Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
File: J5YqM_0jSHgawSOhJyKghu6Pun0.mft (raw, json)
Hash identifier: aPSKmNcdRGyo+WahDsPSc9lYx5dGgNwgQANoIWys6Xk=
Subject key identifier: FB:52:A6:7C:30:4C:2A:C7:DD:AC:A7:C2:97:1E:E5:B5:88:B8:6D:2D
Authority key identifier: 27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
Certificate issuer: /CN=27962a33fd2348781ac123a12722a086ee8fba7d
Certificate serial: 019897809DC9E312D8B13B23956E53D33682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 05:00:45 +0000
Manifest this update: Mon 11 Aug 2025 05:00:45 +0000
Manifest next update: Tue 12 Aug 2025 05:00:45 +0000
Files and hashes: 1: J5YqM_0jSHgawSOhJyKghu6Pun0.crl (hash: z00CWDb4vg3Zm2LKJhZdgGmSlxtvl859uDnEDW8cnL4=)
2: hTYp4tVFk2Iv0MXe_TkiKDxhHf0.roa (hash: 6GO6BRanOpSP6VfdzTHxANKln0jgA0SAFTnzf0Z3Hfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:80:9d:c9:e3:12:d8:b1:3b:23:95:6e:53:d3:36:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27962a33fd2348781ac123a12722a086ee8fba7d
Validity
Not Before: Aug 11 05:00:45 2025 GMT
Not After : Aug 12 05:00:45 2025 GMT
Subject: CN=fb52a67c304c2ac7ddaca7c2971ee5b588b86d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:56:eb:fb:47:09:8e:93:e7:7a:ae:c8:a2:
ee:6d:2d:b4:a1:d5:8f:15:02:27:fa:25:d0:97:c3:
b5:8a:10:42:2f:8c:dd:cb:65:0a:ee:15:2d:b2:90:
f6:8b:15:c1:5e:86:14:a5:fc:99:f5:d7:df:10:5b:
a7:35:cb:ad:8e:27:23:f6:6a:f8:0e:2f:db:f6:c9:
c5:cd:43:d8:22:15:d8:ee:fc:45:01:4c:cc:bb:92:
02:2b:da:b8:fc:5b:06:44:4b:3a:59:01:b9:a5:55:
82:d6:59:b8:38:16:b4:23:4b:81:47:c1:07:b9:9d:
74:83:9e:27:bc:9b:4c:2a:ec:b0:d3:69:86:da:01:
15:93:77:e0:31:3f:ad:96:65:83:f2:d6:ed:83:13:
75:d7:c4:50:5b:96:ed:a6:dc:7d:89:ba:3e:89:38:
7a:3f:18:ca:5a:6d:2b:cb:9d:e2:67:73:20:d7:dd:
ff:87:c2:f7:b9:4a:a7:9a:84:14:18:07:44:b7:c5:
67:b9:50:ba:90:d5:06:0e:e1:36:9d:6b:49:46:c6:
01:72:4e:f4:ba:b7:bc:67:f4:20:14:69:82:8c:45:
6f:87:ec:f2:47:80:fd:29:5d:44:0a:0a:95:7e:48:
a0:71:8d:74:0a:19:0a:48:eb:25:1d:e6:40:ef:8f:
4f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:52:A6:7C:30:4C:2A:C7:DD:AC:A7:C2:97:1E:E5:B5:88:B8:6D:2D
X509v3 Authority Key Identifier:
keyid:27:96:2A:33:FD:23:48:78:1A:C1:23:A1:27:22:A0:86:EE:8F:BA:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5YqM_0jSHgawSOhJyKghu6Pun0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1145d2-b1bd-4a57-a44d-bb6bffe66ff3/1/J5YqM_0jSHgawSOhJyKghu6Pun0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:46:46:96:bc:23:42:d5:ad:33:eb:3c:de:cc:44:3c:1f:84:
54:13:c2:a8:02:a8:70:29:ec:df:78:35:4f:9a:12:c5:ff:99:
92:68:3f:4a:52:eb:bb:d4:30:71:fb:31:65:ce:03:9b:10:e9:
b5:7a:72:77:97:ac:8e:f4:1a:4c:e1:7d:f3:e9:b0:c1:bf:e3:
b0:e8:95:e4:c9:94:0f:d7:3e:b9:27:38:dd:f7:fd:4f:55:6c:
2c:d7:05:c3:8c:a2:d8:ba:ac:39:ea:6d:4b:c4:83:3c:de:e8:
d5:9b:14:7f:d9:d9:d1:3c:12:c3:d2:99:32:3d:a7:2a:7d:62:
62:68:4f:33:9f:77:bc:65:49:2a:93:87:6d:65:5d:60:6f:24:
cc:a3:10:a2:e9:c6:4d:25:85:12:77:df:d6:f9:03:80:53:d6:
06:a0:3c:ad:ed:89:95:39:6f:a6:be:02:ea:1b:3f:6b:15:02:
54:c1:ad:9f:9f:01:84:f7:75:fd:9c:e7:53:29:a6:ff:fd:30:
22:4d:28:64:8d:58:4c:3b:52:10:96:c7:6d:d4:ee:92:d1:2f:
50:a7:56:09:fb:fd:39:81:33:bc:01:a7:79:f1:f0:26:98:0f:
08:13:1a:7a:cb:d5:fa:c7:b4:d8:15:58:f2:4d:42:f6:16:f7:
ac:f8:f4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:24:32 2025 by rpki-client