Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
File: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft (raw, json)
Hash identifier: VFKvEukhQLQGblIeRUe7mnASGS52UxbN5vo6piJ3smY=
Subject key identifier: 8D:6D:3C:DB:AC:37:B5:79:5E:16:0E:BA:34:C4:C8:62:41:4D:72:0D
Authority key identifier: 27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
Certificate issuer: /CN=27d8640c305107766a646fbf8ec81db45ce1f249
Certificate serial: 0198D6607BBC831191CB90138C58BFA776B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
Manifest number: 14A4
Signing time: Sat 23 Aug 2025 10:01:43 +0000
Manifest this update: Sat 23 Aug 2025 10:01:43 +0000
Manifest next update: Sun 24 Aug 2025 10:01:43 +0000
Files and hashes: 1: J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl (hash: W+q1JHsw9ZsmeOC7iSmuZ3roYZlVNVxg4Ngn2Jd5SsI=)
2: omv1iA0sTwZqywTVYlUXXegJP1Q.roa (hash: lDFIRi5hNHf1aQj7xWQEmMDGw0C4yu9jECeYI1136N4=)
3: yYTpoAfaYghmHruP3VvWvB4Z38E.roa (hash: 9b9Mq3MlvIX2qX8DdTkiCTxQPYb+kWY/IW9meZtFMy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:7b:bc:83:11:91:cb:90:13:8c:58:bf:a7:76:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d8640c305107766a646fbf8ec81db45ce1f249
Validity
Not Before: Aug 23 10:01:43 2025 GMT
Not After : Aug 24 10:01:43 2025 GMT
Subject: CN=8d6d3cdbac37b5795e160eba34c4c862414d720d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:63:82:57:c1:46:b0:ea:dd:45:4a:3a:6d:
f2:62:5f:11:d1:21:af:50:fc:b0:79:e9:dd:71:01:
8b:7e:ab:de:d3:df:c4:ec:cd:b5:34:2e:86:4a:a0:
97:97:28:bb:83:ca:21:b2:b0:0a:d5:05:18:41:6f:
34:ca:92:51:24:2a:b1:53:9d:9a:fa:0f:a4:55:4b:
a4:05:43:47:87:e7:19:b9:da:fb:b2:74:d4:61:65:
5b:6a:d7:2a:3a:0a:8f:65:45:00:fc:17:db:6d:b5:
f6:4a:69:1b:b9:22:e0:0b:59:46:b0:61:fe:6d:d9:
e6:af:06:7e:e1:17:24:b9:fa:4d:f5:9a:7f:ef:59:
f0:05:c4:6e:61:9f:90:29:f7:bd:69:27:ec:a8:f2:
2d:e3:ee:ab:5e:c3:46:cf:0b:2b:7e:9e:1c:e7:1c:
b9:94:15:10:31:3c:cf:4f:1e:82:72:66:f9:91:cf:
31:4a:5b:b7:56:fc:29:bd:2b:39:3a:a6:dd:63:7b:
7c:ae:d2:3e:3e:25:cb:4c:fc:d2:b0:b2:f0:d2:81:
5e:50:c7:b6:a6:4f:51:26:4b:ef:de:21:c7:46:37:
35:e0:fe:6f:00:90:07:b6:88:b2:52:37:a9:43:1d:
1c:49:69:a3:d4:fc:c0:a9:fc:2d:3e:3d:f7:12:09:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6D:3C:DB:AC:37:B5:79:5E:16:0E:BA:34:C4:C8:62:41:4D:72:0D
X509v3 Authority Key Identifier:
keyid:27:D8:64:0C:30:51:07:76:6A:64:6F:BF:8E:C8:1D:B4:5C:E1:F2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/88175a-12c8-4590-82e0-3c6f88c914b1/1/J9hkDDBRB3ZqZG-_jsgdtFzh8kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:75:14:c9:c7:b4:83:0a:40:ca:f4:1f:f7:3d:94:df:e9:10:
a2:6e:f4:11:88:16:01:bf:dc:df:da:b0:db:69:e0:7c:d1:8f:
d4:9c:9b:5f:67:e3:d8:ba:45:8a:0a:a6:f7:8b:16:31:e3:6e:
6a:aa:01:6a:81:f3:14:d9:f8:bd:39:25:35:7d:27:60:35:76:
23:9d:5d:69:7b:1a:27:56:b6:c3:07:39:59:77:b9:d7:97:63:
e4:c6:71:0a:dd:2a:ca:88:4d:eb:2e:9c:ae:d3:d7:1d:5a:60:
46:cf:51:0e:d1:7b:68:6c:a1:3a:44:f0:5d:6b:41:18:54:83:
f3:a9:81:96:77:ca:2d:a7:8b:15:70:65:60:40:11:b8:4e:f7:
0e:d9:ec:4d:69:af:eb:7d:de:14:aa:ae:5f:ae:0e:93:57:f3:
c0:a2:31:a7:20:03:37:f2:f9:77:6b:de:f9:3d:09:28:95:82:
63:ab:cd:ec:1e:9b:18:1a:e8:d6:68:b0:9f:d0:f3:7c:eb:b3:
e7:bb:78:25:fa:42:72:62:30:ea:eb:67:24:17:c9:19:af:b0:
b6:a9:3e:54:c5:a2:fb:60:3c:10:51:f6:e1:3d:74:6a:f4:8f:
88:fb:95:d2:6b:e2:71:6a:fa:fb:a9:1c:7c:4b:1a:c1:b4:04:
33:41:55:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:07 2025 by rpki-client