Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: UlQCMWRr5LiAaHn93leMUaiCvieCDb0x5owu2OQppnU=
Subject key identifier: 0F:1A:38:12:B5:49:CF:DA:45:84:C9:CA:3C:FE:EC:99:0A:41:0D:50
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 019769615645AE8EF6BF6E3E52BE2968A9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 13E7
Signing time: Fri 13 Jun 2025 13:01:15 +0000
Manifest this update: Fri 13 Jun 2025 13:01:15 +0000
Manifest next update: Sat 14 Jun 2025 13:01:15 +0000
Files and hashes: 1: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: T16nan6rOjCsnBjSPUTAVVJlb/fe2uoeb+bNROGFghk=)
2: omv1iA0sTwZqywTVYlUXXegJP1Q.roa (hash: lDFIRi5hNHf1aQj7xWQEmMDGw0C4yu9jECeYI1136N4=)
3: yYTpoAfaYghmHruP3VvWvB4Z38E.roa (hash: 9b9Mq3MlvIX2qX8DdTkiCTxQPYb+kWY/IW9meZtFMy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:56:45:ae:8e:f6:bf:6e:3e:52:be:29:68:a9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Jun 13 13:01:15 2025 GMT
Not After : Jun 14 13:01:15 2025 GMT
Subject: CN=0f1a3812b549cfda4584c9ca3cfeec990a410d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:6f:4d:7f:88:92:28:3c:0d:29:6c:99:55:
60:36:70:3c:c6:12:3f:ac:a2:46:5a:d8:3f:f6:68:
5a:aa:65:ce:37:e9:6f:ba:86:ed:b8:64:1e:53:a2:
55:2c:a6:af:54:16:ea:e5:02:ec:b1:7e:d6:45:2f:
0b:f8:58:4f:99:b3:fc:d3:b5:ec:60:1f:fb:d1:e5:
40:e5:fc:5c:c7:9d:3c:a2:0e:98:4b:d7:55:ec:61:
73:31:60:61:96:2a:77:8c:8f:81:a4:34:2f:e4:04:
8f:c8:72:b4:30:c8:3b:f6:70:c6:ef:e4:6b:bb:39:
da:33:c8:58:bf:ed:15:2c:e5:8c:a5:e0:ca:a7:2f:
5b:fb:1f:3b:af:a9:78:39:0c:38:5e:f8:d2:dc:26:
94:1c:76:5f:c8:72:6e:a9:41:9b:58:b9:95:7f:a8:
4d:d3:7b:d2:48:fb:d5:a1:59:2b:53:40:3c:f6:e6:
a1:a1:6c:0f:4f:5d:98:26:ca:66:29:29:13:8f:20:
e4:f7:a5:d5:ff:e1:f3:ef:37:c0:cd:71:9d:e5:29:
b9:9a:f0:cb:ba:08:f2:bd:67:c4:c3:fe:46:28:89:
53:a4:c5:1c:e3:e4:d7:1c:09:3b:5d:4d:ec:44:06:
0d:2e:08:15:87:f4:3a:1e:44:93:17:5b:bb:08:60:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1A:38:12:B5:49:CF:DA:45:84:C9:CA:3C:FE:EC:99:0A:41:0D:50
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7f:d8:27:26:e2:f6:21:c0:70:6f:cc:50:c1:dd:b7:8e:a6:
e1:96:cb:46:54:07:dc:81:8b:1e:c4:e4:ce:4e:62:b4:a7:8e:
aa:32:3a:b1:d3:21:07:de:4a:eb:80:9a:c1:bc:45:14:73:cc:
44:77:b8:3b:c6:49:77:99:b4:9f:a4:92:fb:54:dd:f7:40:39:
a7:a1:ce:0b:cd:98:6d:9e:b1:96:2a:77:01:e3:fd:f0:05:8b:
d0:bd:6c:7e:f6:f5:93:35:bd:2c:55:1f:e1:f1:99:b0:fc:75:
e0:fc:63:82:e8:1e:1e:c2:4c:97:ef:5c:0c:7c:d1:10:7b:2c:
f8:0c:f4:76:34:89:a1:33:a6:23:b9:4a:b4:9e:2b:19:25:81:
fe:35:57:83:a9:3d:0d:66:b3:ed:3a:c3:33:66:d7:76:e3:bb:
7b:31:b7:9c:22:38:cd:13:82:41:8d:aa:69:e0:cc:1f:14:83:
2c:87:60:39:02:07:90:c2:96:7f:01:d9:ea:a0:af:91:ad:2a:
db:35:de:a0:f1:d5:4a:45:b0:f3:e2:ce:8d:c5:fc:a3:fe:30:
86:b1:aa:8c:d6:28:59:14:a4:1e:16:a0:88:69:9e:69:9d:cb:
03:de:52:0e:cf:53:df:d3:10:d0:42:9c:63:c4:61:ba:79:86:
e4:c0:57:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:40 2025 by rpki-client