Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: bI0NBPYi2VMy6H92BFQu28fxorK9XmW/qhZegy5LcCk=
Subject key identifier: B9:62:D0:0B:52:52:A2:30:5C:6D:CA:4F:F7:38:78:06:53:74:39:C3
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 019890DAB5791082EBB8D608CEB4900EC0FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 1486
Signing time: Sat 09 Aug 2025 22:01:49 +0000
Manifest this update: Sat 09 Aug 2025 22:01:49 +0000
Manifest next update: Sun 10 Aug 2025 22:01:49 +0000
Files and hashes: 1: 3WjmScxyPShGMsEmfTcZS4RZUd0.roa (hash: 5cWtsZDvpUp+XvqnrWOkzcAs96EsLhbvVP+8UGNRG5Q=)
2: Fi_TM4K4PYpSezLxC5qNEiPOZ3Q.roa (hash: DTiudzjdSu7JP8slciOiBe/Ykx5OQa6RusVSJBvKWj0=)
3: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: ZCZySzF5W24pr7I3vKMisM3eHbqwvgOefLDVLJT3+HY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 22:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:da:b5:79:10:82:eb:b8:d6:08:ce:b4:90:0e:c0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Aug 9 22:01:49 2025 GMT
Not After : Aug 10 22:01:49 2025 GMT
Subject: CN=b962d00b5252a2305c6dca4ff7387806537439c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:33:79:9a:72:6b:dd:3d:b5:30:53:f3:8c:68:
3e:5d:8b:0d:32:fa:cd:c6:34:52:0d:e4:05:d2:a8:
d5:98:08:34:e2:df:41:2e:21:9a:ae:66:0b:4c:cb:
65:a5:09:9f:26:1f:b3:ec:a3:5f:24:07:fe:2e:9a:
d8:69:7a:4e:99:c3:c7:b4:d0:1a:9f:d9:a8:26:63:
f4:23:29:f6:09:e7:52:a8:32:56:a6:a7:7e:aa:b9:
0a:ef:6d:c9:53:e0:e5:e1:86:a9:f1:1b:98:51:0c:
18:c9:44:40:f3:0c:ed:a2:23:07:56:82:4b:a2:dc:
0f:bc:d3:15:cb:7d:01:e6:14:12:3a:42:02:98:57:
83:67:c7:51:fb:0c:aa:ca:9c:89:b7:93:ac:ba:14:
62:03:af:1a:cc:8a:3d:13:39:5e:35:bc:72:81:45:
cc:9a:ec:e2:6d:23:9a:cf:95:8a:b7:ba:92:83:6a:
d7:33:54:21:66:ec:a5:05:4d:eb:df:c7:e3:ed:66:
b9:45:d8:42:17:e9:64:2b:d6:fb:70:f9:80:86:8a:
55:c0:23:e2:18:d1:7a:50:95:0e:2e:bb:6e:db:1e:
9f:2d:a6:be:42:68:3a:09:6c:56:d0:4f:80:a7:02:
04:ef:e2:8a:bf:bc:3a:62:31:ea:a5:c0:2d:88:d9:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:62:D0:0B:52:52:A2:30:5C:6D:CA:4F:F7:38:78:06:53:74:39:C3
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c8:98:a7:66:8f:01:b5:3b:d4:8a:c6:5d:99:1a:70:bd:6f:
ff:cf:7d:af:26:ab:03:5c:c5:84:58:1c:43:8e:4d:dc:04:1e:
61:1b:dd:71:2a:51:99:f5:c4:8c:b3:23:35:93:15:77:50:1f:
66:d4:22:7a:6b:26:1c:8f:bb:62:1c:56:50:75:23:b6:e5:31:
e9:26:52:41:ae:62:1c:21:62:f5:0e:af:fc:c0:4f:bc:74:bd:
78:84:e4:73:f3:fb:37:93:fb:9a:0d:d7:30:9e:2d:51:b1:13:
a4:cb:44:5e:65:9f:ea:05:54:70:42:f0:c0:6f:f7:ca:e8:ef:
1a:54:28:6b:09:cc:a6:08:d2:88:1c:23:67:ed:9b:a3:66:66:
69:19:6f:ae:c0:2d:1d:84:76:50:3c:6b:25:60:63:c0:a2:5c:
2d:86:7e:0e:43:56:51:6c:d8:35:2c:eb:43:b6:54:c2:cd:be:
d2:a9:21:2f:5b:46:87:5d:f7:1c:31:e6:d8:06:6d:47:00:48:
18:c3:b7:bc:94:15:40:76:9c:0b:ae:9d:70:eb:35:b1:88:74:
2b:59:21:90:dd:38:0f:f9:ca:b9:95:c7:6f:90:3d:88:79:8f:
24:1a:02:8d:da:21:cb:4f:cb:17:ba:a0:ae:e6:9b:a1:38:2e:
6a:95:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:38:28 2025 by rpki-client