Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
File: J98EKCQnP8_z8JPQ-bHexpYLrmo.mft (raw, json)
Hash identifier: g9onFEfdefmcIbdPwX6tuHM4BQkvIruAnU5gzs5AX7s=
Subject key identifier: E6:78:E6:52:D1:B5:BB:5D:9A:AA:78:C3:3B:38:57:A9:AB:B6:EE:DF
Authority key identifier: 27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
Certificate issuer: /CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Certificate serial: 01987D8AC54E0CA1E599D653163D8AE42CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 04:01:43 +0000
Manifest this update: Wed 06 Aug 2025 04:01:43 +0000
Manifest next update: Thu 07 Aug 2025 04:01:43 +0000
Files and hashes: 1: J98EKCQnP8_z8JPQ-bHexpYLrmo.crl (hash: tVA5TcykuffvenYTYjrGfknq58zCv/zGB9VjifX4NWc=)
2: aaN-bs2N1cRQu6wVRlnpd2mwkBQ.roa (hash: /bC3V57krNUgmm/Cc9N1e1boJHyImaptM9rUrHdc9Es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:c5:4e:0c:a1:e5:99:d6:53:16:3d:8a:e4:2c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27df042824273fcff3f093d0f9b1dec6960bae6a
Validity
Not Before: Aug 6 04:01:43 2025 GMT
Not After : Aug 7 04:01:43 2025 GMT
Subject: CN=e678e652d1b5bb5d9aaa78c33b3857a9abb6eedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:b0:71:6f:21:c8:eb:b5:a6:dd:fa:14:97:
c4:83:14:1a:96:96:78:2b:50:53:2e:22:a9:70:da:
f3:b9:b6:73:c0:70:eb:67:73:fb:82:a1:bd:4b:c8:
d5:db:d5:54:1e:31:14:fa:30:37:d0:0e:91:d2:88:
ef:e5:e7:a2:7d:6b:83:55:fb:47:01:3e:d4:f8:01:
04:e9:5d:2a:d9:51:99:76:1a:44:84:82:b9:92:7f:
31:21:a9:c2:48:a3:9a:10:cf:6f:a0:fa:55:5b:a6:
b3:b4:2a:c6:d7:09:53:e0:99:25:ed:8f:87:cd:3a:
c5:81:a7:97:3c:49:fc:6e:bd:af:fb:40:93:78:8c:
74:fa:c2:66:71:51:0b:d6:30:bc:25:76:56:b4:c1:
73:b7:00:2f:02:cb:01:f4:b0:72:46:24:3f:70:74:
44:19:61:d2:47:bf:00:12:1f:d0:46:88:c9:a6:72:
4c:49:98:95:3a:6f:ad:58:e9:f4:7b:5b:12:12:c8:
ac:ed:4e:e7:64:86:ab:7b:66:58:21:9b:49:29:18:
25:20:d1:e0:95:7f:f0:bf:9e:3d:dd:4b:44:33:22:
4d:17:46:97:d1:94:02:fc:96:5d:e8:ab:17:37:1e:
85:09:e6:d0:f7:ff:94:53:67:4e:95:83:96:b0:eb:
f6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:78:E6:52:D1:B5:BB:5D:9A:AA:78:C3:3B:38:57:A9:AB:B6:EE:DF
X509v3 Authority Key Identifier:
keyid:27:DF:04:28:24:27:3F:CF:F3:F0:93:D0:F9:B1:DE:C6:96:0B:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J98EKCQnP8_z8JPQ-bHexpYLrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/acffd6-dc1e-4e0d-8d25-ce22d5eab82f/1/J98EKCQnP8_z8JPQ-bHexpYLrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:9c:f1:ec:ed:cb:16:c5:6e:0a:7c:03:85:ab:e0:26:bc:81:
f1:9b:24:ae:c7:e4:ec:63:bb:44:75:9e:ec:c5:96:5c:bc:d5:
83:47:74:ab:4d:3d:8c:99:6e:0a:4c:79:02:a5:85:67:15:5e:
d8:3e:21:08:ea:bb:af:1e:84:e7:41:66:1f:c7:97:9e:8a:6d:
5c:56:09:42:c1:4d:7c:f3:9b:bb:b7:b7:58:88:8c:13:f8:09:
21:a0:ab:51:81:86:a2:97:11:df:ad:14:0f:43:e1:7d:47:80:
af:f8:15:f6:da:65:3a:aa:aa:10:44:9e:86:83:27:0c:df:ae:
a3:ff:0b:51:48:e3:3e:cf:c7:30:a6:5e:d5:c8:e9:bb:b6:25:
2d:d2:fc:71:af:b5:d1:88:44:9b:de:56:28:0d:cc:8b:10:5e:
93:29:3f:13:de:3c:38:33:ea:dc:51:81:9c:fd:a0:77:da:b1:
f3:2f:09:2e:b1:03:b3:40:b6:92:d4:ed:a3:0d:29:b3:0a:de:
69:e5:ad:1b:b3:6c:8b:79:f5:e8:19:a5:81:64:88:1b:46:2d:
c6:98:77:2f:0a:66:d2:55:bb:53:f9:b7:37:ce:e6:c2:35:6f:
91:5d:ca:4e:44:70:da:e5:1e:d0:4d:66:59:96:8d:66:39:75:
86:89:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:14 2025 by rpki-client