Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
File: J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft (raw, json)
Hash identifier: hAmC8nWUZu03AH6kJcPEg1cTKAaSyvLrTwf/lHnG+zU=
Subject key identifier: 6D:14:2C:D0:EF:BC:BA:34:7C:42:66:42:F7:02:8E:87:D9:B1:D2:4B
Authority key identifier: 27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
Certificate issuer: /CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
Certificate serial: 019873E2503752508E148114BA2321DCD836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
Manifest number: 04CA
Signing time: Mon 04 Aug 2025 07:01:08 +0000
Manifest this update: Mon 04 Aug 2025 07:01:08 +0000
Manifest next update: Tue 05 Aug 2025 07:01:08 +0000
Files and hashes: 1: J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl (hash: Zl7EUCi5XvLVEqe2LSIRQnS1MCsu6OmVWJVGO9XtWs0=)
2: Ri5k7SQxU6x0UFludmWvZ0B6TWI.roa (hash: TLxEmCkGZUEaMyJcwR/yeYXTxZGAU/9BCp1xDMGwRT4=)
3: TIq2cJHpR6KvpC_5zEbT28CzxmQ.roa (hash: AjELo4AcRNi6tjWnrWUw4e1yYtJi2dPHt3KwG3rn9eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:50:37:52:50:8e:14:81:14:ba:23:21:dc:d8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
Validity
Not Before: Aug 4 07:01:08 2025 GMT
Not After : Aug 5 07:01:08 2025 GMT
Subject: CN=6d142cd0efbcba347c426642f7028e87d9b1d24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:17:f1:3b:f5:78:5c:8c:3f:aa:61:ab:d8:
91:14:29:cf:49:c1:ef:56:9e:96:97:5a:61:9d:c7:
6f:12:e9:29:c8:ec:2b:2f:6f:74:91:2a:7e:fa:45:
f0:82:35:04:53:11:2c:6c:ab:af:ee:b8:85:d7:80:
66:fc:b4:ed:25:cf:b7:18:49:16:82:84:7f:08:3d:
5c:cc:31:2e:97:1b:5c:86:73:09:e6:ef:45:f7:a8:
73:22:fd:ba:e6:53:6a:07:8f:27:69:a9:ca:42:89:
3a:53:e7:9c:9f:96:46:73:5e:8f:82:38:b6:b1:d8:
8e:4b:43:81:fd:3c:27:60:84:e5:87:50:0b:af:d0:
ff:a2:a0:8d:19:bf:a1:51:d5:20:d0:b3:f9:d5:ca:
20:14:56:2d:5b:96:58:73:e6:55:23:21:41:31:e3:
75:bb:05:1b:3d:05:88:0c:be:f7:67:e4:41:55:f3:
78:e7:13:28:e1:b6:93:32:4d:70:47:04:a1:f0:73:
53:b4:63:82:99:97:29:13:d0:f0:0f:ae:65:ce:ce:
22:75:ba:ec:4f:a5:25:b9:ed:ed:59:b8:a2:5c:f6:
2e:cf:df:7e:0c:a0:39:44:ce:67:81:03:dc:dc:da:
ab:01:b4:d7:95:df:a1:fd:6e:6c:29:5a:00:1f:79:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:14:2C:D0:EF:BC:BA:34:7C:42:66:42:F7:02:8E:87:D9:B1:D2:4B
X509v3 Authority Key Identifier:
keyid:27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:16:2f:7e:f2:8d:ab:15:66:98:f3:e6:c6:be:4c:c5:0d:91:
49:f0:92:90:e5:d8:48:f9:c1:9b:38:bd:ff:1a:bb:1f:db:a0:
81:0e:b9:f6:95:82:bc:e2:6e:ef:ad:dd:c0:e7:5c:51:b1:88:
7f:82:be:41:0b:e9:bf:90:49:29:85:91:92:9d:4d:15:b5:64:
8e:14:2d:bb:b5:9a:f4:dd:e4:02:c0:73:52:37:56:c9:cf:5d:
66:5e:d1:30:7b:11:f2:0d:5e:61:e4:e7:29:be:c1:9c:fa:5f:
26:13:41:3c:a1:26:3c:75:0b:56:e2:36:29:1e:1c:b6:f6:77:
c6:8c:5a:61:93:a0:a0:ad:80:a6:7e:46:5d:bd:bf:6c:dc:2d:
73:f0:29:32:ad:31:2d:27:eb:8a:38:4b:38:95:60:2c:bd:48:
48:d9:63:d9:1f:69:3f:39:32:9c:8f:f0:c2:e4:ab:65:02:ae:
69:ff:4d:61:58:19:21:38:50:2c:3f:03:77:95:2b:1c:e7:69:
de:e1:90:5d:4b:e8:9a:a9:ab:34:bd:38:78:08:ec:28:f4:18:
69:38:85:f2:98:1c:d7:6c:08:80:20:e2:6f:88:44:5f:9c:95:
8f:cc:44:3a:25:38:ba:4f:09:e3:a8:40:ae:3c:72:4d:97:3a:
b9:7b:4f:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4lA3UlCOFIEUuiMh3Ng2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ODczYWZlNjMzMGI3YWU5ZWU1NjJlMGM5ODhlOWZkNWVh
OGY1NjcwHhcNMjUwODA0MDcwMTA4WhcNMjUwODA1MDcwMTA4WjAzMTEwLwYDVQQD
Eyg2ZDE0MmNkMGVmYmNiYTM0N2M0MjY2NDJmNzAyOGU4N2Q5YjFkMjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU8X8Tv1eFyMP6phq9iRFCnPScHv
Vp6Wl1phncdvEukpyOwrL290kSp++kXwgjUEUxEsbKuv7riF14Bm/LTtJc+3GEkW
goR/CD1czDEulxtchnMJ5u9F96hzIv265lNqB48naanKQok6U+ecn5ZGc16Pgji2
sdiOS0OB/TwnYITlh1ALr9D/oqCNGb+hUdUg0LP51cogFFYtW5ZYc+ZVIyFBMeN1
uwUbPQWIDL73Z+RBVfN45xMo4baTMk1wRwSh8HNTtGOCmZcpE9DwD65lzs4idbrs
T6Ulue3tWbiiXPYuz99+DKA5RM5ngQPc3NqrAbTXld+h/W5sKVoAH3lVBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0ULNDvvLo0fEJmQvcCjofZsdJLMB8GA1UdIwQY
MBaAFCeHOv5jMLeunuVi4MmI6f1eqPVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjRjNl9tTXd0NjZlNVdMZ3lZanBfVjZvOVdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kMzk0MTYtZjQ2YS00ZjgyLWIxZTEt
ZTBkMWY3Y2FjZmYxLzEvSjRjNl9tTXd0NjZlNVdMZ3lZanBfVjZvOVdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kMzk0MTYtZjQ2YS00ZjgyLWIxZTEtZTBkMWY3Y2FjZmYx
LzEvSjRjNl9tTXd0NjZlNVdMZ3lZanBfVjZvOVdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKxYvfvKN
qxVmmPPmxr5MxQ2RSfCSkOXYSPnBmzi9/xq7H9uggQ659pWCvOJu763dwOdcUbGI
f4K+QQvpv5BJKYWRkp1NFbVkjhQtu7Wa9N3kAsBzUjdWyc9dZl7RMHsR8g1eYeTn
Kb7BnPpfJhNBPKEmPHULVuI2KR4ctvZ3xoxaYZOgoK2Apn5GXb2/bNwtc/ApMq0x
LSfrijhLOJVgLL1ISNlj2R9pPzkynI/wwuSrZQKuaf9NYVgZIThQLD8Dd5UrHOdp
3uGQXUvomqmrNL04eAjsKPQYaTiF8pgc12wIgCDib4hEX5yVj8xEOiU4uk8J46hA
rjxyTZc6uXtPqQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:11:25 2025 by rpki-client