
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
File: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft (raw, json)
Hash identifier: EiyKtFVmAhvrqjKzfJMSda5E8ZzJ3Fw+O5Rl8dJG8a4=
Subject key identifier: 46:C8:44:3D:19:15:CA:FE:9A:88:B4:1B:A3:D1:77:7A:AF:5D:9C:0D
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 01987298DC4C655B231A0E9CFD2E8345B6FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
Manifest number: 1323
Signing time: Mon 04 Aug 2025 01:01:17 +0000
Manifest this update: Mon 04 Aug 2025 01:01:17 +0000
Manifest next update: Tue 05 Aug 2025 01:01:17 +0000
Files and hashes: 1: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl (hash: 4pGbugzuDAOgsQDlcyT9966l23TWonYE65PHWRHqt/E=)
2: qT62sQgJ7wYZrGkOwUrBAOZW36U.roa (hash: LRDn9R97dLgxGAtTPJOW62pBW4f3rWtLvCdfekL/e2M=)
3: u-G-BjNkzDN41_akwDoArPHas8I.roa (hash: 3oV8r7qGwqy7avjI+jDPXV4J2Rs9RBfex18bpzCreTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:dc:4c:65:5b:23:1a:0e:9c:fd:2e:83:45:b6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Aug 4 01:01:17 2025 GMT
Not After : Aug 5 01:01:17 2025 GMT
Subject: CN=46c8443d1915cafe9a88b41ba3d1777aaf5d9c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:d5:89:2e:b9:9c:71:7a:7a:57:c8:af:a9:
01:d1:b3:66:07:d5:53:6b:c3:a3:7d:17:1a:f1:25:
3b:38:70:f4:8e:a6:ca:22:ce:84:9f:46:73:1c:a1:
47:45:87:5e:a6:a1:69:1f:38:6d:61:97:2d:33:b1:
ce:63:52:ca:32:6c:05:8c:b2:18:94:5f:13:b1:e2:
85:ac:93:87:70:39:f9:14:30:ed:12:d4:7d:99:76:
4f:9f:f8:74:54:74:2d:2f:c0:2c:49:56:b5:65:9c:
2c:ea:d5:7b:59:2b:41:d8:36:ff:56:8a:11:2f:75:
e9:bc:51:1e:36:d4:f1:2c:0c:93:cc:cc:64:52:73:
d1:2a:ea:07:21:48:03:7f:69:ed:72:ba:94:63:3d:
0d:72:08:ea:ac:5e:3f:d8:3e:80:9d:c3:18:34:e1:
ff:db:5c:2e:dd:80:a4:95:31:46:b2:ef:33:69:7b:
a5:e6:7c:02:ef:fb:13:c0:21:fa:9a:3a:b4:41:26:
c4:d7:65:79:2d:f4:0f:b9:24:f8:25:e7:fd:10:80:
73:2e:db:f0:ea:a8:a0:c5:65:34:3f:fa:f6:c0:2f:
ed:85:7b:7b:2d:f8:47:35:26:05:b5:40:4f:ac:ce:
cb:ce:fa:7d:9a:e0:fd:3a:2e:4f:c3:96:ac:65:0e:
9c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C8:44:3D:19:15:CA:FE:9A:88:B4:1B:A3:D1:77:7A:AF:5D:9C:0D
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2c:b1:23:12:69:6a:3d:6d:b6:3a:a8:60:57:1e:2f:0e:a4:
4c:1e:01:f1:b2:e2:8d:f0:20:d8:1c:44:0b:99:2d:44:b1:a1:
e4:0d:84:13:72:ab:b6:b8:9f:29:43:d5:83:9f:c2:93:da:25:
54:d0:e7:fb:36:a1:56:a5:06:db:2c:c7:72:4a:f1:94:df:fb:
ea:4a:78:2d:5b:6c:e9:94:10:cc:51:47:7e:e0:a4:13:61:3a:
4b:c7:1c:b5:39:2d:db:f0:88:32:94:a4:96:6a:c1:dd:43:0d:
d8:70:30:15:5c:1a:1c:aa:15:d5:28:04:ef:12:4c:a4:8c:30:
06:4c:fd:e5:6e:81:0a:a5:0a:63:68:06:5d:18:06:db:3a:64:
15:55:43:34:ed:bf:0d:3e:d3:6c:69:f5:11:1a:77:2c:15:3e:
a0:6d:c4:27:93:66:5c:e8:0a:ef:b1:da:69:c3:7b:21:b4:ed:
b2:44:1b:c0:26:6e:1a:4d:c8:13:da:90:20:07:a7:37:d7:49:
90:b6:49:68:d5:48:74:7b:26:42:b1:99:85:58:60:68:f0:93:
ce:eb:be:41:25:98:98:f0:de:97:e5:1b:11:88:56:8d:3e:73:
c8:e7:0f:61:03:53:be:dd:c3:27:64:34:1c:f1:28:10:20:3e:
c7:62:1f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:25 2025 by rpki-client