Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
File: J9ivflbIDRjclo9NvOyBP4XqMKQ.mft (raw, json)
Hash identifier: qYlq9P0oUkxsM0IXjhecUnbKGGarnHpMYc7jDcroOeA=
Subject key identifier: 45:F8:DD:BE:29:04:D4:5A:7E:03:1B:CC:F2:60:B1:B0:7E:9E:AD:C6
Authority key identifier: 27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
Certificate issuer: /CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Certificate serial: 01988957A790C1075F703AA34499A4BABBE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
Manifest number: 0DE0
Signing time: Fri 08 Aug 2025 11:01:19 +0000
Manifest this update: Fri 08 Aug 2025 11:01:19 +0000
Manifest next update: Sat 09 Aug 2025 11:01:19 +0000
Files and hashes: 1: EfwLikTBq1BQAGfNQNV1E8qGDAc.roa (hash: yRt0hCbp/cepFk2zNBBsY1KquLoFtQD0MeEg7vy0YTA=)
2: J9ivflbIDRjclo9NvOyBP4XqMKQ.crl (hash: NklR53H/IZc7PdzGknsV3pTnPjKFESoviEZfxRaVnrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:57:a7:90:c1:07:5f:70:3a:a3:44:99:a4:ba:bb:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8af7e56c80d18dc968f4dbcec813f85ea30a4
Validity
Not Before: Aug 8 11:01:19 2025 GMT
Not After : Aug 9 11:01:19 2025 GMT
Subject: CN=45f8ddbe2904d45a7e031bccf260b1b07e9eadc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f6:fa:3b:8c:96:f5:a0:65:8b:f7:f8:7f:16:
fa:c1:94:36:5c:a4:7c:78:71:fb:43:ff:b7:0e:1d:
52:62:29:b6:66:cb:6c:25:f3:4e:0e:7a:0a:0d:d9:
35:4e:b4:10:0f:bc:e0:11:47:c7:ee:7a:26:b9:6f:
ec:be:f4:1e:cf:f2:fe:d5:9d:59:83:94:70:e6:af:
25:df:00:95:a2:d1:42:b7:af:4e:94:db:bf:ba:76:
d9:7c:e5:dd:01:1a:8e:e5:16:fe:2b:02:d0:50:b2:
de:45:ea:c6:e6:8f:46:71:2e:6c:13:7a:22:d3:15:
4e:ac:ce:bf:39:f4:3c:d7:d8:4e:3a:ae:18:97:32:
c9:07:4e:b5:26:69:82:02:da:1c:04:9c:1f:86:10:
98:7d:c8:36:f5:6b:a0:de:4f:11:12:ac:78:2b:0a:
9c:13:ac:db:57:e3:1e:3e:9f:61:90:ff:63:79:b6:
88:07:54:af:12:e1:e6:7d:a8:97:b6:1c:bc:c1:a8:
4f:9c:0c:55:77:4d:ad:e4:af:2f:d1:4a:56:02:4d:
20:3d:9e:d1:d8:40:84:78:c2:cc:85:20:42:68:d5:
9d:d0:e4:3d:ae:6e:c0:a3:8b:41:99:ef:5d:31:77:
91:bb:5a:8e:89:de:27:ad:97:bb:ca:09:00:a3:f1:
f2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F8:DD:BE:29:04:D4:5A:7E:03:1B:CC:F2:60:B1:B0:7E:9E:AD:C6
X509v3 Authority Key Identifier:
keyid:27:D8:AF:7E:56:C8:0D:18:DC:96:8F:4D:BC:EC:81:3F:85:EA:30:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9ivflbIDRjclo9NvOyBP4XqMKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/d8b9f4-ad01-447c-a4de-0215aca1b909/1/J9ivflbIDRjclo9NvOyBP4XqMKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:30:a9:31:3a:2d:af:04:b8:f7:7a:70:3a:63:d1:36:42:cf:
81:48:e0:84:22:3e:b0:75:a4:f9:8f:99:30:2c:b2:82:0a:a0:
86:19:5d:c5:25:13:bf:fb:35:2e:b6:ed:bf:0f:dd:aa:4c:2f:
a5:fb:f4:f3:33:bd:70:47:87:b0:21:e5:33:9c:d0:11:fa:5b:
fe:53:16:cc:e0:5c:62:2c:9d:4d:98:c4:a7:32:9b:c8:e7:9b:
5d:55:12:fa:84:55:d9:89:1a:95:f1:47:c4:75:53:9a:30:7a:
89:d1:27:00:c6:d5:c4:90:8a:d1:22:84:e1:3d:0b:05:c4:28:
1d:66:17:0b:a4:c3:e2:ec:61:f9:15:5c:ba:ab:c7:10:1b:0a:
c7:4e:78:17:32:6c:5d:87:63:db:3b:a8:22:d6:65:55:8e:19:
0f:ae:77:58:48:60:c0:06:77:91:37:57:5c:cc:a6:5b:df:eb:
71:20:01:00:00:74:2f:2d:57:c0:98:95:5d:4d:83:52:ff:4e:
f0:a4:02:0c:7c:7f:bd:b6:72:a6:1b:ff:27:d8:93:2c:b8:90:
ce:63:ca:65:4f:f0:8b:25:15:4e:7f:f4:f8:f0:c2:e8:a1:dc:
80:ce:d6:c3:3b:99:ae:41:86:56:5e:c8:85:2d:39:f8:b1:4f:
8f:4e:e0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:25:13 2025 by rpki-client