Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
File: J8Y3pwndvn9iN6-NWykTtCI3FXw.mft (raw, json)
Hash identifier: 6ovdTB+1i56BGKrhKc051fk72aiCjRdpaDHWKFbw3Sw=
Subject key identifier: 4A:8F:1B:B1:24:1B:97:82:39:9B:F0:B9:69:EA:1A:66:53:12:9B:7D
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Certificate issuer: /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial: 019873E3005F8712A4FE8C0B7F6C38A1546A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
Manifest number: 0D0D
Signing time: Mon 04 Aug 2025 07:01:53 +0000
Manifest this update: Mon 04 Aug 2025 07:01:53 +0000
Manifest next update: Tue 05 Aug 2025 07:01:53 +0000
Files and hashes: 1: J8Y3pwndvn9iN6-NWykTtCI3FXw.crl (hash: 8qacBs8Tvc0/G2lrU38sTY3JpYUBusRH2eZ0Er0SSPs=)
2: dlmSMThgfzEt-EoGdzxxYyd6AvA.roa (hash: II2qv/R+riqTZycAWnh60efymgX6QJpKVeYxCLVnyks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:00:5f:87:12:a4:fe:8c:0b:7f:6c:38:a1:54:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Validity
Not Before: Aug 4 07:01:53 2025 GMT
Not After : Aug 5 07:01:53 2025 GMT
Subject: CN=4a8f1bb1241b9782399bf0b969ea1a6653129b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3e:1b:c7:d7:78:03:67:7e:0c:71:03:52:02:
b6:d8:4c:64:d7:de:d8:0a:34:6f:2f:15:33:e1:86:
53:54:95:29:f5:1f:b8:de:80:85:3c:96:d1:1e:4a:
38:51:16:4c:74:c9:c6:90:00:c8:fa:97:2a:c7:15:
b9:0b:ee:74:14:9c:a4:02:84:3f:27:54:7d:b6:55:
59:15:20:53:d3:c1:3b:67:e4:7f:9e:40:a6:a3:c3:
f3:7b:84:10:89:87:36:a2:89:9d:7b:27:da:83:b5:
b6:d4:38:10:2d:fd:14:79:f4:76:d9:17:85:19:ac:
0e:a8:fd:4d:8a:50:a3:3d:f7:00:1f:95:e3:47:47:
6e:03:f4:5d:16:b8:66:66:31:01:a4:1d:ed:a8:f7:
e8:a8:19:67:fc:9f:60:2c:da:c6:e4:60:d6:dd:15:
74:61:84:35:62:ae:39:72:4c:d8:43:d5:18:1b:13:
ab:44:69:b5:51:af:eb:4d:10:a6:04:c9:98:0c:70:
f6:02:4f:60:33:09:74:8f:b8:11:9a:20:e1:e0:9e:
04:68:c7:22:de:de:52:03:6d:87:ed:5f:3f:53:0b:
eb:2a:9b:a3:fd:76:de:07:83:df:b5:cf:f5:97:f1:
bd:bf:bc:b0:fa:da:11:39:05:7c:da:b0:fe:52:d8:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8F:1B:B1:24:1B:97:82:39:9B:F0:B9:69:EA:1A:66:53:12:9B:7D
X509v3 Authority Key Identifier:
keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ae:c4:c5:83:aa:4a:24:12:37:0d:5f:81:dd:a1:2b:78:f9:
23:42:83:a8:df:79:bf:9f:80:0f:e5:30:8d:86:08:aa:be:98:
97:a7:40:9a:bb:12:8b:37:cb:bf:e7:7e:32:07:e6:8d:a4:97:
ca:20:76:bb:76:25:3a:79:e0:21:d5:d9:8f:e6:84:09:f2:cc:
3b:cd:a8:b0:e2:e0:23:1e:61:d3:67:4b:b7:3b:88:30:3b:32:
3b:36:3f:e4:bd:27:2f:e1:9a:03:ca:b4:ad:da:04:db:58:bc:
4a:8e:7f:55:d7:ca:34:b7:5e:ba:52:1f:7d:49:8b:4e:99:43:
10:a6:6a:03:b0:1d:e7:38:32:68:a6:05:f9:cc:7a:94:65:84:
3b:0e:ba:b6:5e:86:e2:8f:ea:e5:a5:7d:8f:f0:0c:74:7a:68:
6c:33:ba:e1:4a:68:11:4a:21:cd:bf:a7:0c:51:df:e0:d7:c5:
8b:01:eb:6e:9a:db:0b:6c:03:0e:e2:25:c2:5e:97:22:b4:66:
91:d9:57:2e:65:c7:16:06:a8:ed:7f:0c:db:ec:63:16:8e:f9:
b8:cc:b2:a5:ac:3f:1a:5c:d4:99:61:04:88:36:31:d2:24:71:
f9:48:8b:be:0e:18:ba:06:00:a2:b4:28:22:bf:1f:ba:9f:26:
b3:66:fb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:20 2025 by rpki-client