Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
File: J_whhWzY4Denu4xjkqYZghOotPY.mft (raw, json)
Hash identifier: of7FxDqNtT5CbTUI31LEVzGSPmxD3sLZ4GOCuf80ofc=
Subject key identifier: 3C:DB:E0:06:6C:A0:7B:88:2B:6B:1A:6A:91:95:0D:E3:8A:08:AB:04
Authority key identifier: 27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
Certificate issuer: /CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Certificate serial: 019890DA07050ADD24B79E7D15DE51B86A98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
Manifest number: 0D07
Signing time: Sat 09 Aug 2025 22:01:04 +0000
Manifest this update: Sat 09 Aug 2025 22:01:04 +0000
Manifest next update: Sun 10 Aug 2025 22:01:04 +0000
Files and hashes: 1: J_whhWzY4Denu4xjkqYZghOotPY.crl (hash: x46vOqNfgr0brjUa80cdJgTZoWv89gB7grkdjFIcvAo=)
2: UEg2a8frOwQJ_ocv6mZt898VwKc.roa (hash: HhDZ6hinLTKa6qeDqW6QogtlJ6a4udPeZaa3rESZ/rM=)
3: zUk84pMkBH7qM-5eyE2RTVXesY8.roa (hash: 1Rye/GoMkKTXa8JBFflyaNlKfqeLYK+b0R1zK9MVT4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:07:05:0a:dd:24:b7:9e:7d:15:de:51:b8:6a:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27fc21856cd8e037a7bb8c6392a6198213a8b4f6
Validity
Not Before: Aug 9 22:01:04 2025 GMT
Not After : Aug 10 22:01:04 2025 GMT
Subject: CN=3cdbe0066ca07b882b6b1a6a91950de38a08ab04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:45:a1:48:d0:59:3f:b6:6e:31:36:38:fe:78:
31:3e:75:50:83:61:44:7d:c1:18:89:85:ca:8e:48:
3f:e2:3c:96:1c:58:74:38:7d:00:19:9d:ca:02:74:
e6:1c:cc:14:ea:4a:16:6e:59:90:fe:94:4f:68:31:
31:cf:76:67:e1:27:09:92:6f:cd:bc:58:37:45:b2:
16:4e:e6:00:46:fc:2a:9c:8e:31:2f:be:4f:ad:56:
89:5e:cf:65:a4:9a:5f:e2:eb:01:44:fc:38:b5:78:
de:d9:82:b7:8c:44:ad:19:79:0d:2b:8f:3f:b2:57:
60:81:89:b2:93:19:18:ac:2a:82:65:ce:60:7b:1b:
e5:5b:7a:01:5a:22:5b:5b:15:54:68:35:14:8c:a2:
25:c5:3a:c9:63:2e:2d:b9:8d:5f:f5:4e:93:36:5a:
30:77:64:9a:51:a0:21:6e:8c:5c:31:4f:c1:2e:03:
7f:40:bf:39:0e:99:b4:a3:9e:d9:6b:08:9b:e8:6f:
cc:c4:fd:a9:a7:2a:99:82:cd:7c:84:44:77:4b:82:
14:98:4e:39:08:91:59:56:c3:76:e9:7c:87:5e:4e:
a2:fb:85:02:76:3a:44:ff:84:57:b8:98:37:7e:2c:
8d:42:22:cc:f2:98:c0:e2:27:77:eb:7d:db:42:5b:
a8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DB:E0:06:6C:A0:7B:88:2B:6B:1A:6A:91:95:0D:E3:8A:08:AB:04
X509v3 Authority Key Identifier:
keyid:27:FC:21:85:6C:D8:E0:37:A7:BB:8C:63:92:A6:19:82:13:A8:B4:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_whhWzY4Denu4xjkqYZghOotPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c7fa48-2876-422b-8825-e1f367e79620/1/J_whhWzY4Denu4xjkqYZghOotPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7c:04:bd:c9:44:bd:3c:60:c2:dc:09:93:1c:26:9d:f1:b4:
93:a3:9a:58:6c:9b:67:c4:29:8d:27:4a:69:d6:16:63:24:6b:
60:9e:ce:de:15:88:d8:2a:de:0e:66:c2:e7:2d:be:be:4d:6d:
62:2d:a8:fd:68:4c:01:52:41:9f:b1:a8:dd:f7:56:df:6e:7b:
ba:6c:ae:90:66:c0:fb:1d:cb:8f:df:43:ed:6b:c4:5b:46:e1:
06:76:ae:ac:03:fe:6a:d4:b3:54:a9:ec:67:fb:20:d7:dd:94:
52:80:15:c9:00:ed:ad:ca:3a:93:1a:4f:85:69:9c:2a:9c:24:
d6:d1:6a:a4:a5:ec:be:1a:a5:c1:5b:10:d3:b9:12:4a:6d:95:
87:c8:64:e0:4b:b1:10:01:fa:1a:e9:c5:d6:34:a8:6b:7b:c0:
ff:2a:85:75:4c:c3:09:01:a4:92:96:69:8c:3f:3b:e0:29:b7:
dd:ea:c2:da:10:42:9e:1f:ec:7b:92:f0:a8:5a:a3:35:2b:b3:
bc:e7:63:f5:77:93:a0:06:d1:b8:c6:ae:96:88:cc:12:a8:e0:
8e:80:58:30:7e:a3:39:a7:33:b3:05:1d:14:a0:1a:c6:62:85:
37:90:ee:e2:0d:c7:ca:3d:5d:13:89:8f:e0:62:ba:a8:d5:31:
ee:38:09:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQ2gcFCt0kt559Fd5RuGqYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZmMyMTg1NmNkOGUwMzdhN2JiOGM2MzkyYTYxOTgyMTNh
OGI0ZjYwHhcNMjUwODA5MjIwMTA0WhcNMjUwODEwMjIwMTA0WjAzMTEwLwYDVQQD
EygzY2RiZTAwNjZjYTA3Yjg4MmI2YjFhNmE5MTk1MGRlMzhhMDhhYjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkWhSNBZP7ZuMTY4/ngxPnVQg2FE
fcEYiYXKjkg/4jyWHFh0OH0AGZ3KAnTmHMwU6koWblmQ/pRPaDExz3Zn4ScJkm/N
vFg3RbIWTuYARvwqnI4xL75PrVaJXs9lpJpf4usBRPw4tXje2YK3jEStGXkNK48/
sldggYmykxkYrCqCZc5gexvlW3oBWiJbWxVUaDUUjKIlxTrJYy4tuY1f9U6TNlow
d2SaUaAhboxcMU/BLgN/QL85Dpm0o57Zawib6G/MxP2ppyqZgs18hER3S4IUmE45
CJFZVsN26XyHXk6i+4UCdjpE/4RXuJg3fiyNQiLM8pjA4id3633bQluorwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDzb4AZsoHuIK2saapGVDeOKCKsEMB8GA1UdIwQY
MBaAFCf8IYVs2OA3p7uMY5KmGYITqLT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jN2ZhNDgtMjg3Ni00MjJiLTg4MjUt
ZTFmMzY3ZTc5NjIwLzEvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9jN2ZhNDgtMjg3Ni00MjJiLTg4MjUtZTFmMzY3ZTc5NjIw
LzEvSl93aGhXelk0RGVudTR4amtxWVpnaE9vdFBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXwEvclE
vTxgwtwJkxwmnfG0k6OaWGybZ8QpjSdKadYWYyRrYJ7O3hWI2CreDmbC5y2+vk1t
Yi2o/WhMAVJBn7Go3fdW3257umyukGbA+x3Lj99D7WvEW0bhBnaurAP+atSzVKns
Z/sg192UUoAVyQDtrco6kxpPhWmcKpwk1tFqpKXsvhqlwVsQ07kSSm2Vh8hk4Eux
EAH6GunF1jSoa3vA/yqFdUzDCQGkkpZpjD874Cm33erC2hBCnh/se5LwqFqjNSuz
vOdj9XeToAbRuMaulojMEqjgjoBYMH6jOaczswUdFKAaxmKFN5Du4g3Hyj1dE4mP
4GK6qNUx7jgJxg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:34:42 2025 by rpki-client