Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
File: J4YXdA7NlbcE2pel-eU8AxFEQms.mft (raw, json)
Hash identifier: VFhtwQYWJeOu68kE+KSvFv7P7dYjdlUxBGXIG3YSDpc=
Subject key identifier: A8:73:C8:9B:FA:16:BA:F6:7E:44:9A:53:A9:F5:42:B3:8C:7B:56:87
Authority key identifier: 27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
Certificate issuer: /CN=278617740ecd95b704da97a5f9e53c031144426b
Certificate serial: 019874BE258ED4FCA42AC91706E7C94E8BAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
Manifest number: 11C0
Signing time: Mon 04 Aug 2025 11:01:15 +0000
Manifest this update: Mon 04 Aug 2025 11:01:15 +0000
Manifest next update: Tue 05 Aug 2025 11:01:15 +0000
Files and hashes: 1: J4YXdA7NlbcE2pel-eU8AxFEQms.crl (hash: m+DobogcNpeswQozwe97kXWyVsoC09Klhh7FnreHM/k=)
2: hmlDPtU43ODpSbSwKm7b72QgfNg.roa (hash: yhUDh7b541QuzocbLv67rZZ0JwDcRkg1md4GPfBmUpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:25:8e:d4:fc:a4:2a:c9:17:06:e7:c9:4e:8b:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278617740ecd95b704da97a5f9e53c031144426b
Validity
Not Before: Aug 4 11:01:15 2025 GMT
Not After : Aug 5 11:01:15 2025 GMT
Subject: CN=a873c89bfa16baf67e449a53a9f542b38c7b5687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:83:1e:2e:48:5d:f2:e4:75:f6:9a:73:4b:
48:c5:c9:ee:69:b0:ab:4f:78:b0:ac:f0:90:10:47:
dc:f4:20:d2:da:9d:d2:41:3b:fc:1d:0a:46:86:cb:
9d:62:e1:77:57:b9:e0:78:bf:d0:c0:d3:11:b2:1b:
45:e8:ba:52:2f:33:94:91:c4:ed:58:89:9d:0d:1b:
e5:c5:8b:a6:ff:34:ac:8e:61:e8:3d:8f:9c:49:09:
b3:54:b7:f6:c5:67:1a:57:c0:d2:3a:eb:cf:c1:28:
6b:5e:68:01:f3:a6:f4:fd:cc:ef:e3:a1:df:47:04:
a4:7f:06:94:4b:6f:25:56:bc:03:23:e3:3e:65:cc:
77:8d:f5:e1:2d:9d:a0:4b:69:f3:3b:c5:aa:f1:c1:
81:ca:ee:08:55:31:7e:98:e9:e8:41:29:13:90:e1:
04:38:20:9e:90:dc:5f:e8:e4:17:48:8e:51:6d:8a:
1f:ad:9f:b4:64:80:7e:8c:f7:9f:13:bc:9a:08:d0:
7d:7f:d9:46:ea:1b:52:72:87:59:2e:3f:6c:d9:70:
27:6b:56:81:9a:dc:e7:9d:d3:14:20:d4:da:18:ee:
c4:ed:b6:00:ba:7f:d8:e5:d4:0d:3e:e0:ee:64:fa:
6a:d6:c8:b9:2a:b0:5d:15:a0:ef:c6:58:7a:de:2a:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:73:C8:9B:FA:16:BA:F6:7E:44:9A:53:A9:F5:42:B3:8C:7B:56:87
X509v3 Authority Key Identifier:
keyid:27:86:17:74:0E:CD:95:B7:04:DA:97:A5:F9:E5:3C:03:11:44:42:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4YXdA7NlbcE2pel-eU8AxFEQms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b78ab4-3490-400b-9019-9edd01d0723c/1/J4YXdA7NlbcE2pel-eU8AxFEQms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:79:21:78:4c:c8:c1:7e:1c:d4:32:78:3f:c1:ca:7b:bc:d7:
6e:f0:fb:36:d5:3b:00:d2:2d:bc:a8:08:f6:5e:a6:26:31:f2:
a9:b2:74:4e:cb:ff:84:ff:9b:8c:48:a9:7c:c2:dc:8c:08:3e:
8a:2f:ba:8b:18:3f:2c:3e:e6:71:d0:e3:c1:90:c0:34:81:6b:
8b:2d:e9:70:11:50:ed:28:67:9c:f7:a2:56:fc:f7:9c:4a:d7:
27:52:e4:01:2e:3a:09:b1:39:ee:32:fa:8b:72:d4:01:06:c6:
29:40:06:34:18:ea:8f:5d:73:fb:cc:c8:a5:06:a0:a5:b2:3b:
8c:75:10:67:3b:ce:f2:19:f9:11:ee:64:17:42:a2:df:f9:54:
a1:70:94:6e:ac:5f:25:89:49:fc:61:b6:75:be:0f:72:43:2f:
28:71:12:f2:1f:11:bc:07:ab:e9:8f:c8:61:22:f1:4c:50:13:
84:e7:91:1f:92:aa:6a:77:84:b5:0b:88:35:2c:cc:68:51:b6:
ce:88:d4:31:db:3b:b4:9c:a3:d3:31:a2:52:c2:f9:b5:a1:33:
27:5e:bd:b1:8a:38:31:a6:ba:25:1a:41:cd:fb:4d:ac:ae:da:
02:c4:cb:24:67:cc:bb:56:75:b3:3f:ca:5b:05:08:f9:72:e0:
d9:22:97:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:57:15 2025 by rpki-client