Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
File: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft (raw, json)
Hash identifier: PRED7YTFfRD+tVxZWOCOhSxN5jcjEbXZMe8qywQQY8I=
Subject key identifier: 87:F6:96:E5:56:EC:81:96:C6:96:2B:82:0F:DB:19:E0:3B:0B:7F:D4
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 019933B77C6540622E26A851DA3CA559D2D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
Manifest number: 1387
Signing time: Wed 10 Sep 2025 13:01:26 +0000
Manifest this update: Wed 10 Sep 2025 13:01:26 +0000
Manifest next update: Thu 11 Sep 2025 13:01:26 +0000
Files and hashes: 1: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl (hash: TWHLjMzHhiNrBF6a72Kj1fbUyW3bDkY9sjXD+VFzgbM=)
2: qT62sQgJ7wYZrGkOwUrBAOZW36U.roa (hash: LRDn9R97dLgxGAtTPJOW62pBW4f3rWtLvCdfekL/e2M=)
3: u-G-BjNkzDN41_akwDoArPHas8I.roa (hash: 3oV8r7qGwqy7avjI+jDPXV4J2Rs9RBfex18bpzCreTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:7c:65:40:62:2e:26:a8:51:da:3c:a5:59:d2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Sep 10 13:01:26 2025 GMT
Not After : Sep 11 13:01:26 2025 GMT
Subject: CN=87f696e556ec8196c6962b820fdb19e03b0b7fd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:cb:a9:5d:19:10:0d:61:08:3c:10:1c:63:
1c:68:12:7f:a3:c4:57:ca:79:93:0c:61:39:38:b8:
7d:2f:4a:33:eb:ad:18:90:75:63:02:d7:1a:0f:c2:
84:24:61:6f:00:cf:de:72:19:f6:98:b5:e2:aa:f9:
60:dc:3a:b7:85:2a:ff:1e:97:37:d9:49:2b:49:68:
89:de:a4:72:db:8e:e3:71:44:26:eb:8b:b5:93:13:
65:c0:36:8b:70:49:2c:31:7d:e6:56:7b:68:53:ea:
e4:b4:8d:0e:91:6e:e8:02:15:38:ff:25:84:86:d6:
fa:eb:ed:39:ff:63:12:ef:fb:b1:f6:9d:43:31:79:
2f:84:25:c9:34:57:39:48:50:be:0d:a6:bc:46:0c:
a0:36:3c:e9:69:4b:20:c1:db:9f:ce:3f:43:6d:9c:
9a:44:f1:b2:cd:55:da:79:21:87:ec:a2:4d:5f:c7:
b7:82:0d:0f:ed:25:66:f5:60:05:c2:56:2d:e7:a1:
22:b4:7e:90:88:58:4a:7d:f7:67:73:eb:01:89:8a:
18:e2:76:a5:a5:2e:2b:98:b5:37:16:40:05:39:34:
76:50:5a:de:0b:57:f5:94:de:84:6c:22:bf:d3:44:
7e:c5:55:b9:a5:f0:46:84:0c:14:10:85:ef:e0:7d:
8a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F6:96:E5:56:EC:81:96:C6:96:2B:82:0F:DB:19:E0:3B:0B:7F:D4
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:80:37:e1:7c:39:22:cd:4e:de:0d:a1:4d:de:b7:46:d3:1a:
9b:2a:8b:26:85:67:b0:b9:fd:73:86:27:55:20:be:15:de:82:
67:a4:98:51:d6:20:c9:72:7c:4f:46:9e:22:68:e2:9c:35:32:
60:e2:6b:49:66:6a:b1:5d:b3:d5:ba:7e:a7:85:1a:20:ca:1c:
80:fe:11:93:7f:9c:e1:17:88:ef:09:17:c4:82:36:4e:01:c4:
81:a3:e7:17:f7:d5:25:08:41:e6:c8:f3:a0:d5:12:e9:64:c6:
fb:31:9e:80:e1:79:33:08:09:03:ce:e6:0b:ba:7b:c4:ac:3c:
de:87:fe:8a:c2:03:6f:e1:b5:4e:ef:fd:79:85:89:f6:08:af:
be:68:07:11:b8:37:61:91:a8:93:4e:5f:3a:6c:0c:0b:8f:dd:
9d:18:57:32:22:da:33:7a:e4:83:ad:4f:16:ff:10:20:73:d8:
1b:55:60:cb:20:a1:83:d7:67:d7:5b:e4:bb:98:18:c3:46:2a:
84:14:a7:67:cb:c2:85:14:e4:b4:9f:c5:b4:95:d2:f7:b5:bb:
c4:cb:18:c9:d5:10:6b:63:96:7d:e1:0a:dc:6f:94:6a:57:2f:
65:f4:40:e8:00:22:65:29:41:79:77:af:33:1f:01:74:79:92:
db:23:16:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 20:00:39 2025 by rpki-client