Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: edJFezbK/jWS8hV7LTNC+zIVyZlpRL6PtNHB0hvYTIY=
Subject key identifier: B2:A7:17:65:55:5C:CC:4C:D8:1C:66:FC:CD:F1:C2:A4:1F:F6:0E:77
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 019773E476205766533C0E6FE7C674013BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 2C
Signing time: Sun 15 Jun 2025 14:00:41 +0000
Manifest this update: Sun 15 Jun 2025 14:00:41 +0000
Manifest next update: Mon 16 Jun 2025 14:00:41 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: xIR+dl0QV7UyOJ94J9L/bOOG6x+TsOBESBeO+VQRqoc=)
2: PXQZ8Kqy_mx9lBo5_cDxC51se1U.roa (hash: 9tHWBrF2ZmcSWuE44cZk0kByYXScp8kTGOAiMALH64w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:e4:76:20:57:66:53:3c:0e:6f:e7:c6:74:01:3b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Jun 15 14:00:41 2025 GMT
Not After : Jun 16 14:00:41 2025 GMT
Subject: CN=b2a71765555ccc4cd81c66fccdf1c2a41ff60e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2b:e5:e7:0f:e9:04:83:10:33:f1:28:0c:ec:
88:f1:1d:e0:12:53:d1:4b:a4:48:ba:06:ac:9b:53:
4e:3e:73:60:f8:0b:49:63:a0:bd:e5:22:41:47:6b:
c6:23:40:82:e8:e5:44:95:1f:1d:50:ba:76:27:7d:
c2:56:35:5c:d0:a3:20:fa:14:03:9a:45:56:81:1f:
c3:ee:63:3c:8a:56:8e:4f:5f:36:10:b6:7f:7d:0c:
c0:a1:c2:2c:88:9f:83:33:bc:fd:98:99:05:fd:17:
55:14:73:02:e0:14:f9:e1:48:19:a6:17:82:2d:95:
17:03:e4:e6:91:ea:27:44:62:62:5f:74:08:26:a2:
9e:0c:9e:0f:4a:77:15:1c:b9:a1:0c:12:d1:bd:eb:
5f:fe:38:63:ad:22:ac:e2:7f:81:76:6d:cf:6d:9a:
08:81:9f:f3:a5:86:29:c6:75:45:54:73:35:ce:00:
01:e5:e5:78:6d:01:1d:8e:c3:4c:cb:8a:1b:28:a5:
bd:b7:fb:3e:50:97:c8:38:0c:64:13:a5:25:1f:8e:
2a:76:d9:68:c7:6f:c4:b8:f9:fe:9e:bf:fb:b8:5a:
22:ec:4a:0b:32:8a:8f:b2:03:a8:04:6a:e2:13:a6:
64:c8:34:89:78:68:74:f2:de:ae:68:76:38:fe:97:
97:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A7:17:65:55:5C:CC:4C:D8:1C:66:FC:CD:F1:C2:A4:1F:F6:0E:77
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d6:e6:01:8b:c7:c6:52:39:cd:78:44:da:eb:b2:7c:dd:07:
c0:e1:d8:2a:3f:11:b5:e3:6a:02:e6:e3:f9:18:b9:eb:11:fb:
ee:b7:d1:d8:cd:e0:83:ac:dc:3e:84:72:8f:c6:88:2f:06:49:
d4:72:9f:fa:0c:a9:6c:20:5e:c3:22:06:aa:bf:00:57:ff:0e:
d1:2e:6b:b7:9c:6f:97:ee:da:0d:8e:7f:b1:8f:58:68:34:d7:
d0:bc:ea:d3:a8:90:16:8e:f0:df:ef:d2:93:76:37:b7:59:b3:
32:43:a4:45:25:29:ff:28:e5:5a:b7:0c:bc:00:e0:a0:74:6b:
ea:1e:d9:bf:93:bd:41:c2:a4:00:d4:28:39:b9:a4:ed:04:60:
79:be:37:56:8e:0a:e0:6f:27:af:89:bf:9a:1c:62:1a:09:8a:
9e:19:12:d5:34:b4:c8:15:30:b2:63:7d:85:dd:6b:44:e7:4f:
68:97:48:82:b2:6b:6a:1b:fa:66:86:af:cf:ab:c6:8e:95:f8:
90:ff:49:6c:8f:68:db:da:bd:b2:68:b0:b5:df:64:9b:f1:1b:
7e:a0:6d:42:06:e5:6f:db:9c:15:c5:63:11:7c:08:b4:ba:68:
60:84:42:72:fc:59:86:18:d2:fe:a3:88:73:ce:13:e0:79:a4:
56:20:08:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:07:11 2025 by rpki-client