Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
File: J7irrCClmMyksS9ddV2OiTIfTsk.mft (raw, json)
Hash identifier: 14JarCPFKChXAZJPvpSfAgq9chWYFeB6QC3FmqWVTfU=
Subject key identifier: 85:A4:F2:91:2C:DC:62:B3:05:15:77:0D:02:6A:F4:3D:D2:67:E1:52
Authority key identifier: 27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
Certificate issuer: /CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Certificate serial: 0197B70EB8A66A929157EB9BBFD1A52DC9BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
Manifest number: 0F2A
Signing time: Sat 28 Jun 2025 15:01:24 +0000
Manifest this update: Sat 28 Jun 2025 15:01:24 +0000
Manifest next update: Sun 29 Jun 2025 15:01:24 +0000
Files and hashes: 1: J7irrCClmMyksS9ddV2OiTIfTsk.crl (hash: J8Ak4kPPZKK6XQHklnrsrOs0L4w032ZuCSuqiIcQZB0=)
2: vdjx6mVJjB2A5HRAp4zCXF1WOmI.roa (hash: nZy4/J4/xAAVv0Nm8r/1Dh/36Nz5IhwHl0WfPkQGlFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b8:a6:6a:92:91:57:eb:9b:bf:d1:a5:2d:c9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b8abac20a598cca4b12f5d755d8e89321f4ec9
Validity
Not Before: Jun 28 15:01:24 2025 GMT
Not After : Jun 29 15:01:24 2025 GMT
Subject: CN=85a4f2912cdc62b30515770d026af43dd267e152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:3b:6b:ae:73:78:78:88:aa:68:f1:64:3c:
d4:c7:63:f8:c1:e1:76:0f:75:02:40:9d:f3:ff:5b:
4b:d3:c3:90:3a:bc:cf:a9:04:d1:26:91:ba:e0:58:
c7:20:0a:20:1e:3f:3c:c0:68:07:0a:02:38:af:d3:
3d:2d:b0:3f:3d:6b:94:ca:a2:97:e5:08:ea:25:41:
25:16:dd:e0:ca:64:29:eb:6c:ac:ba:89:8a:f5:c3:
81:72:26:43:13:2d:a1:c3:e6:3c:dc:dd:d6:6c:a5:
e8:63:80:e4:ae:92:66:4d:03:23:12:a1:45:94:eb:
cb:15:89:e4:3d:42:d9:8d:2b:d8:43:62:e1:cf:02:
13:fa:a7:f3:e8:d3:da:b9:34:00:55:0b:94:52:e4:
23:9a:47:7d:a5:de:75:bc:04:e1:93:bc:a3:3f:c9:
d2:cb:64:8b:ea:32:f2:23:93:d0:ee:f9:4e:3c:2d:
47:0c:28:a3:54:14:3a:28:5f:2d:0b:be:6a:de:95:
93:c3:68:0b:a3:c7:be:43:3d:7d:49:d5:2b:a1:47:
ee:dd:05:c0:33:26:bb:c5:76:88:e3:51:93:49:85:
52:d1:75:4b:de:23:2a:21:3f:a2:48:ee:3a:41:12:
c1:0b:ce:b4:21:72:ce:ac:80:ca:13:ee:ee:4c:a3:
19:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A4:F2:91:2C:DC:62:B3:05:15:77:0D:02:6A:F4:3D:D2:67:E1:52
X509v3 Authority Key Identifier:
keyid:27:B8:AB:AC:20:A5:98:CC:A4:B1:2F:5D:75:5D:8E:89:32:1F:4E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7irrCClmMyksS9ddV2OiTIfTsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/729e1c-1cc0-427e-8f00-4b6fc7c06ae5/1/J7irrCClmMyksS9ddV2OiTIfTsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e4:cf:a8:41:4e:c4:43:4f:f5:67:2e:2b:e7:49:84:25:f4:
d2:6f:93:35:7c:a0:fd:d0:03:a3:f1:25:e5:f5:de:d9:5e:00:
0c:d1:0a:1c:cb:32:3f:e7:58:6d:4e:8b:b5:3c:84:32:11:01:
b1:32:24:cb:73:bf:b7:d7:13:0f:ae:49:0c:43:5f:16:7c:03:
bd:61:40:59:9f:0a:4d:20:4f:97:79:af:1c:b5:b7:86:67:87:
2a:7d:bd:b7:1e:b8:98:4b:32:54:16:a7:ae:d5:23:34:1e:47:
28:32:f1:ba:69:88:c9:2d:4b:50:87:dc:b3:ac:1d:30:51:ad:
38:e4:0b:ad:a8:e7:cb:77:39:36:08:d3:5e:35:a3:4e:19:3b:
64:2a:ea:a2:e3:7f:03:0b:ba:d8:f9:f1:df:fb:31:94:97:39:
67:ac:c2:b7:8e:32:90:ee:f2:a8:e1:04:a0:aa:07:f0:46:e8:
63:53:ed:3f:ff:30:50:f3:2f:ab:44:0c:a7:39:26:15:94:49:
e4:c0:09:0a:99:d8:40:53:06:1e:a5:46:0b:d3:4f:dd:4a:be:
f2:d5:ac:1e:ab:22:89:25:d7:2c:08:76:44:cc:08:b0:4c:a2:
2a:a5:26:be:46:c2:16:53:49:1e:8a:51:cd:30:8a:fe:3f:70:
d2:cb:99:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:25 2025 by rpki-client