Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
File: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft (raw, json)
Hash identifier: DAGyb4AO1toWfo5m46sR9Q+hJBqHnDMXjlqDwYU8IGQ=
Subject key identifier: CE:11:86:A4:A9:38:68:56:B8:5C:78:30:49:1F:27:48:EA:60:BD:13
Authority key identifier: 27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
Certificate issuer: /CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Certificate serial: 0198A015A4D12B095B455BC49FB8646A08D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
Manifest number: 93
Signing time: Tue 12 Aug 2025 21:00:29 +0000
Manifest this update: Tue 12 Aug 2025 21:00:29 +0000
Manifest next update: Wed 13 Aug 2025 21:00:29 +0000
Files and hashes: 1: 3GJ0bOfekp5L6arp0MI-w_XPimQ.roa (hash: 0lzM9+wo3VrPT3aYhPai/br06U/H49IVoIizC5oG8Xc=)
2: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl (hash: oeliC8Q3Lr7BEve5Br4+8JCaSlTaF8u06DmfnsWP80w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:15:a4:d1:2b:09:5b:45:5b:c4:9f:b8:64:6a:08:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Validity
Not Before: Aug 12 21:00:29 2025 GMT
Not After : Aug 13 21:00:29 2025 GMT
Subject: CN=ce1186a4a9386856b85c7830491f2748ea60bd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:40:03:bb:82:80:67:2c:03:3f:44:b5:7e:
07:60:29:4f:fa:8d:90:8c:33:fc:f6:35:05:10:11:
a8:10:50:36:d7:e4:24:4d:92:fc:88:8a:7e:c5:e9:
96:2b:f9:99:89:c7:8b:64:ff:8f:90:1f:ec:cf:75:
47:6b:97:36:d1:8e:7e:54:18:18:b6:77:cf:b5:a2:
1d:a1:57:25:83:d7:a2:4c:11:87:f7:50:d0:43:13:
b8:1d:e7:f7:b1:d0:22:75:0b:52:9c:62:f9:96:2d:
2d:56:db:42:76:d1:df:4c:46:a5:18:4f:4f:81:1b:
7a:0e:f8:c3:49:dd:7c:10:c3:10:81:40:f8:c9:fd:
48:3d:81:d1:20:f6:41:af:37:53:5b:c3:95:05:84:
ff:9e:81:48:e1:81:1a:71:cb:e3:d3:1c:d6:90:ca:
c9:d9:8a:9c:12:0b:67:32:55:72:b7:01:ae:57:61:
85:d1:25:7b:df:d3:c6:c0:60:80:52:dd:cb:0e:06:
53:ff:72:cb:63:e9:e3:e0:3c:d5:89:8c:2b:20:50:
c6:d4:a3:ba:6c:3b:c5:db:9f:f0:50:c1:31:7c:76:
8f:e3:ab:f3:de:db:22:be:1a:84:e3:ac:bb:d4:58:
a9:47:b6:79:a7:ae:ae:e7:55:f9:d1:86:a9:c2:88:
e8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:11:86:A4:A9:38:68:56:B8:5C:78:30:49:1F:27:48:EA:60:BD:13
X509v3 Authority Key Identifier:
keyid:27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:82:97:c2:b5:8e:31:2f:7a:85:54:21:87:11:68:44:86:f5:
86:4d:39:c4:6f:5b:22:25:ff:d8:79:8c:17:c5:ce:16:b6:6a:
1c:d2:47:a5:58:16:80:15:7b:37:bc:1c:9d:88:ae:bd:0b:c6:
bb:a8:75:31:c8:3a:a9:0b:a5:29:20:37:84:98:f6:68:d0:3c:
27:11:32:f8:49:df:7d:97:b0:fe:b8:80:3a:57:22:97:24:3b:
ad:f8:1e:30:95:be:49:17:77:58:99:52:c3:37:38:78:57:24:
a0:70:c9:a2:35:14:51:75:5b:64:4f:11:fa:dd:bc:1a:9c:54:
ec:57:d3:51:2b:40:f5:95:df:30:12:ca:4f:5e:0d:14:87:16:
39:85:91:79:7a:08:62:70:d6:61:2f:e9:6e:3a:2c:2d:75:b9:
df:94:34:5e:f2:42:ec:83:47:80:e3:29:eb:c2:a0:59:83:2c:
e5:39:81:14:11:57:73:d2:2a:30:a7:f7:b9:c3:43:cc:5d:f0:
e3:24:bc:18:cc:f1:a0:a2:4b:40:95:90:e0:ff:5f:7d:4b:98:
91:c0:d2:e1:33:9e:80:ed:dd:9d:16:59:a2:30:1a:24:cd:9a:
d0:e9:f4:10:91:5c:14:ac:42:f4:ba:45:15:be:d5:04:a8:96:
af:e1:b2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:26:10 2025 by rpki-client