Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
File: J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft (raw, json)
Hash identifier: s/912WAJBclF4EQ5/gjWqycSBm162i6hcMvyN4D0+LA=
Subject key identifier: 86:BC:32:04:AF:33:7C:7F:A8:6D:AF:87:34:08:C3:D8:75:94:21:C9
Authority key identifier: 27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
Certificate issuer: /CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
Certificate serial: 0197B6A11E48A5ECF33546A798B58A45B9D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
Manifest number: 0468
Signing time: Sat 28 Jun 2025 13:01:41 +0000
Manifest this update: Sat 28 Jun 2025 13:01:41 +0000
Manifest next update: Sun 29 Jun 2025 13:01:41 +0000
Files and hashes: 1: J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl (hash: leW01VmE5i5S8LhX6pd2di4H5y+75UkVMfoWuuLyToA=)
2: Ri5k7SQxU6x0UFludmWvZ0B6TWI.roa (hash: TLxEmCkGZUEaMyJcwR/yeYXTxZGAU/9BCp1xDMGwRT4=)
3: TIq2cJHpR6KvpC_5zEbT28CzxmQ.roa (hash: AjELo4AcRNi6tjWnrWUw4e1yYtJi2dPHt3KwG3rn9eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:1e:48:a5:ec:f3:35:46:a7:98:b5:8a:45:b9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27873afe6330b7ae9ee562e0c988e9fd5ea8f567
Validity
Not Before: Jun 28 13:01:41 2025 GMT
Not After : Jun 29 13:01:41 2025 GMT
Subject: CN=86bc3204af337c7fa86daf873408c3d8759421c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:9a:c0:29:70:96:13:d5:43:4b:0c:e3:71:
b2:a2:6d:72:d2:55:ae:b3:e3:59:01:61:9f:dd:ab:
0a:16:fa:ef:96:1a:92:44:37:4c:ef:90:97:18:99:
b1:89:c3:7c:9c:5e:3a:2a:08:a3:7e:2b:64:58:a8:
d4:60:f2:a4:86:46:06:6d:39:53:5f:45:b2:85:af:
36:3b:dc:51:42:7a:2d:56:06:c4:05:99:7f:19:38:
45:e6:d2:4f:59:e6:10:9f:ef:21:20:28:dc:28:5d:
1b:a1:f4:a6:24:28:08:3e:3f:21:e2:56:a3:b8:cd:
b1:59:42:26:87:9c:a7:40:45:ac:62:57:f8:96:32:
98:01:36:21:de:69:97:2d:55:66:0c:fd:87:86:2a:
5c:11:f6:96:42:62:11:9a:6f:70:e8:41:bc:92:a8:
23:41:bf:89:fd:e5:4c:ec:20:cb:3a:f5:95:b9:fe:
07:32:fa:2b:d8:09:16:84:55:90:30:b6:f7:c2:63:
ac:17:7d:2e:02:50:69:5a:3c:3f:e5:0a:22:b0:3a:
e6:ab:dc:bd:83:7f:46:d3:b8:79:9c:c8:da:d0:1a:
4b:95:a2:6d:b6:af:21:03:08:f7:77:f2:a4:c1:2b:
dd:50:33:d7:8a:db:c4:1e:6b:4b:89:b6:f8:b5:bc:
92:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BC:32:04:AF:33:7C:7F:A8:6D:AF:87:34:08:C3:D8:75:94:21:C9
X509v3 Authority Key Identifier:
keyid:27:87:3A:FE:63:30:B7:AE:9E:E5:62:E0:C9:88:E9:FD:5E:A8:F5:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4c6_mMwt66e5WLgyYjp_V6o9Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d39416-f46a-4f82-b1e1-e0d1f7cacff1/1/J4c6_mMwt66e5WLgyYjp_V6o9Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:75:d9:31:21:55:d0:40:09:ee:d0:e5:88:54:60:cb:b7:40:
c1:e8:87:dd:8a:41:5c:97:c9:51:d7:3b:43:a2:a2:f4:f5:1e:
e8:7e:7a:12:3d:92:a8:b1:82:1e:44:f6:3f:0a:1d:11:1b:fd:
1a:31:af:7f:75:b2:93:58:1d:4c:8d:2e:c9:15:8d:b2:80:9e:
cd:ce:f0:16:29:8b:36:0b:ad:46:da:02:1c:09:68:38:ec:c9:
a1:a6:7f:5d:06:ed:6b:6e:32:4f:fe:7e:27:cd:d2:d2:1d:b7:
ee:cd:65:8b:be:b9:80:86:b3:c3:98:b0:8d:e4:e8:d0:03:17:
56:a5:f4:7e:f0:36:3d:c8:86:97:bb:d7:78:21:35:29:7f:f2:
c9:0a:d9:3a:07:a4:7a:01:84:2a:3b:25:25:f5:d2:78:5c:01:
d3:75:71:d2:50:63:da:aa:e5:c5:ff:23:08:c3:14:59:67:14:
09:df:f7:e1:30:50:22:21:57:fd:13:ba:95:d1:fa:de:9a:e2:
0b:55:77:d4:cb:87:19:3d:33:e5:4e:85:f0:03:b1:80:43:b1:
b1:3c:ef:ab:94:ae:40:56:de:9b:29:e7:ca:1a:c9:da:41:0d:
84:24:83:8e:d8:7b:7e:d4:ce:71:1e:2b:5c:67:46:0b:19:32:
27:f9:39:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:06 2025 by rpki-client