Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
File: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft (raw, json)
Hash identifier: 9/oWBstwEiEgvPEiry6uJnR2WPF57BGU/bTQZglQg8I=
Subject key identifier: 80:35:CE:94:E4:CF:9F:36:8A:8E:03:6F:9E:20:07:5E:8C:C1:DB:87
Authority key identifier: 26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
Certificate issuer: /CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Certificate serial: 0199221E7B50C03C505766664EEDB573EBDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
Manifest number: 15C3
Signing time: Sun 07 Sep 2025 03:00:46 +0000
Manifest this update: Sun 07 Sep 2025 03:00:46 +0000
Manifest next update: Mon 08 Sep 2025 03:00:46 +0000
Files and hashes: 1: Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl (hash: 0msIpn44DEpVf4A2DOt3g5doVHxvZ9zj06BjjeQAiNo=)
2: ifTKeL7Q3yOfbgGQD-O0V2FKxJg.roa (hash: JhNUlPYthTeXHHV7LF1Jgo8sCxuBA07GISDC2g5jYXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:7b:50:c0:3c:50:57:66:66:4e:ed:b5:73:eb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=267d9ecb9964825d44dd266bbd32aa0804bc10f7
Validity
Not Before: Sep 7 03:00:46 2025 GMT
Not After : Sep 8 03:00:46 2025 GMT
Subject: CN=8035ce94e4cf9f368a8e036f9e20075e8cc1db87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:b0:4a:94:e0:f0:a8:b2:6d:da:f5:5c:7f:
23:21:17:38:c6:ea:c1:3c:f2:51:58:cc:f7:2e:fd:
2c:27:02:65:30:f5:cb:ad:f2:8e:5a:21:b4:78:29:
b3:94:69:1f:8a:fb:18:c2:f8:b7:0c:23:82:62:48:
f8:bd:c7:36:d0:e2:cf:82:4e:47:c6:c3:f5:1e:6f:
53:be:ab:1f:7d:f4:58:ac:b1:d6:d1:29:18:ee:d7:
40:b9:d6:d8:28:d8:55:8e:15:cd:5c:07:f0:c0:d8:
6b:f9:80:75:9d:7d:29:34:7e:b0:b2:a5:27:b2:8a:
10:b9:00:2d:da:b4:ec:69:49:40:df:b7:5a:ed:4f:
a3:6a:22:23:68:ef:14:13:27:f6:a9:de:90:b7:f3:
bc:99:db:d3:6b:f5:ad:f9:80:07:a4:fd:8d:2d:61:
c8:08:37:ae:7b:57:07:3a:51:d7:a2:e7:45:a3:7c:
4f:68:73:9c:d7:36:00:ec:a6:97:a1:4d:ed:71:47:
67:98:ee:94:46:f2:bf:27:d7:af:05:4a:ee:7e:74:
c3:95:83:bb:83:3d:d8:fc:f9:78:2a:1a:46:1b:b8:
df:4f:66:43:01:ca:ae:0f:12:30:ae:4d:1e:e2:a9:
3a:f3:00:59:fe:b9:1c:b8:3b:9e:ba:1d:64:d7:99:
a7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:35:CE:94:E4:CF:9F:36:8A:8E:03:6F:9E:20:07:5E:8C:C1:DB:87
X509v3 Authority Key Identifier:
keyid:26:7D:9E:CB:99:64:82:5D:44:DD:26:6B:BD:32:AA:08:04:BC:10:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/29ac84-4365-4eba-9873-391bce71fea1/1/Jn2ey5lkgl1E3SZrvTKqCAS8EPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:52:bd:06:4b:da:7c:46:69:f8:40:97:8a:30:3d:3d:8e:01:
19:43:44:47:3d:5e:60:d5:7f:61:27:18:42:05:97:3b:a7:f9:
3b:29:c3:3b:f1:fb:b1:be:f5:c9:dc:68:1b:b6:c5:6c:d9:f7:
ab:23:2c:4b:05:03:1c:c7:53:8e:0d:07:b5:af:83:47:de:4c:
87:46:9d:ff:28:62:ca:29:51:39:b6:da:db:21:7f:f9:ed:43:
4d:a2:1e:c5:3b:b9:97:9a:e3:99:46:dc:ba:b6:58:9e:c4:ca:
d6:64:5f:95:a0:33:ab:42:9b:4d:1a:72:be:16:cb:9e:58:a6:
5d:87:cf:bf:be:ac:41:a3:5a:e7:fe:51:4c:55:d1:b6:63:fc:
1f:64:cd:6a:4b:fa:c4:4e:5d:c9:64:87:c1:6a:65:65:d6:89:
cd:95:08:ff:57:32:53:87:6c:79:68:6f:4e:3b:78:1e:f1:32:
15:b9:a2:c5:ae:df:e4:0e:27:3c:8a:b6:a3:3d:e1:2b:63:dd:
b0:2f:3f:58:9e:64:bd:62:4c:f4:bb:a0:ff:8d:7c:71:d9:ca:
ff:fe:26:4c:5c:2b:0c:d3:55:bd:18:bd:86:6f:e5:7b:ba:2b:
8a:f2:92:9d:cd:c4:d6:9c:06:c1:9d:3d:79:ea:a4:f4:00:b7:
68:ec:eb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:02 2025 by rpki-client