Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json)
Hash identifier: pIZf/sAb1Fbzd4OEK8y1Cnkde7s89jXT01KRZvn1i/M=
Subject key identifier: FA:3A:00:AC:F7:F7:09:CA:BF:CB:A2:A6:AF:24:8F:E1:81:4D:DB:DC
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 0197B82133C6CD8C917233D03D1EA1607F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
Manifest number: 101A
Signing time: Sat 28 Jun 2025 20:01:13 +0000
Manifest this update: Sat 28 Jun 2025 20:01:13 +0000
Manifest next update: Sun 29 Jun 2025 20:01:13 +0000
Files and hashes: 1: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: uR8BrqudKeo0cLNWvctrx4353wp2QsFL+PrMnhcn7kQ=)
2: YmG5FcsW3S43XyijT62zmWMd610.roa (hash: Sh1sRBIDqrknsDPBNOeRI3CSuT41xnHIPduRy76n3aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:33:c6:cd:8c:91:72:33:d0:3d:1e:a1:60:7f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: Jun 28 20:01:13 2025 GMT
Not After : Jun 29 20:01:13 2025 GMT
Subject: CN=fa3a00acf7f709cabfcba2a6af248fe1814ddbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f3:39:7d:61:b9:b1:0e:c4:bb:42:eb:b3:07:
a0:9a:d5:cd:e9:16:b9:ab:f3:6f:47:2c:7b:89:7a:
22:e2:14:9c:9a:b2:e9:20:a0:a2:2f:5e:0b:dc:0a:
77:a7:ad:18:b1:76:f9:49:b7:72:9b:60:3e:cc:21:
fa:15:be:dc:01:17:c3:4a:c8:d9:be:6b:eb:68:29:
fd:12:a3:8a:bc:fa:96:85:79:41:1a:c5:8e:06:17:
3b:e5:d5:80:0e:40:fa:33:72:93:ad:7f:0c:2d:72:
1f:de:12:48:05:3d:e3:47:b4:36:8f:11:33:21:f8:
d5:e2:cf:c2:88:6f:39:9d:19:d1:1c:a4:cf:73:08:
93:4a:58:3c:76:61:81:a6:9c:d3:81:63:77:42:ba:
43:00:6a:b5:71:11:13:41:42:b9:a7:b6:be:d8:34:
ff:ee:2a:2f:d5:73:54:26:1e:b5:16:4d:e8:ba:71:
89:c3:35:d7:2b:3a:0d:55:b1:67:bd:91:64:ec:ba:
07:e0:6b:72:3f:ff:ba:df:36:93:39:e8:9f:7b:a0:
54:b0:49:ab:42:8a:3e:b2:3d:6d:9a:5c:3d:fc:f8:
37:06:4b:d0:a2:ba:45:fd:d5:b4:d4:c4:29:9e:59:
32:6e:5c:c9:8c:35:dd:49:e0:c9:2e:07:19:79:cd:
50:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3A:00:AC:F7:F7:09:CA:BF:CB:A2:A6:AF:24:8F:E1:81:4D:DB:DC
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:51:56:81:79:14:fb:6c:9f:22:e4:8d:3a:98:0a:2d:e4:88:
1f:85:4e:d1:a7:92:c3:ae:69:c1:f5:7c:91:99:ab:03:49:4b:
44:15:bf:d8:18:78:7f:f2:76:c7:91:fc:26:22:e3:c5:00:e7:
ea:35:97:59:98:73:ec:32:1b:99:78:40:ca:e3:45:0b:d8:98:
69:f4:90:67:b9:e9:ae:46:2c:37:6f:d9:fe:43:9e:9d:27:63:
82:68:e6:a3:93:88:2a:46:fe:3b:44:d8:85:0c:85:11:be:73:
55:cf:67:00:c8:92:6b:ae:17:da:27:52:d7:a2:78:e8:e9:ff:
87:7b:dc:f2:3c:6c:00:74:20:15:53:66:c1:74:a8:d1:16:61:
06:ce:1d:cb:f6:03:f4:99:75:91:d1:3c:dd:1e:6e:55:6c:94:
11:26:b8:c6:6b:cb:d0:8c:63:d4:59:8f:b1:20:53:9a:d4:29:
c6:a1:c9:32:38:cd:35:48:fc:18:e7:7d:ab:e5:a0:76:08:da:
15:46:8e:9d:4a:d4:e9:04:ab:8e:be:0d:8b:d2:1b:5c:af:05:
af:8c:71:24:e7:f3:3c:78:bf:88:83:00:e4:1d:92:df:c3:87:
2a:20:be:31:06:f9:4a:41:76:2f:bf:ae:23:96:c9:67:9b:d9:
66:58:64:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:39 2025 by rpki-client