15:66:6d:65:ac:7e:ac:fa:3d:
f5:1b:2e:33:3c:e3:57:e8:45:a5:20:45:fc:f2:9a:
01:8b:e5:eb:35:cf:9a:7f:39:be:e1:12:58:f5:2f:
b4:c7:f7:de:5e:95:ad:78:75:ef:ac:d4:81:4a:0e:
6f:f5:18:b6:87:af:3c:f0:d1:1c:68:a4:01:a5:7b:
70:7c:68:6a:1d:37:72:0e:ef:82:ae:2a:b2:5c:f8:
fc:d9:53:73:aa:e6:e1:c2:cd:a4:11:14:ba:8c:97:
a0:d0:fb:d0:14:11:2c:f1:5a:cd:b0:16:63:f6:78:
5e:3a:1d:cf:b7:30:a6:89:4a:35:03:8d:6d:e4:af:
c8:80:8c:10:64:45:12:88:dd:b7:9f:fa:d1:b5:86:
bd:56:5d:28:45:9a:22:e0:83:bd:dd:0d:ae:ae:c4:
14:e4:c3:2a:75:f6:f7:12:29:f8:6e:dd:f8:35:ab:
14:7e:ef:61:f7:f0:73:e9:b8:a7:a8:2c:3b:4b:06:
af:3f:ff:31:4a:8d:ca:32:52:b6:da:77:29:52:87:
6d:3e:d5:d9:3b:a0:88:51:58:a0:bb:c8:cf:31:06:
9a:44:1e:1e:7a:23:6b:dd:e3:a2:fd:b0:34:ed:fc:
41:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:95:06:DF:E2:50:C6:7C:90:CD:AF:52:F5:50:F0:F8:B5:9A:2B:D3
X509v3 Authority Key Identifier:
keyid:27:06:9F:18:83:DC:CC:93:A7:86:9C:41:EC:3E:97:2F:F5:FD:4B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JwafGIPczJOnhpxB7D6XL_X9SwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/42e079-6f7c-468d-b028-0462b6484d60/1/JwafGIPczJOnhpxB7D6XL_X9SwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:14:27:20:28:51:d3:48:2f:5f:46:94:26:ab:0b:33:ca:39:
74:3d:4e:47:a3:b2:4f:38:b6:13:4f:ff:c8:a5:ad:45:0f:c7:
e5:5b:55:d0:ef:db:56:f3:15:f6:7f:f1:66:f8:c0:84:78:b3:
46:18:ad:dc:01:7e:ff:90:37:7b:49:57:80:9b:06:59:fe:b2:
d2:17:0a:bc:6e:2a:39:2e:5f:73:0d:0b:dc:eb:d8:89:2f:b3:
99:33:72:c9:22:9e:97:05:84:63:67:e7:57:21:c2:cc:df:66:
fd:2f:01:4b:e7:76:30:65:4d:b6:a2:0b:04:ba:44:eb:e6:f3:
c7:2b:4a:e9:69:07:3b:b9:8d:c0:bd:8f:5b:7b:d9:6d:64:bb:
77:17:e8:fe:41:d9:4e:12:9d:9e:88:43:d7:c9:d6:c7:85:7d:
5b:d3:15:a5:95:21:57:22:97:33:90:4c:7e:02:6b:c7:0d:40:
cf:63:8f:28:7b:ec:2c:1e:5c:ca:fe:c1:7d:da:56:e3:b5:a9:
42:c8:11:4b:73:98:d4:e5:06:a1:c3:ef:b4:48:d0:87:e7:5c:
96:a3:f7:d1:e1:26:ac:0f:27:0b:e8:79:72:ec:45:35:88:21:
11:15:36:0d:ee:8d:fb:cb:34:37:b8:1f:d9:c5:ef:b3:ec:ec:
f8:e7:0d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:26:19 2025 by rpki-client