Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
File: J2zuYEMhsPEryjZ7VMBzmqil8To.mft (raw, json)
Hash identifier: pMJUMCUH0Ei0v57isJr2hrjCdsZxCY3WHql7yj8HHRM=
Subject key identifier: 4E:9D:60:C5:3B:2C:3D:16:85:32:C3:C2:F4:0A:45:22:9C:5B:49:CB
Authority key identifier: 27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
Certificate issuer: /CN=276cee604321b0f12bca367b54c0739aa8a5f13a
Certificate serial: 019873E34B325B78EE8BCDDB5EA0E2A4EB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
Manifest number: 0F69
Signing time: Mon 04 Aug 2025 07:02:12 +0000
Manifest this update: Mon 04 Aug 2025 07:02:12 +0000
Manifest next update: Tue 05 Aug 2025 07:02:12 +0000
Files and hashes: 1: J2zuYEMhsPEryjZ7VMBzmqil8To.crl (hash: mVD0GL3psf+kTMaVpI8hh+RDxsfh3EjN1VHIJ5Y+N/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:4b:32:5b:78:ee:8b:cd:db:5e:a0:e2:a4:eb:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=276cee604321b0f12bca367b54c0739aa8a5f13a
Validity
Not Before: Aug 4 07:02:12 2025 GMT
Not After : Aug 5 07:02:12 2025 GMT
Subject: CN=4e9d60c53b2c3d168532c3c2f40a45229c5b49cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:dc:29:94:f7:85:a2:78:2d:bf:35:77:df:
7e:b8:4a:06:32:80:4c:5d:69:ab:7b:78:3c:77:ad:
b4:82:8b:97:ca:83:f7:fe:a8:a6:00:a4:2b:4b:5f:
8e:c9:10:52:12:f6:5f:08:b3:38:f1:d2:bf:d9:29:
77:8f:eb:d1:21:35:41:1d:bc:7e:f5:02:72:c3:ea:
f0:cd:ad:cc:0b:a0:7b:e2:96:f0:c2:a8:20:c1:02:
6f:53:5d:23:ef:25:fd:13:8a:45:56:df:6d:ee:c6:
ae:09:ce:9b:c4:33:91:c3:08:01:62:f2:cc:91:40:
f4:bd:b3:a8:12:45:1d:38:96:4a:8e:eb:9b:3c:27:
f6:c1:c9:b2:7c:0b:75:e4:f2:34:93:ba:f2:bd:86:
b3:76:6b:d3:a8:f4:98:96:10:5c:d9:63:26:05:ff:
f9:75:39:2e:74:13:41:2c:50:2a:df:5b:de:7c:1c:
de:6d:94:94:47:e4:60:9d:44:83:3d:be:98:07:82:
a5:ff:ed:23:7f:3c:8e:c5:3a:20:3a:39:f8:c9:58:
c0:ca:3a:ba:a0:96:61:08:b7:18:36:ca:98:29:7f:
97:c7:76:b7:db:15:28:08:43:03:7f:ad:dd:d5:ae:
ca:05:4e:7f:ac:73:c5:44:5d:42:b2:c9:2c:cd:84:
68:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9D:60:C5:3B:2C:3D:16:85:32:C3:C2:F4:0A:45:22:9C:5B:49:CB
X509v3 Authority Key Identifier:
keyid:27:6C:EE:60:43:21:B0:F1:2B:CA:36:7B:54:C0:73:9A:A8:A5:F1:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2zuYEMhsPEryjZ7VMBzmqil8To.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a59955-86cf-4655-a1f8-258954b4fe5a/1/J2zuYEMhsPEryjZ7VMBzmqil8To.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a4:32:5c:16:4c:2e:c7:d7:06:4e:fd:e2:fe:ac:97:fc:b3:
a7:64:16:62:25:d6:f9:ec:8a:8c:aa:42:a7:e6:eb:16:e5:90:
6e:47:84:6c:be:ef:dc:55:bf:2b:42:58:36:b9:a1:dc:2c:a8:
05:28:90:31:e4:cf:ec:e0:1f:72:ba:58:9a:5b:d0:1b:ae:c2:
25:b6:37:5a:9f:1e:8b:79:88:f6:02:0a:c9:8b:3b:29:7a:26:
4b:54:ea:5e:a7:b4:fc:0c:af:a1:60:7d:97:41:9f:2a:cd:2d:
36:8e:85:be:b6:ec:f0:90:3a:4f:3c:f1:cf:d3:7d:e8:8a:cc:
1a:43:79:be:57:7a:68:16:db:52:80:fd:d7:04:56:6f:91:e7:
c4:a4:15:e5:ca:a0:5b:66:d9:58:51:73:b7:c5:ad:38:df:17:
d5:30:d2:aa:de:b5:ca:c0:f1:f3:fb:14:eb:c0:90:7d:0e:ab:
8c:d4:31:68:65:de:20:2d:f0:69:04:81:0e:78:17:14:c3:80:
30:fa:bb:7b:fa:3d:84:3e:6a:b5:e6:90:f7:b3:39:37:6c:1b:
6a:e2:9f:3f:03:78:9c:de:84:df:c9:cd:35:df:49:bf:e2:97:
40:8c:77:e0:53:b3:ef:c9:94:6b:6e:84:0a:6c:03:b2:fb:7d:
27:52:58:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:50:27 2025 by rpki-client