Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
File: J8Y3pwndvn9iN6-NWykTtCI3FXw.mft (raw, json)
Hash identifier: IhU7usXd7B7iJZY/saU/JFKZS9lhgipmVA9bEWGfMNI=
Subject key identifier: D0:5C:00:AD:1F:60:0D:7F:5D:DC:10:09:B7:01:C8:26:AD:3A:B7:B7
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Certificate issuer: /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial: 0198D65F09621AFE33A0FE58A8374FA046CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
Manifest number: 0D40
Signing time: Sat 23 Aug 2025 10:00:09 +0000
Manifest this update: Sat 23 Aug 2025 10:00:09 +0000
Manifest next update: Sun 24 Aug 2025 10:00:09 +0000
Files and hashes: 1: J8Y3pwndvn9iN6-NWykTtCI3FXw.crl (hash: nipOIuh/fTipBWWaESGMwjOHcIbypMgEhfDOQkL+x8g=)
2: dlmSMThgfzEt-EoGdzxxYyd6AvA.roa (hash: II2qv/R+riqTZycAWnh60efymgX6QJpKVeYxCLVnyks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:09:62:1a:fe:33:a0:fe:58:a8:37:4f:a0:46:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Validity
Not Before: Aug 23 10:00:09 2025 GMT
Not After : Aug 24 10:00:09 2025 GMT
Subject: CN=d05c00ad1f600d7f5ddc1009b701c826ad3ab7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:ad:8d:0e:6c:57:38:66:cf:0a:11:d7:9a:
de:86:d9:d9:92:05:b8:c6:8b:55:d5:c8:13:9e:5f:
e1:5f:14:2f:e6:a7:c6:5c:56:7a:3b:1a:07:c3:e6:
02:62:a8:97:95:b7:f8:d1:8d:76:ad:08:a7:64:3c:
68:30:45:0a:c6:17:56:92:8f:7e:e8:31:6d:6d:3c:
50:be:d4:90:f5:6c:c5:0b:49:50:2a:4e:47:ad:16:
66:75:22:0e:f5:aa:43:b8:6a:c5:64:e0:0c:cf:6e:
cc:14:07:bb:c8:ab:91:dc:60:6c:96:e1:55:69:0f:
2a:3b:39:93:54:c6:79:bd:1c:11:4c:2c:6d:b3:d8:
b2:e5:8b:44:97:89:2f:7e:77:ea:54:11:30:34:1c:
dc:14:49:4c:bb:d0:14:0a:4a:bf:5f:00:12:7e:cc:
af:54:1c:03:b0:ab:f1:26:63:57:16:7f:f6:b7:c8:
59:8b:93:7b:ef:7a:71:5f:d0:0c:d6:bb:c2:95:c8:
ad:ed:0b:4c:f2:7c:71:4d:db:c5:c1:cd:7e:71:01:
c8:33:92:a4:e3:ea:95:77:c7:0e:8f:2d:15:1f:81:
7a:f8:f7:16:32:db:d7:24:0a:11:c5:a3:75:36:d0:
10:06:0f:04:bc:5d:20:64:46:10:0f:30:84:4e:dd:
a4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5C:00:AD:1F:60:0D:7F:5D:DC:10:09:B7:01:C8:26:AD:3A:B7:B7
X509v3 Authority Key Identifier:
keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:31:08:34:60:0a:7c:69:a6:3c:bb:4a:3e:dc:a5:f6:02:ec:
69:5f:01:4b:28:7e:07:5b:d2:41:49:e5:96:c8:dc:31:00:8f:
88:e8:79:49:1e:d7:28:d2:dc:ae:ec:68:67:47:ae:9e:90:56:
ee:cd:33:09:00:42:85:da:0c:e3:83:41:94:d4:96:f8:59:1e:
f8:39:ba:36:ec:45:85:aa:b8:cb:64:8c:31:47:7c:8e:c5:36:
5a:a1:22:46:36:0d:34:76:9d:fb:26:99:f9:f8:d1:52:9e:2d:
f7:c9:33:07:90:49:4d:03:cb:39:ee:c7:89:0b:7b:c2:92:3e:
20:23:5e:34:ee:f9:66:d7:26:31:1d:39:a5:b7:44:e7:ac:46:
5e:86:3a:9c:45:40:5c:af:0c:29:c2:a1:a9:10:59:20:a7:97:
d4:d6:c4:ad:56:87:32:a9:7f:32:34:a6:ce:db:5e:be:ab:3a:
b1:06:15:80:af:58:18:2b:0b:32:6b:65:1e:94:3e:a6:f6:0a:
a3:d2:27:11:96:aa:84:9b:94:c3:03:88:58:b6:0a:61:18:e4:
5d:12:77:33:e5:4e:51:8c:09:c1:6e:a0:b6:1f:f3:cb:a5:78:
b0:33:62:db:e9:62:09:93:ca:1e:ea:74:fa:85:24:1d:cb:39:
07:a7:d6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:47:53 2025 by rpki-client