Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
File: J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json)
Hash identifier: g40gKQwappc/sNi2hMzGEpn3sTeCo6DRRHoKgiMkJS4=
Subject key identifier: 67:6B:90:BC:97:9B:E2:A8:57:7A:A3:A9:82:A9:90:3A:13:77:91:FB
Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
Certificate issuer: /CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Certificate serial: 01989592D86F566D2BEE91456232EF8707B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
Manifest number: 15B7
Signing time: Sun 10 Aug 2025 20:01:25 +0000
Manifest this update: Sun 10 Aug 2025 20:01:25 +0000
Manifest next update: Mon 11 Aug 2025 20:01:25 +0000
Files and hashes: 1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: 5EhnshVGhyvAx+JZxMM7ZBCOemwlrqh2S72Wnkdt8iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:d8:6f:56:6d:2b:ee:91:45:62:32:ef:87:07:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Validity
Not Before: Aug 10 20:01:25 2025 GMT
Not After : Aug 11 20:01:25 2025 GMT
Subject: CN=676b90bc979be2a8577aa3a982a9903a137791fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:40:37:c1:8e:33:54:b9:ff:96:ff:20:64:b1:
59:bc:74:90:55:5b:d8:c8:d7:48:0f:e2:91:f0:b9:
87:a8:0c:f7:4a:b0:ae:17:4f:23:5a:21:9e:d1:93:
19:31:f9:31:fb:28:c8:af:3b:2d:79:f4:31:85:b8:
98:91:62:9c:bb:bd:55:b1:dc:f9:d8:16:b6:a9:49:
50:6e:35:2e:6a:82:59:94:7a:e1:d2:89:5e:ea:f5:
4e:da:60:16:3f:ff:1e:0f:5e:87:28:d9:45:98:d7:
d2:7c:b7:5c:ee:e1:8b:f0:d0:89:27:68:c4:6a:68:
57:60:6b:dd:6e:ad:06:03:82:c2:8c:0c:29:fe:ba:
15:57:5f:45:23:60:61:94:0c:35:fa:eb:99:83:75:
75:d8:7e:1f:a1:13:4e:d2:08:be:b3:97:fa:7c:a8:
5a:46:7f:95:4e:49:76:d3:1c:b2:45:d4:99:7a:95:
c2:40:6a:ca:a9:71:b2:3e:dc:45:39:5a:ec:63:24:
31:6b:2a:8e:50:e7:db:13:eb:71:aa:fc:70:a9:ca:
b7:f0:10:13:fa:db:b2:87:c3:7d:fe:d2:61:e0:b7:
bf:08:72:a0:7b:5b:ee:30:41:67:be:f9:9f:cd:d8:
ec:f9:96:d5:70:d4:ae:5a:95:f3:30:f3:6b:9b:71:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6B:90:BC:97:9B:E2:A8:57:7A:A3:A9:82:A9:90:3A:13:77:91:FB
X509v3 Authority Key Identifier:
keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ba:3b:a3:49:a1:c7:40:5b:89:82:9c:fe:72:ef:10:c2:e9:
dd:36:16:dd:62:78:b9:13:6f:02:fd:c0:55:64:2e:e9:eb:0a:
9d:ce:0e:fb:1d:1b:d5:58:e6:12:66:df:64:b9:b8:e1:9f:7e:
9f:5a:29:1c:bc:ec:75:4b:4d:66:a7:16:82:3f:01:40:40:60:
43:73:18:d9:e0:b8:4d:15:88:5f:53:62:48:65:1b:76:bb:d5:
c5:69:0c:da:12:a2:a9:ea:92:c3:53:19:eb:d2:b2:5b:76:c2:
c9:86:b4:ac:44:ef:9a:1f:8a:66:43:01:4f:fb:e0:70:57:a9:
af:58:2e:f9:45:ef:51:a4:cb:8f:66:43:df:d2:ba:d7:56:3c:
ab:9c:10:bf:c3:5b:66:69:7e:35:49:73:d6:83:64:2b:d0:e6:
ab:f3:2d:c2:d9:75:13:04:c0:b5:72:85:d7:f2:d5:9d:b7:89:
e9:98:f3:88:7f:07:84:99:58:d4:69:e3:36:fc:c0:79:2c:03:
46:5e:75:76:b7:75:b2:a3:82:c0:18:d9:71:b9:d8:19:aa:0a:
ed:d9:b6:d3:fd:e4:24:0f:45:5d:68:2d:83:3c:be:9c:80:02:
e1:d4:4e:5f:23:2f:03:3b:24:cc:c0:77:53:bd:76:3b:cf:af:
ef:a2:e7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:04:22 2025 by rpki-client