Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: C2UQtS3ax5u+6K8zxT39LOeRJ/CGXzzVxGaAja5Zlik=
Subject key identifier: 99:67:02:36:DE:DC:F4:8D:0C:CF:41:E7:2B:E0:B6:BA:96:8F:89:38
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 01987D89FDB00D782FCEDA6C8DD3A680CF66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 1476
Signing time: Wed 06 Aug 2025 04:00:52 +0000
Manifest this update: Wed 06 Aug 2025 04:00:52 +0000
Manifest next update: Thu 07 Aug 2025 04:00:52 +0000
Files and hashes: 1: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: SxyvEzpFDq2XvKUik+CN/MKsNMEFvlZXAswbNjbAL3c=)
2: omv1iA0sTwZqywTVYlUXXegJP1Q.roa (hash: lDFIRi5hNHf1aQj7xWQEmMDGw0C4yu9jECeYI1136N4=)
3: yYTpoAfaYghmHruP3VvWvB4Z38E.roa (hash: 9b9Mq3MlvIX2qX8DdTkiCTxQPYb+kWY/IW9meZtFMy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:89:fd:b0:0d:78:2f:ce:da:6c:8d:d3:a6:80:cf:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Aug 6 04:00:52 2025 GMT
Not After : Aug 7 04:00:52 2025 GMT
Subject: CN=99670236dedcf48d0ccf41e72be0b6ba968f8938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:37:4c:d1:46:34:d7:8e:6f:22:fb:60:44:
3f:e0:4a:2b:6e:0a:54:ae:3a:2a:f4:e6:58:38:ba:
a1:23:69:b1:b4:ec:8e:90:a1:e9:3b:d2:2c:f1:70:
eb:f7:04:d2:12:c0:5d:26:84:2e:25:2d:e9:e7:e6:
05:28:b6:12:53:12:58:1d:2a:4c:2c:26:f2:87:b7:
d7:13:2b:73:e7:4a:90:54:7e:dc:b2:5f:2f:cc:8f:
cb:1d:c1:ac:c9:0f:78:3b:4b:41:7a:c0:bb:e0:ab:
48:2e:cd:08:78:b4:06:86:76:60:fa:46:58:f4:db:
b0:eb:a5:5f:4c:a2:34:cd:65:a6:20:b0:84:0a:64:
79:10:ea:de:12:37:05:ce:d0:8f:d4:09:fc:ee:d4:
a6:1a:5a:aa:73:67:15:45:95:a8:78:61:63:7d:f0:
10:23:8a:c3:56:37:e0:ac:19:40:17:5c:2f:d3:de:
b6:ed:38:5e:4c:1e:39:3e:99:89:80:af:ab:85:a5:
dd:6a:d4:f2:7e:c7:6c:4b:b3:11:be:bc:72:a9:5c:
a6:1a:bb:28:61:98:64:18:2b:8e:e4:7f:c7:df:17:
65:42:85:e7:dd:06:3f:8d:44:25:2c:e4:c2:99:f3:
7c:6d:20:c4:45:39:26:8f:da:78:8e:b5:02:f2:d8:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:67:02:36:DE:DC:F4:8D:0C:CF:41:E7:2B:E0:B6:BA:96:8F:89:38
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f1:d9:4a:a1:cc:20:82:20:9d:71:50:58:80:f4:11:46:b7:
ab:69:cb:ed:44:1f:1c:4d:10:e6:7c:c8:4a:ab:1e:fc:c5:a7:
80:ca:6c:1a:96:b5:98:1f:64:cd:62:0a:72:34:cd:0a:c0:c0:
86:99:6b:3c:0f:1f:8b:4a:e4:13:23:dc:be:fd:08:5c:c3:3b:
af:57:38:b3:5c:d8:2b:d9:3d:81:29:eb:f6:a2:49:54:59:2b:
18:74:7c:84:d0:40:0b:12:5b:36:d1:0c:65:f8:06:01:14:b8:
c8:e7:f7:d3:97:e2:ec:a5:92:f5:e4:94:3f:d9:69:84:85:4d:
ca:cb:ae:04:43:50:2d:98:be:6e:2f:46:b6:47:b1:19:db:78:
60:21:8b:50:44:10:c5:c0:64:e3:a2:26:5b:89:49:84:b7:7c:
50:34:94:7f:e4:86:19:1e:b1:ec:c2:a8:6a:d6:ac:26:ed:00:
5e:21:c8:ef:83:62:ee:d8:5e:cc:cd:95:55:c3:8f:44:0d:19:
77:d7:28:27:07:a2:14:8f:d8:ef:d7:0d:ee:5f:f3:ca:e5:16:
79:d6:50:8c:af:0a:e3:7a:30:4b:0b:60:26:c9:50:76:05:a2:
06:25:a4:96:10:d9:2e:e9:75:98:95:c1:06:b6:ff:9b:f1:dd:
cf:b9:0b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:55:20 2025 by rpki-client