Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json)
Hash identifier: cQp734u9UBgCV5jrt5PKZj3VchhoDklPyzAKD0IBPYo=
Subject key identifier: 73:06:21:4D:96:D8:48:A9:2B:E6:24:4F:68:72:B7:A5:71:A5:F6:11
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 019896374A0E33C6278E034276142DE64990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
Manifest number: 108D
Signing time: Sun 10 Aug 2025 23:01:02 +0000
Manifest this update: Sun 10 Aug 2025 23:01:02 +0000
Manifest next update: Mon 11 Aug 2025 23:01:02 +0000
Files and hashes: 1: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: VYlJw6ukmoSr4Ymii6VN3UmtGJ/U5DLTDZQ+N7zFWBE=)
2: YmG5FcsW3S43XyijT62zmWMd610.roa (hash: Sh1sRBIDqrknsDPBNOeRI3CSuT41xnHIPduRy76n3aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:4a:0e:33:c6:27:8e:03:42:76:14:2d:e6:49:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: Aug 10 23:01:02 2025 GMT
Not After : Aug 11 23:01:02 2025 GMT
Subject: CN=7306214d96d848a92be6244f6872b7a571a5f611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cb:42:81:15:4c:fb:4a:78:60:7c:c9:57:85:
b5:bd:2b:cf:49:7d:31:dd:b4:dd:e9:71:ad:84:27:
2b:36:fa:5d:5a:b3:6f:5b:29:bf:1c:6b:b7:88:be:
7b:f0:71:5e:69:20:05:4d:b3:fc:44:28:1a:c1:c9:
9e:48:c3:3c:ba:d7:9b:7f:7a:46:e9:ae:fe:24:89:
8a:e7:fb:47:06:95:ee:4c:d4:db:ff:a5:ae:7f:2a:
25:f4:40:87:e9:3b:c8:ce:7a:4d:5a:3e:62:c9:47:
49:e8:c3:37:47:5a:89:f3:b7:05:a9:fb:68:36:0d:
1c:7f:8a:33:af:40:b6:f4:d8:5b:a7:87:44:04:4a:
8a:42:f7:e0:22:e2:cd:76:b6:07:99:4a:be:9a:76:
a5:ac:67:44:e1:7a:3f:9d:f3:a8:66:d7:ea:b0:c8:
c9:68:b2:bc:63:e0:bf:10:03:b4:bd:56:97:ec:74:
a4:b5:7b:c8:1c:3a:e1:95:b1:61:45:d7:80:45:c8:
07:26:6a:d0:28:7a:35:26:92:eb:d6:f5:be:31:23:
e1:2b:68:28:8b:6d:e9:0b:39:b9:fe:21:51:41:b8:
d4:4b:4f:47:d7:2e:5b:c7:41:d7:29:53:d4:09:bb:
95:ca:bd:29:16:de:63:1c:ab:ba:a8:8a:1a:17:79:
e5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:06:21:4D:96:D8:48:A9:2B:E6:24:4F:68:72:B7:A5:71:A5:F6:11
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:56:f7:f3:ce:1d:d2:67:c9:5f:a9:e5:35:f1:2d:23:11:92:
0f:4f:a3:77:32:07:9f:1f:6e:8e:58:33:81:47:85:92:95:d3:
a8:44:9f:2d:7f:26:18:5c:92:56:65:c7:d8:55:3d:f4:30:c1:
3e:20:fe:71:87:bf:32:20:77:b0:79:2c:c3:a9:7c:4f:45:e6:
56:d4:bb:50:84:66:16:d5:dc:3c:bf:af:29:bf:4e:63:ea:f7:
06:14:dc:f2:9e:f0:a1:5c:a9:c6:fe:c8:b0:60:d6:0c:32:a8:
33:db:ef:47:2a:dc:8b:f4:81:81:94:5a:ba:57:2b:e2:a8:65:
af:85:49:b2:9a:7c:65:9d:e3:d6:9c:fb:73:49:dc:54:da:57:
72:c7:36:d3:65:58:7e:96:aa:92:10:3c:ef:58:be:f0:38:fb:
4b:44:67:1f:9e:ec:73:cd:44:43:9e:63:7c:9b:bb:12:4d:7f:
a8:37:eb:89:e7:fd:2c:35:ee:bb:89:ff:1e:aa:8f:c0:d6:e5:
2a:5c:ed:0c:28:b0:51:fa:d5:80:22:21:a4:9f:df:0a:e9:c3:
f7:78:8d:b9:0d:bd:55:a9:b6:67:70:55:f4:e0:55:ab:3d:56:
c4:64:92:1f:1a:c3:45:da:05:67:ae:87:98:e6:9e:6c:81:30:
35:62:50:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:54:13 2025 by rpki-client