Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
File: J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft (raw, json)
Hash identifier: J549HZBL8ZGdeSVcr9BtlRY8kGHSyOIozbsCyIqJ9tQ=
Subject key identifier: DE:74:14:58:AD:AB:40:95:F3:64:BD:0A:D0:1A:12:A4:26:9F:3B:AA
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial: 0198D583BFE23300143CE305EF0C113BB9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
Manifest number: 0B25
Signing time: Sat 23 Aug 2025 06:00:37 +0000
Manifest this update: Sat 23 Aug 2025 06:00:37 +0000
Manifest next update: Sun 24 Aug 2025 06:00:37 +0000
Files and hashes: 1: J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl (hash: HGrQ1kjtnzuT1mQDNw+Rxyp5DyKr1xN/3rosRinj6gI=)
2: XfoYu50NheNzs0VtCSRCooYU-SU.roa (hash: jh91aUsS01TW33r2YJfBHj2Cr7ZQFr1/RMMxWf8OtR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:bf:e2:33:00:14:3c:e3:05:ef:0c:11:3b:b9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
Validity
Not Before: Aug 23 06:00:37 2025 GMT
Not After : Aug 24 06:00:37 2025 GMT
Subject: CN=de741458adab4095f364bd0ad01a12a4269f3baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:39:3f:cf:40:65:6d:a3:c7:6b:93:bf:0c:15:
27:b5:f8:c8:d9:5c:5f:1f:38:27:94:99:5b:d3:ff:
bd:76:3a:dd:8e:fe:cf:b1:d4:4d:d6:7e:67:38:8b:
0f:76:02:23:6c:ed:ff:98:dd:ad:da:0d:6c:18:91:
86:36:87:4e:0c:9e:15:77:8a:d8:c6:80:bb:fd:2f:
37:cd:c5:b7:ee:7d:b9:fb:2d:1b:26:05:ec:35:c3:
86:cd:56:6d:cd:f5:9d:0d:7d:5a:e8:77:a2:cc:6f:
1e:17:e1:a9:b7:27:04:25:a0:5f:0b:d8:20:45:5b:
9f:b1:2c:da:08:62:6d:3c:ae:b9:06:6a:c4:7c:93:
83:0d:09:e3:7f:13:91:f4:d6:99:0c:a3:d1:ee:44:
18:f4:50:ab:7c:5f:08:0d:b5:80:0f:f4:be:cd:e2:
93:61:c1:cd:0b:65:3b:3d:5a:e8:ba:1b:5f:14:23:
41:35:d2:74:e0:1d:45:2d:7b:71:43:cc:b7:cd:31:
2d:ec:25:14:bc:56:5d:f7:b4:3c:1b:63:cd:70:e3:
ae:82:0f:0d:8f:70:ce:b5:1a:83:7b:7b:8f:69:2d:
53:27:c5:d1:f5:b1:83:cb:35:b4:3c:60:fe:b8:4b:
98:3a:3c:69:b4:8b:4b:d3:8f:42:89:60:f2:77:fe:
d0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:74:14:58:AD:AB:40:95:F3:64:BD:0A:D0:1A:12:A4:26:9F:3B:AA
X509v3 Authority Key Identifier:
keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:15:0b:59:de:04:69:fa:de:04:14:92:bf:84:24:c0:65:f0:
09:f0:22:73:1a:26:cb:15:e9:f4:e3:8e:87:37:f5:c4:85:90:
a0:6e:d9:18:71:77:5d:2d:b2:aa:77:24:1f:45:f8:cf:b2:9a:
9b:f6:0b:6f:b1:96:39:bd:ce:39:29:98:cb:ea:86:12:57:86:
e3:03:ac:a8:a1:d1:6d:67:f0:f9:2b:90:b8:d0:25:e9:30:c7:
fb:e9:28:84:0b:28:49:aa:1f:26:f3:e6:b2:f5:81:d7:96:d7:
63:81:3f:93:65:9a:f2:79:ce:99:0e:d2:16:b9:3c:b7:81:9e:
d8:c1:6b:da:45:b8:18:5d:33:4a:23:89:35:6f:09:45:cb:c1:
14:0d:58:52:7e:e5:a1:7f:25:01:d0:eb:ce:0a:03:9f:aa:42:
7e:22:63:89:4e:39:48:90:2b:50:7b:6a:bd:6c:4c:00:e5:fe:
9e:57:83:bb:a3:78:6a:df:f7:a0:29:ce:0b:f0:89:54:5a:60:
04:de:96:6e:09:5c:80:4a:14:a4:26:54:9e:b7:1c:dd:d1:50:
a5:e4:57:2a:9e:a7:74:73:0f:a0:e5:aa:4b:45:e4:2f:d5:f5:
cb:69:4c:d2:90:67:3d:19:87:de:42:1a:c1:17:e3:1c:0c:54:
42:5d:d7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:13 2025 by rpki-client