Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
File: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft (raw, json)
Hash identifier: BB7kX/rjgxEiBd01mi4b48KQzvYqvymqdADdBQRnx74=
Subject key identifier: F9:C0:8C:94:2D:0B:0C:A5:02:5F:2D:57:B2:7A:0F:34:86:94:85:CF
Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Certificate serial: 0198D5F1AA21C13EE494430639F5E617D3DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
Manifest number: 10AE
Signing time: Sat 23 Aug 2025 08:00:41 +0000
Manifest this update: Sat 23 Aug 2025 08:00:41 +0000
Manifest next update: Sun 24 Aug 2025 08:00:41 +0000
Files and hashes: 1: J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl (hash: SAyQ9APDKVJ1aoE1Xjnw5WxaZ4w6SQPKdrXYpQu638M=)
2: YmG5FcsW3S43XyijT62zmWMd610.roa (hash: Sh1sRBIDqrknsDPBNOeRI3CSuT41xnHIPduRy76n3aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:aa:21:c1:3e:e4:94:43:06:39:f5:e6:17:d3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7
Validity
Not Before: Aug 23 08:00:41 2025 GMT
Not After : Aug 24 08:00:41 2025 GMT
Subject: CN=f9c08c942d0b0ca5025f2d57b27a0f34869485cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b1:03:f5:3f:3b:db:e2:41:f3:25:af:2b:1b:
b4:9c:90:2d:11:be:42:a9:a3:ad:ea:80:6e:e8:7d:
2d:2c:8b:d4:ca:1f:26:82:7c:96:fe:76:af:bf:35:
86:fa:e2:e3:94:73:82:36:83:4b:36:68:10:e2:e0:
4c:6d:e7:45:b0:97:b1:d6:10:6c:02:a8:3f:6b:e3:
f2:05:bc:df:9e:00:71:30:0f:b5:89:bc:35:ed:35:
2d:72:c8:32:f7:ad:0f:95:eb:34:e2:02:43:f2:dd:
23:bb:3d:29:d2:30:63:77:ad:5a:e1:ab:7d:d8:4b:
61:3f:c3:2d:1b:e1:97:ea:12:0f:33:de:29:a8:82:
3f:e9:64:da:c2:57:74:b8:ca:25:f9:d3:8c:9e:4f:
3a:76:4b:83:f0:4f:96:27:6a:10:32:45:dd:eb:0b:
c4:fb:6d:57:9f:ab:e8:1e:91:aa:77:11:4c:83:ca:
f3:73:8c:52:1a:9b:b8:81:b6:e5:8c:43:2c:d8:de:
65:87:1c:1d:3f:82:11:94:35:20:44:32:fe:e8:48:
5d:eb:ee:25:59:f0:4a:84:89:85:29:76:29:29:6d:
c8:e4:f2:ea:6c:20:a1:94:29:fb:78:49:da:17:af:
5a:9b:47:d9:e5:50:86:f4:be:c5:c3:19:4b:8e:4b:
03:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C0:8C:94:2D:0B:0C:A5:02:5F:2D:57:B2:7A:0F:34:86:94:85:CF
X509v3 Authority Key Identifier:
keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2e:07:67:58:bb:c7:c5:f2:0b:c4:0b:f3:56:ec:35:b3:a6:
52:ab:ec:c7:b6:37:a9:9d:3b:47:f8:3d:cf:24:83:52:6b:8e:
19:ea:82:ff:16:df:04:aa:d1:f3:9f:9f:18:e3:ec:b3:a0:17:
2c:16:45:72:7c:e4:09:63:ad:63:6f:49:02:f6:45:ad:4e:53:
67:48:4b:80:e3:21:29:f2:96:5e:5e:68:47:f1:77:5f:56:39:
9e:40:29:32:58:fb:55:4c:a6:37:28:71:55:26:67:c0:1c:e8:
dd:1a:bd:ad:f2:a8:cc:00:01:e9:49:50:f8:62:c7:43:ed:61:
04:38:e9:20:9c:c2:ee:8c:2a:84:63:1b:30:c0:c5:af:88:37:
17:8a:a4:c9:0a:0a:f1:0a:3b:2c:c3:47:7f:88:6b:4e:41:dc:
33:71:75:e1:2f:37:bd:5f:13:31:51:7b:23:c7:bc:e9:85:e6:
94:10:0f:ce:81:88:fb:36:83:6e:e5:0c:07:ec:53:53:23:f6:
e8:65:79:ff:fb:2d:0c:07:62:62:81:7c:47:c2:5c:e2:e4:13:
43:81:d8:60:e8:43:70:c5:91:e9:80:df:70:d7:07:13:17:32:
dd:af:dc:87:ad:21:2a:b6:d9:c2:7e:04:9e:9f:e1:e0:98:f9:
bb:e5:bd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:44:48 2025 by rpki-client