Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: cl7Ye/KrQxmOTbMSHdpEh9eEwtKCQ3W7/Re6o7dka6M=
Subject key identifier: 89:B1:2F:5C:D4:08:DD:C6:BE:73:8C:43:C7:F0:2E:5D:C3:58:33:04
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 01974779E142AD79F183FBF5E98E1E44CB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 15
Signing time: Fri 06 Jun 2025 23:00:59 +0000
Manifest this update: Fri 06 Jun 2025 23:00:59 +0000
Manifest next update: Sat 07 Jun 2025 23:00:59 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: RtDAZYNv0CbWtKGkMiHB4vrivZM6PtlGrmCZqDU1EfA=)
2: PXQZ8Kqy_mx9lBo5_cDxC51se1U.roa (hash: 9tHWBrF2ZmcSWuE44cZk0kByYXScp8kTGOAiMALH64w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:e1:42:ad:79:f1:83:fb:f5:e9:8e:1e:44:cb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Jun 6 23:00:59 2025 GMT
Not After : Jun 7 23:00:59 2025 GMT
Subject: CN=89b12f5cd408ddc6be738c43c7f02e5dc3583304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:70:31:e8:72:12:92:11:2e:4d:26:1a:7d:2d:
b7:9a:48:0d:9e:07:fc:4b:33:fc:17:bc:40:e8:50:
4c:17:f4:db:29:b5:e4:b3:95:b0:74:4c:46:b2:0c:
eb:d2:fe:25:cb:d5:b7:34:57:11:00:54:82:9c:1b:
5f:1f:c7:1c:84:2f:0d:9a:f6:e3:12:8f:45:d4:0c:
8a:43:4b:6a:7f:27:c1:21:1b:86:d3:a2:46:93:28:
68:14:99:97:6d:49:f3:cd:ac:ec:3e:6b:b6:9d:ca:
41:f3:50:39:1b:86:c3:53:c7:58:56:66:c9:a0:ad:
62:f0:65:a9:23:81:13:16:42:64:2c:9a:fa:9c:a7:
9b:1f:c2:9c:00:4d:60:57:ff:1d:51:de:45:a5:42:
4e:50:a0:85:d2:6a:2f:d1:7e:9a:4d:23:86:e3:64:
f7:29:0d:d7:e4:01:4a:27:9c:50:78:4c:8e:50:5c:
5b:43:12:6b:0f:1b:dc:3a:53:24:6e:a1:63:6f:af:
f3:aa:92:2e:59:be:12:0f:2b:4a:af:89:41:fc:28:
97:7e:fa:1a:90:84:bf:1d:6d:42:1b:dd:5b:9e:c7:
c8:61:50:9a:01:03:a6:1a:64:81:67:e1:f9:30:a0:
87:ab:e4:8c:58:f5:75:28:05:e4:db:38:a5:6f:67:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B1:2F:5C:D4:08:DD:C6:BE:73:8C:43:C7:F0:2E:5D:C3:58:33:04
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d6:07:af:c1:5a:3d:48:19:a6:8e:27:05:2b:4d:f0:6b:6f:
58:82:5e:4a:6b:5d:2e:92:33:c5:8d:9a:1f:22:ef:c7:d6:cf:
23:09:4d:f9:95:4d:34:8d:e8:d6:08:11:1c:1e:ea:d4:3e:7b:
9e:11:45:74:26:a9:27:da:c2:84:db:5d:24:49:7f:36:8b:87:
78:e9:8f:78:46:0e:4d:15:ed:02:1e:5d:29:21:c3:d2:13:2b:
48:27:29:48:e9:85:f4:54:73:2c:09:e0:95:52:88:c1:64:81:
2c:f7:9f:6b:18:da:79:54:fd:ee:a7:f9:72:f5:c0:41:70:44:
a4:ef:8f:20:02:33:2b:92:6e:67:ca:b8:80:00:ab:5e:0a:06:
cf:8a:9a:3d:78:94:13:fa:2e:d5:f5:31:7b:83:8a:48:41:59:
d0:1a:30:f9:0c:e3:94:c5:31:98:ad:b7:89:01:b3:ac:d0:51:
06:87:8b:15:37:98:6d:c9:b9:0c:16:b9:fc:8f:b3:49:fd:c9:
5f:5c:72:96:b5:0c:be:b9:6b:2f:c9:50:30:8f:a2:e5:f6:70:
24:e2:a1:9c:2a:cb:f1:65:9f:8b:30:c7:67:f0:d4:2a:6b:d8:
ed:f2:62:93:ee:f5:2a:cb:7e:7c:a0:14:38:ad:1c:b5:9f:df:
0f:ff:cd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:14:37 2025 by rpki-client