Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
File: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft (raw, json)
Hash identifier: +43UrDYSiA5mUQIgKlE8N7p7CtsBMUhctJSNQWGjWA4=
Subject key identifier: 84:DE:FA:84:23:73:5F:7F:14:14:92:11:57:61:CA:5F:76:65:E8:45
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 0197B9A1804AD796328C9C9BD572C1AF220A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
Manifest number: 10D8
Signing time: Sun 29 Jun 2025 03:00:58 +0000
Manifest this update: Sun 29 Jun 2025 03:00:58 +0000
Manifest next update: Mon 30 Jun 2025 03:00:58 +0000
Files and hashes: 1: J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl (hash: 3BIWa3DUXAubXn6FY05fL+IaKEgcXocmY/31hQ8Xl6I=)
2: _pQtR1EJpgHMSOkTmSK_Er0tXsE.roa (hash: m5yMM2ApK+4Me2gJxPiOKP0gpYE7to93xl8Fx6CP7v4=)
3: qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa (hash: fwjzyDVkTfLPWzdH9pq6+z0fYQ+pKyYb7cgFc8eFsFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:80:4a:d7:96:32:8c:9c:9b:d5:72:c1:af:22:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Jun 29 03:00:58 2025 GMT
Not After : Jun 30 03:00:58 2025 GMT
Subject: CN=84defa8423735f7f141492115761ca5f7665e845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:52:bc:f8:1c:ba:c5:87:c9:7f:df:49:62:
48:14:3f:f8:04:03:00:50:d5:29:7a:c9:4a:2c:45:
a1:aa:78:e0:c7:7e:7b:b0:35:66:94:21:7a:e0:de:
a2:01:20:f4:87:f2:c7:d3:2d:b7:8a:b9:44:53:d2:
e9:c2:e5:ec:64:06:fb:86:37:05:d0:8c:c1:e0:0c:
e2:94:0f:3b:ef:3e:68:c5:5c:06:bb:29:b0:9c:37:
f7:80:c1:b3:5a:a1:a2:2d:d5:f8:8b:43:00:4c:1c:
ca:b8:aa:28:fe:50:31:95:fa:cd:7f:cd:78:48:ed:
83:66:2a:0c:43:fe:0b:99:b5:90:b9:f4:af:4e:82:
88:75:a6:67:9f:4f:4d:b8:6c:5c:5c:0e:ff:f6:a1:
98:c1:3f:51:e8:aa:1a:7a:17:1a:1c:9b:f6:cd:88:
cb:62:d5:0a:fa:f5:55:1e:a0:fe:21:7e:6f:48:60:
5f:63:d9:d4:86:2a:a9:ad:74:ac:dc:c0:d7:aa:ab:
b2:98:91:05:be:8a:77:e7:a4:d4:11:aa:48:6e:87:
52:f6:94:87:06:18:4c:dc:7d:72:84:74:77:ea:d5:
8d:0a:ff:d6:22:c2:e3:76:fb:20:4b:a0:d2:d2:5a:
f1:72:83:d1:8b:01:7d:f1:ed:24:c7:69:c4:da:b8:
01:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DE:FA:84:23:73:5F:7F:14:14:92:11:57:61:CA:5F:76:65:E8:45
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b9:54:3a:59:a8:4c:46:fa:db:1b:45:f2:ff:32:c2:f5:8a:
0f:e1:0c:1e:96:1f:97:b8:f1:af:2c:79:8f:02:22:9a:c9:7f:
33:fe:c7:19:ad:43:60:56:c9:4d:66:dc:2f:cd:9c:98:32:2c:
b3:13:f9:f9:84:ad:7a:ae:41:eb:7e:01:90:34:77:63:ad:6e:
2f:41:ea:18:4e:ec:51:50:7c:29:46:55:08:6e:98:51:43:1e:
bf:1d:57:1b:2d:30:ab:1a:fb:37:e7:60:40:ff:ef:04:c6:68:
6c:b1:5e:f8:59:dd:63:98:df:1c:6a:9f:ca:a4:c3:c2:36:84:
5d:c6:30:f1:43:fb:47:33:14:ed:c0:7c:06:df:1b:38:77:72:
31:43:62:a3:38:7b:b4:21:1c:b0:84:74:a4:2b:5c:b2:8c:ed:
34:35:1b:db:33:39:63:45:20:0d:c8:70:81:3a:11:18:e1:69:
16:5f:15:69:f0:48:d0:6c:96:12:00:78:49:f4:10:6d:e9:c3:
c2:f2:2b:16:c9:b4:4d:fd:7c:02:a7:88:ff:00:ff:2f:a0:4c:
62:7d:0a:dd:1e:b8:9a:0c:02:7e:8e:89:db:64:b2:31:e9:07:
9d:e7:76:b7:e6:b8:b3:fe:5e:10:4f:10:92:bb:de:14:1c:c8:
c7:3d:bf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:28:33 2025 by rpki-client