Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
File: J_lYw7dZsseJb17WY-gHeB8_9aI.mft (raw, json)
Hash identifier: w4dNIwcE+fwFw9zlew29tPRbyxvD0G8qZDmAzUL4Yv0=
Subject key identifier: 46:28:2B:1A:8E:94:79:55:AE:D0:95:15:97:C6:EB:8A:70:1F:B4:DF
Authority key identifier: 27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
Certificate issuer: /CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Certificate serial: 019926D764ADAC4DDA3DFC182A5870AB02DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
Manifest number: 0EA1
Signing time: Mon 08 Sep 2025 01:01:14 +0000
Manifest this update: Mon 08 Sep 2025 01:01:14 +0000
Manifest next update: Tue 09 Sep 2025 01:01:14 +0000
Files and hashes: 1: J_lYw7dZsseJb17WY-gHeB8_9aI.crl (hash: Dcv/j7pLpiolTKF5/4mFmEV/997kWmiEE9RdrawV3Js=)
2: U98Pywp0SW8RSqZF3Ge6Si9krK0.roa (hash: O0xR8BO72Q1293Dodh+ahx0zgwd8SQ9b7GDuhK6uN4w=)
3: fonqMENkUurdTSsmls1gVlg_WJ4.roa (hash: BkPWWaoPqGMFHcArMOr28SMuQJKUdO9RrrY9l2uEtM4=)
4: hRMqKbI5ZBKlaiDQw_wO9nw88a0.roa (hash: tQTOlSI2XH6rsXW1nhJPPPkXPxhSWEfkvDRnTJEB2Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:26:d7:64:ad:ac:4d:da:3d:fc:18:2a:58:70:ab:02:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f958c3b759b2c7896f5ed663e807781f3ff5a2
Validity
Not Before: Sep 8 01:01:14 2025 GMT
Not After : Sep 9 01:01:14 2025 GMT
Subject: CN=46282b1a8e947955aed0951597c6eb8a701fb4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:2b:d3:ac:f6:cb:2e:41:4c:95:72:ec:03:
23:d0:59:b9:4a:0a:44:a1:09:3d:d7:00:0d:db:20:
18:76:1f:2c:c8:94:a2:95:1e:75:f1:91:c8:6e:d0:
a4:b0:a8:7f:39:14:a2:74:93:03:1f:a4:b7:61:53:
0e:28:d4:8a:ff:6c:ae:19:8d:78:46:f9:5b:f2:e9:
8c:3a:33:81:3c:34:88:80:cc:33:71:57:34:df:58:
c7:40:37:6f:34:59:00:10:5d:b9:c7:db:d8:bb:c5:
8b:4c:99:1e:df:15:b1:9b:6c:19:38:27:2a:b9:2f:
05:6f:3a:07:dd:eb:e3:1d:f7:5e:1f:30:42:8b:ee:
37:f7:00:74:8c:f3:65:5d:73:6d:78:ab:55:79:61:
01:e5:c1:5d:3a:90:c5:3b:f5:6a:ad:0e:5d:07:fb:
27:27:01:ab:c6:48:65:8c:38:2b:f5:83:fc:78:16:
cc:ba:1d:95:6a:e0:f0:39:cb:38:c8:0d:1c:c9:9b:
b5:9b:0d:a8:5d:67:40:e2:7d:52:41:b3:24:f1:89:
5e:a5:4b:b3:1a:1d:bc:c1:58:99:6f:ad:1d:9e:5c:
28:40:60:01:99:d5:f2:aa:9a:f4:e7:8d:e7:ca:84:
d2:3b:bc:ea:fb:1f:e6:58:94:cf:8b:30:b5:42:76:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:28:2B:1A:8E:94:79:55:AE:D0:95:15:97:C6:EB:8A:70:1F:B4:DF
X509v3 Authority Key Identifier:
keyid:27:F9:58:C3:B7:59:B2:C7:89:6F:5E:D6:63:E8:07:78:1F:3F:F5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_lYw7dZsseJb17WY-gHeB8_9aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/cdbfbd-ed67-44b7-9e1f-b29107b98acc/1/J_lYw7dZsseJb17WY-gHeB8_9aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:55:e3:56:2b:44:3b:11:6f:f5:76:c9:d5:42:eb:38:5c:e9:
56:c5:75:2f:13:a1:77:b8:71:a5:8e:a1:55:d5:29:6a:27:97:
bc:7d:cd:49:65:4e:5d:2e:3e:d5:5a:81:33:30:d7:56:d7:ec:
45:06:0b:85:5c:b9:84:63:9f:33:14:5a:7e:fb:8b:dd:00:c3:
fe:0c:ea:65:97:05:28:52:cd:16:49:55:1c:0b:48:3b:38:12:
11:87:16:88:cf:4f:2f:17:02:a6:43:77:b5:e5:e9:31:6b:85:
45:71:5c:0b:4d:61:2f:d1:45:e8:8f:a1:53:9d:48:5c:43:85:
2c:77:f0:d0:04:19:c4:3f:92:45:2e:8b:47:b6:6c:69:e3:79:
79:c5:0f:e5:08:42:a9:66:0d:d9:f7:5b:bd:39:fc:e0:6f:ba:
7a:2e:0c:6e:c2:57:b5:05:d7:8b:37:9e:01:53:a4:5b:de:57:
7a:8c:11:9f:b7:91:ec:8c:2e:ee:d0:7b:6b:77:50:57:50:81:
10:ee:b0:41:6e:87:e7:ab:6b:14:ce:75:b8:4c:58:b5:29:52:
95:aa:1d:21:d5:72:90:4a:39:4a:a6:fe:f9:b4:ab:e7:21:54:
bb:2d:44:36:97:63:17:c6:56:53:89:fe:5f:b4:5c:20:58:68:
2c:7c:2c:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkm12StrE3aPfwYKlhwqwLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3Zjk1OGMzYjc1OWIyYzc4OTZmNWVkNjYzZTgwNzc4MWYz
ZmY1YTIwHhcNMjUwOTA4MDEwMTE0WhcNMjUwOTA5MDEwMTE0WjAzMTEwLwYDVQQD
Eyg0NjI4MmIxYThlOTQ3OTU1YWVkMDk1MTU5N2M2ZWI4YTcwMWZiNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKEr06z2yy5BTJVy7AMj0Fm5SgpE
oQk91wAN2yAYdh8syJSilR518ZHIbtCksKh/ORSidJMDH6S3YVMOKNSK/2yuGY14
Rvlb8umMOjOBPDSIgMwzcVc031jHQDdvNFkAEF25x9vYu8WLTJke3xWxm2wZOCcq
uS8FbzoH3evjHfdeHzBCi+439wB0jPNlXXNteKtVeWEB5cFdOpDFO/VqrQ5dB/sn
JwGrxkhljDgr9YP8eBbMuh2VauDwOcs4yA0cyZu1mw2oXWdA4n1SQbMk8YlepUuz
Gh28wViZb60dnlwoQGABmdXyqpr0543nyoTSO7zq+x/mWJTPizC1QnbeNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYoKxqOlHlVrtCVFZfG64pwH7TfMB8GA1UdIwQY
MBaAFCf5WMO3WbLHiW9e1mPoB3gfP/WiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jZGJmYmQtZWQ2Ny00NGI3LTllMWYt
YjI5MTA3Yjk4YWNjLzEvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9jZGJmYmQtZWQ2Ny00NGI3LTllMWYtYjI5MTA3Yjk4YWNj
LzEvSl9sWXc3ZFpzc2VKYjE3V1ktZ0hlQjhfOWFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFXjVitE
OxFv9XbJ1ULrOFzpVsV1LxOhd7hxpY6hVdUpaieXvH3NSWVOXS4+1VqBMzDXVtfs
RQYLhVy5hGOfMxRafvuL3QDD/gzqZZcFKFLNFklVHAtIOzgSEYcWiM9PLxcCpkN3
teXpMWuFRXFcC01hL9FF6I+hU51IXEOFLHfw0AQZxD+SRS6LR7ZsaeN5ecUP5QhC
qWYN2fdbvTn84G+6ei4MbsJXtQXXizeeAVOkW95XeowRn7eR7Iwu7tB7a3dQV1CB
EO6wQW6H56trFM51uExYtSlSlaodIdVykEo5Sqb++bSr5yFUuy1ENpdjF8ZWU4n+
X7RcIFhoLHwsjQ==
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:35:19 2025 by rpki-client