Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
File: J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft (raw, json)
Hash identifier: J4xFz29NZxlXn1FTHGhUfI0qGn9tYWB+UsT1rtDNNiU=
Subject key identifier: F8:6E:37:AD:63:3F:A5:34:8E:95:61:BC:B5:66:2B:28:C0:A4:DE:09
Authority key identifier: 27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
Certificate issuer: /CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Certificate serial: 01989592A8D8382449B39D251CBAE3C9F2F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
Manifest number: 01D5
Signing time: Sun 10 Aug 2025 20:01:13 +0000
Manifest this update: Sun 10 Aug 2025 20:01:13 +0000
Manifest next update: Mon 11 Aug 2025 20:01:13 +0000
Files and hashes: 1: J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl (hash: HrD2JrOKSTtMdt3nZt4mqMp8nZDH+nFmr07sm1ge0f0=)
2: fTfqf3RzH3ibTJ1sVk6qwuCUTso.roa (hash: zZbWW91JqjxpGk5DcSBhXzXRcrXTOVjIQL0IYt57KX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:a8:d8:38:24:49:b3:9d:25:1c:ba:e3:c9:f2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27441605fdeb5d9c3deabee2f5d7c667d96fd8e0
Validity
Not Before: Aug 10 20:01:13 2025 GMT
Not After : Aug 11 20:01:13 2025 GMT
Subject: CN=f86e37ad633fa5348e9561bcb5662b28c0a4de09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:47:71:a7:32:e4:46:05:39:20:45:5d:06:
df:b6:fd:6b:8b:ec:00:b4:0b:82:49:9b:cb:9d:21:
6c:b7:c0:0d:77:06:cb:e7:d6:31:22:d3:24:74:b6:
b8:e7:ce:4b:31:30:fb:99:97:f4:ef:c3:d8:12:d4:
9a:5b:d1:e0:cc:1b:8c:5d:6e:3f:4e:62:08:d2:7a:
a5:a4:e5:34:82:f3:d6:11:94:c8:6f:32:06:41:56:
4e:96:3d:26:7c:b1:c0:7b:ac:00:7e:2a:aa:d1:99:
90:df:cb:37:31:3b:6d:7b:86:fd:44:00:16:15:af:
f2:43:e7:8e:91:12:0f:c2:7f:ff:e0:92:9c:3b:ac:
9a:7c:3d:fb:a5:d2:0d:84:6e:90:be:f0:20:27:25:
aa:b5:c8:93:e9:56:9d:af:f2:1d:10:e6:0f:59:86:
30:d6:2c:5d:0d:04:ea:3f:86:61:39:aa:12:9e:67:
cf:15:4a:39:fc:40:6c:04:49:52:21:78:1e:ab:0c:
cb:dd:65:9c:4e:67:3e:ab:5f:f8:ab:85:9d:df:33:
dd:5e:60:f6:65:82:de:bc:4e:ee:78:f7:b6:a1:d2:
75:fb:a0:cd:d0:b1:f0:50:c4:b7:aa:f7:9b:28:7b:
6c:0c:e7:6f:b0:1e:87:2f:09:ac:97:fe:0f:cb:fd:
68:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6E:37:AD:63:3F:A5:34:8E:95:61:BC:B5:66:2B:28:C0:A4:DE:09
X509v3 Authority Key Identifier:
keyid:27:44:16:05:FD:EB:5D:9C:3D:EA:BE:E2:F5:D7:C6:67:D9:6F:D8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0QWBf3rXZw96r7i9dfGZ9lv2OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36db54-c043-4554-8492-752c95c9cf79/1/J0QWBf3rXZw96r7i9dfGZ9lv2OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e3:1e:ab:db:a6:70:eb:e9:90:f4:28:ea:96:49:b4:b0:37:
31:be:36:bf:43:e3:8f:d6:60:2e:10:df:1a:9b:46:ff:b2:5b:
fa:a4:1f:8b:08:27:54:95:3e:7d:11:34:3c:d6:d0:1d:9a:c9:
d3:61:de:bd:df:f9:f6:bd:1f:9b:ed:48:c1:96:3a:f9:6b:c9:
64:62:6f:aa:44:11:d4:c8:4b:d8:46:5a:b7:11:2f:4f:62:c7:
46:f3:06:50:66:b4:dc:94:ec:da:0a:9f:b8:ee:99:5a:52:18:
cc:7b:b5:bb:ae:c1:98:b4:02:51:43:2a:89:67:86:6b:64:a3:
78:23:11:bc:8a:7e:d6:1a:b1:05:92:b5:15:a5:b4:ba:9b:37:
a2:e7:15:1c:53:48:c1:13:69:8a:44:ee:12:d5:9e:03:e6:77:
bc:c5:2d:c1:92:7b:01:e2:06:1e:83:ea:17:9a:c0:ec:48:5d:
2d:91:d5:8f:50:7a:f2:f2:38:9f:a1:73:0b:32:01:0f:6a:d4:
9a:27:76:0e:3d:9c:3c:c8:c5:23:7c:c7:70:06:43:c2:6b:fd:
f6:df:85:b6:76:03:98:62:b8:8e:e6:88:32:83:34:62:e9:2c:
a7:18:d6:49:07:9a:d5:06:9a:56:27:b0:83:36:97:d5:a4:66:
4a:39:83:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:48:37 2025 by rpki-client