Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
File: J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json)
Hash identifier: u5MMTJsyiJy8fjNA0Buyw2OwkzpVem0mJ1mX/lBrLa4=
Subject key identifier: 28:B3:27:84:75:73:33:A3:9D:44:5C:FF:6B:E8:8E:33:7A:18:BF:CB
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 01976929EBE17DAF1A54811B8DF7F5C3D4A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
Manifest number: 0AB5
Signing time: Fri 13 Jun 2025 12:00:44 +0000
Manifest this update: Fri 13 Jun 2025 12:00:44 +0000
Manifest next update: Sat 14 Jun 2025 12:00:44 +0000
Files and hashes: 1: BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa (hash: Kaoj9hdcD1FNas61kk3Ce73rVwZ3HgxiSCiLpA2QHSE=)
2: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: NZT00mQkVDAMaGqC40QGygaZjLgDlpfbmfS1MjvhLEY=)
3: e-ijOhbtTVFVKNwA3A0KZtd9G28.roa (hash: 4dN/JLGpYdlMav39iELvw9iA3Kyyi/awTvBLXNA8PfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:eb:e1:7d:af:1a:54:81:1b:8d:f7:f5:c3:d4:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Jun 13 12:00:44 2025 GMT
Not After : Jun 14 12:00:44 2025 GMT
Subject: CN=28b32784757333a39d445cff6be88e337a18bfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4c:a3:0c:e2:6e:f9:ac:07:e9:7b:99:44:3f:
02:76:e3:d1:10:83:15:d7:a5:e1:fd:6b:8f:69:12:
b1:c0:8f:29:eb:39:dd:8f:a5:2e:e1:1f:e7:54:44:
8e:db:16:e6:16:92:5d:1f:8a:9a:04:27:4f:54:8b:
1a:dd:f4:a2:95:42:66:a2:14:9a:cc:7e:17:bd:e2:
87:d9:97:2e:32:4a:26:6a:8e:71:c7:e4:dc:04:b5:
32:ac:57:9f:ca:ec:73:8e:a6:b7:1e:bc:59:fc:ca:
f0:27:6e:73:0f:e8:cd:cc:11:a1:ad:59:14:f1:41:
a5:06:83:a6:7d:92:75:e4:70:ed:31:ff:b1:fa:c7:
31:4c:70:bc:37:93:0e:10:70:f5:a6:fb:41:74:99:
8b:f1:b4:e9:be:a2:aa:29:b3:a6:b9:37:0d:08:12:
82:a2:4b:a4:d5:92:0d:88:36:77:6e:27:fa:1c:15:
66:bc:0c:7b:f4:08:95:e0:91:48:97:fa:e5:0b:cb:
dd:bf:a1:e4:19:39:a8:7e:09:d8:1d:39:e0:9a:26:
66:64:69:d8:c4:6f:77:6c:98:25:d9:7e:35:33:62:
25:35:d1:2f:19:a3:db:2c:f3:c9:de:79:c3:ed:17:
76:c2:6b:27:e2:f1:86:b4:ff:c8:a4:40:51:bc:73:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B3:27:84:75:73:33:A3:9D:44:5C:FF:6B:E8:8E:33:7A:18:BF:CB
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:83:81:91:15:09:5d:a1:9d:ca:5b:c5:80:7a:d6:52:41:2a:
71:74:61:a6:0e:e5:87:e0:8b:67:cd:da:1e:55:11:c2:d0:1e:
50:d5:fa:b1:14:dd:1f:d5:55:7e:9f:45:04:d7:08:18:e4:c5:
9a:21:89:32:b9:b8:14:76:5a:ff:f3:59:cc:d6:bf:ff:8a:a4:
45:b6:05:c3:c5:02:37:a6:0a:0e:53:9a:9d:7a:50:6d:c6:16:
84:24:33:ed:56:0b:a0:f4:d3:05:fd:00:82:79:ef:84:3b:36:
57:cc:fc:67:aa:5b:85:b3:9c:27:22:87:29:56:cc:ec:9a:f0:
5f:b9:f8:d1:8d:8a:ee:47:12:f6:ac:29:a9:f3:b7:3f:bf:d8:
58:e5:21:3b:e8:7a:d4:2d:10:21:dd:1d:3a:5a:68:82:90:e4:
83:5a:0d:86:b1:53:6c:74:48:ac:16:cf:4b:17:6e:a9:ba:3a:
ef:49:cd:5d:f9:88:99:3b:2a:38:15:00:90:24:e6:62:06:a4:
73:fc:65:2a:19:0c:70:74:f2:e2:0f:ed:18:30:9a:52:ca:83:
71:4c:73:64:62:29:b8:7f:26:37:ec:69:d9:fd:1f:48:ba:73:
0c:3f:6c:40:8e:0f:39:48:90:b2:53:f4:a3:11:1b:c4:bb:17:
49:31:62:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 17:19:10 2025 by rpki-client