Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
File: J7jb2X3kzUBZtS5RPc81zTgaMrM.mft (raw, json)
Hash identifier: 6pVp60hIOSvDTT0FfcL5BV8Sg1wS/Iw8TbxyfX21kEo=
Subject key identifier: 96:4A:F8:F5:93:FF:AE:D3:FB:51:52:D5:9F:9E:23:57:AB:75:A7:25
Authority key identifier: 27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
Certificate issuer: /CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Certificate serial: 01995642AD3C415D8B9086EAB2B9DB0DCB0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
Manifest number: 0F66
Signing time: Wed 17 Sep 2025 06:00:34 +0000
Manifest this update: Wed 17 Sep 2025 06:00:34 +0000
Manifest next update: Thu 18 Sep 2025 06:00:34 +0000
Files and hashes: 1: 7z6VwEslCL2FPJkLcnWBqsZx-Yc.roa (hash: 4HX05uMrwNGyncqNvEyr0SjiIMdyEc2AyvawA9NsEGo=)
2: H1ODV9W4buqhl3EqdtbJBcTx8bE.roa (hash: ACjxboSyCSfEn+fJ3xsL41v0ySwcobd1/VO5RHv6Sbs=)
3: J7jb2X3kzUBZtS5RPc81zTgaMrM.crl (hash: LzcQ00lMlTy4BWe3cJmOSXZkH+Z+vpmGJjOrrR8Gjy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Sep 2025 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:56:42:ad:3c:41:5d:8b:90:86:ea:b2:b9:db:0d:cb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8dbd97de4cd4059b52e513dcf35cd381a32b3
Validity
Not Before: Sep 17 06:00:34 2025 GMT
Not After : Sep 18 06:00:34 2025 GMT
Subject: CN=964af8f593ffaed3fb5152d59f9e2357ab75a725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4e:a3:01:9e:01:79:7a:3c:e0:19:55:45:b4:
94:85:f2:b8:b6:3d:92:d8:09:76:da:05:07:3d:9b:
ea:6a:95:31:95:d6:55:2c:72:3b:8e:32:7f:ee:6c:
39:8a:af:de:9b:b0:16:9b:61:c0:47:76:61:af:c5:
d0:59:d0:38:36:4b:24:3d:2d:30:ca:40:6a:9f:63:
c3:0f:da:88:a4:02:09:02:b8:0c:fc:7a:ea:ed:bc:
df:4c:dc:d8:b4:a7:2c:f8:66:d8:f1:24:24:f9:d3:
0a:8f:3c:bf:0c:4d:bd:f0:fd:97:91:05:2d:6c:e4:
27:a6:d0:8b:83:7a:72:5c:e9:f0:25:fa:b3:c0:df:
53:a5:c7:fa:cd:8c:d0:62:7e:2f:c6:64:85:8d:0e:
d3:15:a2:0d:07:35:db:30:08:ee:67:71:dc:33:29:
22:b6:f5:00:8c:01:c4:2b:8d:a9:97:a7:b8:1c:60:
bb:42:25:81:c6:7e:5d:a9:3a:6e:1d:2e:49:81:b2:
ac:b5:8a:61:cc:93:6c:32:1a:0b:e0:8e:be:a9:5f:
31:53:3c:8e:ba:aa:a7:d5:2d:cc:69:06:1c:90:89:
89:bd:d3:43:63:da:d8:ef:dc:31:55:91:53:43:af:
7a:74:1e:d1:19:55:68:67:b3:fd:86:3b:eb:95:14:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4A:F8:F5:93:FF:AE:D3:FB:51:52:D5:9F:9E:23:57:AB:75:A7:25
X509v3 Authority Key Identifier:
keyid:27:B8:DB:D9:7D:E4:CD:40:59:B5:2E:51:3D:CF:35:CD:38:1A:32:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7jb2X3kzUBZtS5RPc81zTgaMrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/85928f-5f19-41d9-8238-5c54cdad19f1/1/J7jb2X3kzUBZtS5RPc81zTgaMrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:81:29:4d:56:ac:50:27:61:74:fc:08:e7:22:a0:bf:74:bc:
0c:2a:cf:68:9b:11:81:3e:e0:e6:66:c1:9f:06:4a:c2:e0:7d:
11:57:51:35:0a:b3:ba:37:cf:b8:26:a0:d5:e5:46:e2:70:d8:
28:22:a6:90:bc:ed:8a:bf:b0:40:95:c7:68:08:f8:02:07:a8:
d6:8a:cc:14:67:db:40:a3:4c:a6:ba:ab:bb:3a:3d:d5:60:aa:
de:06:f6:ee:c0:c1:00:9a:0c:a1:11:c6:ba:4b:58:3c:cc:32:
2f:de:02:4e:aa:d6:8a:62:9b:70:60:06:fe:0e:66:93:b3:64:
7c:24:20:14:bb:32:f1:9b:3b:4a:9f:86:c8:d0:a3:92:65:7e:
9c:b3:30:ac:0f:5f:78:e8:43:53:fc:ee:d0:77:74:03:12:c3:
2d:84:67:bd:53:b1:d6:5e:91:dd:00:1d:47:64:c7:aa:05:ce:
98:16:53:a3:9e:93:87:f5:df:84:4c:67:60:f6:d2:7d:1d:b6:
dd:c4:e0:d6:45:18:ab:7a:27:22:9c:e7:bd:10:47:36:2a:fa:
1c:cc:74:a3:62:91:ef:e3:12:4b:1a:75:10:3a:49:9d:49:4b:
7c:c8:14:3c:e1:1f:1b:e6:0f:f1:ed:48:97:10:44:02:51:1f:
59:20:a2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 15:01:46 2025 by rpki-client