Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
File: J90kebrctAokpDax7cw2HD-mKvs.mft (raw, json)
Hash identifier: TZDg1zKTLpeBm21Xjal/xk6zto2XGJuJeB3Zc4/1fI4=
Subject key identifier: 06:8A:F6:7F:51:9A:05:D8:BD:F2:A7:FB:34:45:A9:73:59:5C:FD:B1
Authority key identifier: 27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
Certificate issuer: /CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Certificate serial: 0198741955D3FF809FF3EB136964CDB5C436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 08:01:14 +0000
Manifest this update: Mon 04 Aug 2025 08:01:14 +0000
Manifest next update: Tue 05 Aug 2025 08:01:14 +0000
Files and hashes: 1: J90kebrctAokpDax7cw2HD-mKvs.crl (hash: uSNr/vnoOEYI8mGH3LhdBH/zky6p5ATtKTBzWOtrehI=)
2: UimTjYOP0EzrCaiSFBeZrUyW0Nc.roa (hash: ICMmUQQ3EZmWfRi2Atl6bpgSoSc4L6nW+n1fJyzn1Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:55:d3:ff:80:9f:f3:eb:13:69:64:cd:b5:c4:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27dd2479badcb40a24a436b1edcc361c3fa62afb
Validity
Not Before: Aug 4 08:01:14 2025 GMT
Not After : Aug 5 08:01:14 2025 GMT
Subject: CN=068af67f519a05d8bdf2a7fb3445a973595cfdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0d:47:fd:73:cf:2d:ba:40:14:30:ef:cc:09:
02:8f:0e:86:c3:51:e4:f9:fc:bb:70:56:b9:79:97:
39:79:11:cd:c4:42:42:a5:c3:47:1e:d9:53:cf:55:
2e:3b:b9:96:d6:71:d8:ba:c4:4b:6d:a2:52:25:34:
48:01:cd:82:7d:a1:8c:5b:9c:20:5f:90:15:4f:a1:
14:db:17:bb:44:e9:78:89:cc:dc:3f:a9:f4:4b:40:
09:26:1d:ee:5c:63:2b:15:8f:5f:a5:89:52:89:62:
79:98:f0:3e:14:2c:96:28:47:ac:5e:ec:ab:c6:a2:
a4:a8:25:06:0b:0c:96:30:c2:ff:71:fa:35:11:64:
d8:fa:ea:4b:7d:15:7b:5c:fc:ab:4b:6f:cb:34:f1:
7c:af:1c:03:79:09:12:d4:47:aa:be:1b:5d:b9:97:
c0:9a:10:ce:ca:21:62:2b:d2:be:93:c7:05:5f:f4:
69:f4:43:b8:eb:9c:ca:2c:46:27:fa:8a:48:06:d0:
73:68:00:26:30:4b:f5:3a:91:91:fd:2e:a2:44:54:
b2:32:94:7d:cb:de:64:7a:9c:eb:4d:23:99:03:84:
b8:40:1e:45:0e:3d:c8:8a:91:c0:c8:d8:b8:57:f6:
5e:c2:ba:91:f6:d0:b6:be:73:ec:a2:36:5e:44:c7:
2b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:F6:7F:51:9A:05:D8:BD:F2:A7:FB:34:45:A9:73:59:5C:FD:B1
X509v3 Authority Key Identifier:
keyid:27:DD:24:79:BA:DC:B4:0A:24:A4:36:B1:ED:CC:36:1C:3F:A6:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J90kebrctAokpDax7cw2HD-mKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/794de3-39e6-4f2c-86f1-bc2c453c0ec8/1/J90kebrctAokpDax7cw2HD-mKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:cd:e0:78:4c:10:c4:6c:c0:b9:86:46:d5:c7:60:78:10:7d:
de:a6:65:a2:fd:9d:7b:88:98:18:49:10:ac:c2:b1:3b:b5:60:
1a:09:2b:8d:4f:66:f8:e4:c5:0c:93:18:4c:89:71:0c:90:f0:
86:a2:69:0f:9a:96:16:1c:84:33:19:60:4f:40:d9:9b:7a:51:
de:18:41:fa:5e:95:15:4f:e8:c6:46:d3:0b:17:15:6e:c6:04:
14:7f:09:07:09:41:10:91:59:d5:90:8c:a3:4b:2f:13:b6:a4:
0a:98:54:0a:45:37:5f:3d:d9:06:3b:d7:2e:45:4b:50:ad:3f:
28:15:bd:2e:ee:33:9d:ab:a5:83:0a:6a:ff:c5:98:11:48:cb:
07:6e:8b:94:60:5b:ac:28:1b:54:09:3f:e5:46:6e:16:81:26:
ed:61:70:71:6d:4b:c5:1e:42:64:2c:d0:00:3a:8a:39:82:35:
53:c3:3d:3f:4f:10:92:92:55:25:f8:4c:72:85:79:14:7d:6b:
0e:d5:40:ae:59:e3:5a:b7:a0:85:3d:88:44:c4:2d:3d:9e:c6:
53:d0:e8:ab:49:7f:34:33:63:8c:e1:98:48:cc:4f:5c:ff:e3:
88:b9:f4:37:0b:f7:5c:55:20:2b:73:19:d2:31:0d:1c:8a:62:
cb:c5:a3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:22:17 2025 by rpki-client