Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File: J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier: HN1kqnHQKiAHp8jenXfi1Snr+1R6nrcU341hfDLfyVU=
Subject key identifier: 66:24:B4:FE:4A:C4:83:F3:87:6E:1D:AC:F9:49:E9:79:96:E9:3F:7F
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer: /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial: 01987DF78C80DCDF8FFAB893B37F815EBF9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 06:00:31 +0000
Manifest this update: Wed 06 Aug 2025 06:00:31 +0000
Manifest next update: Thu 07 Aug 2025 06:00:31 +0000
Files and hashes: 1: IjluqbVdM5zm7wvPSgQZOmXQjag.roa (hash: QKwqMUOeWOJatNvuP/XT/XSpsSd9RiOppxhqX3P9KPo=)
2: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: /x4olMhyeaoSLRksPFXpLaHXUZ3b1SQ9aqi9el/RWTQ=)
3: YY-hoyGXDDo8SiePezL_ZO2nNOw.roa (hash: A3j7uoljgavovkzwgqN6nFVhnXRD4UmTm39D3QvLFO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f7:8c:80:dc:df:8f:fa:b8:93:b3:7f:81:5e:bf:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Validity
Not Before: Aug 6 06:00:31 2025 GMT
Not After : Aug 7 06:00:31 2025 GMT
Subject: CN=6624b4fe4ac483f3876e1dacf949e97996e93f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:aa:66:86:ee:6e:85:bd:9f:d7:d7:de:0c:a5:
18:78:31:26:91:51:1c:0c:5f:23:d4:29:62:39:dd:
00:be:5a:ec:34:5e:5e:f4:6a:4c:29:8a:c6:26:7d:
3a:15:3b:65:78:68:fd:c7:f4:1a:42:c6:71:2c:94:
53:6b:59:cd:71:13:27:f4:c2:de:70:8f:c4:8c:53:
f7:68:59:72:ba:59:e5:b7:2d:92:47:7d:b2:6a:f8:
68:6d:15:ec:2c:68:da:24:2d:78:81:30:cd:77:76:
e1:58:d2:92:3c:cc:65:0a:7e:c1:2e:bd:0f:dd:09:
01:6a:4a:dd:6f:4e:a0:56:7d:2a:e8:41:ca:5f:52:
55:fd:97:98:ac:07:84:8e:78:c0:96:d4:81:23:5c:
f2:1f:c2:53:93:c2:97:56:c0:0d:ef:e2:de:be:04:
ca:32:b9:15:e4:60:82:c6:21:01:dc:a0:87:93:74:
4e:11:37:90:e0:96:71:4f:0b:36:84:cb:fe:17:c2:
89:eb:e1:40:44:b3:b2:38:79:0f:fe:25:4b:82:41:
d3:d3:26:d9:4e:71:85:b8:83:51:81:7e:51:e6:be:
31:ae:29:ff:db:95:1f:76:e1:c9:1a:d0:80:c3:d2:
e3:35:cf:b5:71:51:12:15:07:6e:5c:df:36:e6:9d:
18:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:24:B4:FE:4A:C4:83:F3:87:6E:1D:AC:F9:49:E9:79:96:E9:3F:7F
X509v3 Authority Key Identifier:
keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:08:10:44:4f:1d:79:c3:b1:ab:b7:e7:c1:80:b3:76:84:61:
71:db:46:1b:99:a4:90:d3:7e:31:7b:b3:19:a4:cc:2a:42:56:
cc:c8:b7:ed:af:d5:b5:99:ce:3c:9c:3b:ac:2f:2c:16:48:c7:
09:cf:a6:90:08:ce:21:66:af:ce:7c:5b:ac:3c:88:88:55:e3:
a8:9b:c8:2b:6e:a4:24:4a:76:dc:ab:33:75:b7:86:5d:6d:a6:
a2:0b:4d:de:8d:45:2c:81:c1:58:5e:3e:fc:83:33:58:ea:d2:
95:4d:2b:05:18:9b:97:6b:43:6c:a4:c9:d6:1b:1a:72:61:6e:
d0:e7:6f:cb:91:d6:bb:78:83:88:cb:a3:5f:9a:d5:6d:ce:b3:
9d:c4:10:4a:6d:1b:0e:7d:ae:7d:4a:1b:86:b4:57:ee:b5:56:
e7:c2:ed:c4:7f:79:2d:b8:da:80:b7:9d:95:75:d8:29:b9:5d:
f6:d3:c9:23:2d:aa:99:04:7c:bb:0b:26:4d:bf:fc:34:df:ef:
cd:f0:dd:46:20:ea:c7:03:93:78:0d:30:61:dd:01:ac:65:18:
4e:af:d6:aa:83:81:cc:6a:1d:55:9c:cb:c7:f1:06:fc:f5:eb:
df:9d:71:8c:b0:bf:3a:3a:af:bc:8e:87:0f:e4:85:ab:a0:6f:
22:78:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:22:56 2025 by rpki-client