Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
File: J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft (raw, json)
Hash identifier: 1xnO3jPOjzClZy917nMja9pU0dUaj1A3rKmtJczKOQ0=
Subject key identifier: 39:90:31:DD:C1:06:87:E9:EA:B3:02:FD:33:46:28:48:BF:3F:5A:FA
Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
Certificate issuer: /CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Certificate serial: 01988D33CF2DB2C7DA1A69DEC4225A732348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 05:00:39 +0000
Manifest this update: Sat 09 Aug 2025 05:00:39 +0000
Manifest next update: Sun 10 Aug 2025 05:00:39 +0000
Files and hashes: 1: J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl (hash: oxUYz6PEtUEFrL8I260TUjJ42eiMtH06VhzvfgMrnI0=)
2: hwA0UWKL_slMireOaLXKWCZKMxk.roa (hash: Cs+6QJ4Ir+A+/zhLEyGmKYQ1SWGWIXNvlkhllKogGis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:33:cf:2d:b2:c7:da:1a:69:de:c4:22:5a:73:23:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Validity
Not Before: Aug 9 05:00:39 2025 GMT
Not After : Aug 10 05:00:39 2025 GMT
Subject: CN=399031ddc10687e9eab302fd33462848bf3f5afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:7d:38:3f:09:7a:32:bf:77:f6:5b:b0:73:
2b:5a:ee:51:4f:53:44:c5:d2:67:7e:bd:07:20:bb:
50:60:02:ac:72:b6:a8:ce:4e:fc:36:9b:34:31:32:
25:cf:67:68:cf:d9:53:ca:b9:ca:2a:c6:b6:88:82:
8d:78:a0:0b:66:bb:df:09:c3:66:02:34:52:21:a1:
8b:58:8b:97:80:9e:79:c4:3d:3d:28:6b:39:67:79:
82:8b:47:9b:e4:bd:eb:1e:2f:9b:c2:ed:55:c3:76:
64:8c:6d:2b:90:5e:8f:46:62:37:55:7a:e0:9c:de:
55:d8:a3:49:49:71:7a:8c:92:22:6a:2f:18:36:22:
a0:73:08:3e:e5:b2:be:f5:d0:dd:d0:59:cd:d1:9b:
fc:08:36:b6:61:15:cc:c1:08:cd:99:1a:2c:3e:60:
89:9d:1e:89:a3:8d:4e:58:11:cc:07:09:e6:ac:f3:
e7:a9:12:7e:06:54:e5:7f:a2:0b:6f:9f:56:22:ec:
b9:77:74:8d:d0:9b:2c:2a:5c:64:f1:d8:3e:9f:c7:
5d:a3:88:67:c5:f0:4a:38:ef:25:29:2f:75:a4:0c:
f4:f0:0c:85:70:b7:69:fd:65:53:31:6f:cc:f4:09:
2f:33:7d:58:fe:94:04:76:ac:d9:4c:8f:97:69:1f:
c6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:90:31:DD:C1:06:87:E9:EA:B3:02:FD:33:46:28:48:BF:3F:5A:FA
X509v3 Authority Key Identifier:
keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7e:2e:08:c5:fb:23:8f:b2:fd:d2:e8:0a:66:60:82:35:3d:
21:b6:f4:c8:0d:15:e1:7a:3b:48:da:af:6b:46:9c:63:92:cf:
86:71:aa:13:2a:29:b5:c9:a6:cf:8b:24:19:e8:3d:3e:57:66:
9f:30:b7:da:34:fa:e9:c4:49:cc:16:2c:79:60:30:3f:78:f2:
3f:dd:89:66:1c:da:6b:ed:8a:f9:0e:0f:5a:8f:cd:f1:ce:25:
4e:af:68:31:18:ba:c0:f6:95:1d:10:0a:69:f7:e5:7d:24:71:
19:c4:b3:8a:8d:23:db:c7:e1:b3:47:0e:e8:dc:a1:c0:ed:b4:
5a:90:e7:97:13:fa:4a:08:05:ae:37:c7:5f:35:da:ec:4c:03:
e9:02:11:9f:10:b7:55:6b:93:9d:c0:0b:0f:2c:d3:31:aa:1b:
16:79:a7:46:9e:06:0f:ac:68:a9:c2:49:87:b6:b4:11:a5:ef:
02:bc:d2:f9:53:03:c8:c0:ec:5c:3b:8e:f4:0f:b1:e8:a7:15:
11:23:40:32:46:59:1a:5f:22:c2:cd:b5:5b:2f:b9:6f:b5:27:
3b:28:da:b2:6b:f0:f4:68:ed:bd:25:2c:29:14:74:75:10:0c:
76:1f:50:54:c0:e2:4c:a8:71:e3:8e:df:ca:b5:8e:21:a8:96:
5f:9b:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:39 2025 by rpki-client