Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
File: J7JQwAtGuhgF8v5fanfo_-X-J3g.mft (raw, json)
Hash identifier: EbEg8IH7/m1PKKAsmEDeKXU2CQoGmSTV9fmHspmETcc=
Subject key identifier: 2B:BC:D9:04:8A:C9:2D:05:9C:79:C3:6A:08:D3:30:04:62:E1:52:8C
Authority key identifier: 27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78
Certificate issuer: /CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778
Certificate serial: 0198D4A84D0F7B5E4F20BE26C381187E90BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
Manifest number: 0156
Signing time: Sat 23 Aug 2025 02:00:56 +0000
Manifest this update: Sat 23 Aug 2025 02:00:56 +0000
Manifest next update: Sun 24 Aug 2025 02:00:56 +0000
Files and hashes: 1: 2Xuz_XQe5kxj9Ta-txXKOZzo3-8.roa (hash: 4cAudEOa7B6QV2XVnZGGI65WlCpgsFSmPdilxFuHyN8=)
2: J7JQwAtGuhgF8v5fanfo_-X-J3g.crl (hash: hjn9z8REhbraw7DwEeCQmuClLnOI94gwE48KsYCUUeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:4d:0f:7b:5e:4f:20:be:26:c3:81:18:7e:90:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27b250c00b46ba1805f2fe5f6a77e8ffe5fe2778
Validity
Not Before: Aug 23 02:00:56 2025 GMT
Not After : Aug 24 02:00:56 2025 GMT
Subject: CN=2bbcd9048ac92d059c79c36a08d3300462e1528c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:fc:54:5d:77:1c:19:92:90:48:40:fb:fe:
63:04:39:cd:83:2f:c6:a0:6a:2a:4a:ed:02:44:5c:
c8:d7:e0:c3:4e:c5:73:92:ee:77:34:0a:25:13:f8:
53:50:8e:c6:0d:c9:47:d6:75:3b:33:04:b4:98:be:
f7:a5:61:f5:2b:8c:89:68:94:2b:8f:f0:52:64:29:
30:28:00:e3:87:32:cd:ae:07:25:27:5e:78:d3:ab:
c9:31:b2:5c:8d:5a:dc:ba:87:13:af:a2:62:41:5b:
ad:35:ee:4f:0d:b3:65:d8:9c:e1:5d:1b:72:fc:82:
d8:cc:84:0f:85:35:17:c4:f8:0f:8b:f9:fa:c2:7b:
51:15:1f:84:6c:9a:b1:b4:54:75:a2:4f:e3:a2:4d:
0a:d0:69:7f:56:48:96:4b:33:f3:0b:59:0f:1f:dd:
6c:d2:64:00:bb:d6:f2:61:2b:4b:bd:53:8d:a5:0d:
6a:82:f7:c4:9a:2c:c1:86:0c:c8:b0:48:39:a6:1d:
33:db:f4:cb:fc:f9:04:97:95:98:61:65:31:84:6d:
dd:43:1c:c4:8d:65:ae:81:1a:92:54:7f:22:f3:33:
48:76:0f:5e:df:3e:99:c8:96:2b:aa:71:11:f8:81:
49:e2:36:19:d0:6a:90:6f:e6:8c:db:cd:10:bf:c5:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BC:D9:04:8A:C9:2D:05:9C:79:C3:6A:08:D3:30:04:62:E1:52:8C
X509v3 Authority Key Identifier:
keyid:27:B2:50:C0:0B:46:BA:18:05:F2:FE:5F:6A:77:E8:FF:E5:FE:27:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JQwAtGuhgF8v5fanfo_-X-J3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/af3259-c21f-4bf6-b07c-16072214e602/1/J7JQwAtGuhgF8v5fanfo_-X-J3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:15:4c:f6:1f:70:7c:81:77:b2:e9:56:06:2b:ec:b8:9e:ea:
92:15:b3:24:ae:b1:c3:a5:98:87:80:86:da:b8:43:be:64:1d:
d6:ab:8f:a2:66:09:12:3e:5a:1b:4d:db:80:8f:e4:0f:9d:7c:
90:a6:ed:74:73:d8:4b:61:2c:89:5b:ca:68:de:d9:46:ab:50:
77:fd:87:0d:86:5c:56:92:34:a3:3f:17:9c:fa:17:b5:bd:0a:
bc:85:69:fa:d0:9f:a8:cb:08:8f:2e:de:55:69:ce:1e:b9:28:
d2:de:25:46:5f:66:14:7c:3e:79:49:5f:5b:78:09:c9:78:31:
1c:1d:1f:77:d0:a0:15:e0:6c:ac:9d:4d:82:96:64:1e:c7:f3:
06:5e:b0:c7:3e:dc:fd:25:c4:b2:27:d3:80:0d:8a:16:10:54:
51:ac:ec:a7:ee:ba:bb:04:9e:1d:34:47:b4:98:78:17:04:41:
d5:be:1d:95:88:ff:59:1c:e1:2a:fa:99:fc:eb:47:c6:2d:10:
db:3d:bd:cd:0f:38:55:5b:06:9b:c2:b0:9e:b8:75:14:e3:2f:
9b:47:5a:35:34:e0:8c:5a:96:ba:0e:b7:1e:6b:91:55:98:25:
02:ca:5e:d7:b7:56:b2:e4:93:06:8f:c7:8f:16:24:ec:0b:bb:
fa:bd:01:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:41 2025 by rpki-client