Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
File: J_8gRAummKTcBDm8F5-zOj7hzJU.mft (raw, json)
Hash identifier: guOgy1rG5uQdSYLtOD5bLeJ7AKRzPEUxVz0+Pu7qscA=
Subject key identifier: 47:79:55:7A:11:22:49:43:63:03:CD:A9:BD:F6:DD:CF:A1:C3:8C:BF
Authority key identifier: 27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
Certificate issuer: /CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Certificate serial: 0197B6A07C6B2EC834E3EDC9D42B05BA0F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
Manifest number: 0C8B
Signing time: Sat 28 Jun 2025 13:01:00 +0000
Manifest this update: Sat 28 Jun 2025 13:01:00 +0000
Manifest next update: Sun 29 Jun 2025 13:01:00 +0000
Files and hashes: 1: J_8gRAummKTcBDm8F5-zOj7hzJU.crl (hash: iIfDi6oAebbmEPQZno5W9YRRLR7kqBbz27kweYrk5iQ=)
2: _tUXooY9b06bDKDjgo1P9zjilGI.roa (hash: eyE2Sp1NPUfSOv01mHhVH2OIahlIo+oZSctInWb+NT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:7c:6b:2e:c8:34:e3:ed:c9:d4:2b:05:ba:0f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27ff20440ba698a4dc0439bc179fb33a3ee1cc95
Validity
Not Before: Jun 28 13:01:00 2025 GMT
Not After : Jun 29 13:01:00 2025 GMT
Subject: CN=4779557a112249436303cda9bdf6ddcfa1c38cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:33:ff:4b:c9:e5:b9:3f:50:28:1d:90:83:
b5:d7:09:21:ce:e5:7d:e8:86:3c:82:29:a6:7c:27:
21:c0:5f:fe:c6:f0:93:56:de:7e:8a:72:c0:b5:10:
35:50:d2:4c:c8:d7:2c:2f:70:54:25:1d:cc:02:c1:
09:6c:1c:e5:8a:e3:d7:13:6b:5c:b4:4a:a4:87:d7:
72:bd:35:ad:b4:5c:89:ac:0d:57:95:bd:c3:71:ad:
60:8a:83:bd:85:c6:f3:5c:16:8d:e7:a9:8a:8a:0f:
58:48:df:87:c6:ba:80:89:08:03:1b:28:7e:39:be:
f7:d7:0b:db:94:23:f9:d8:45:7f:c6:e6:d9:53:60:
ea:5b:2c:a0:07:99:13:42:95:87:12:57:14:43:93:
d1:df:67:f0:68:20:8f:75:d5:b1:39:2c:d8:01:d4:
b4:5c:27:09:4d:86:41:b1:35:73:2b:10:7b:69:b3:
58:88:4e:f8:e3:68:81:45:a0:83:82:77:38:c5:5f:
31:9b:bc:f7:35:55:4f:f4:22:a7:de:88:49:21:9a:
7e:99:2e:31:09:78:08:40:e3:fc:2f:27:e5:e6:40:
bd:cb:db:c8:dc:96:35:8b:62:a0:6d:75:3d:07:c8:
5d:20:d8:a9:57:d5:3f:78:eb:4d:cd:06:4c:42:ae:
78:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:79:55:7A:11:22:49:43:63:03:CD:A9:BD:F6:DD:CF:A1:C3:8C:BF
X509v3 Authority Key Identifier:
keyid:27:FF:20:44:0B:A6:98:A4:DC:04:39:BC:17:9F:B3:3A:3E:E1:CC:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_8gRAummKTcBDm8F5-zOj7hzJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21deba-db66-4702-bdbf-09115d592e6f/1/J_8gRAummKTcBDm8F5-zOj7hzJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3d:ae:18:bc:b8:c8:84:d5:49:ee:54:3a:54:26:1e:a7:d0:
d9:fe:24:35:c7:78:e8:68:d9:4f:e2:16:c2:a2:52:37:cc:37:
b3:ff:43:5d:51:70:03:61:52:6c:ee:dd:3c:4e:b8:6c:cf:60:
4d:cd:ff:66:87:0f:c9:47:63:03:fa:3f:47:4f:64:72:b3:51:
6f:15:69:6a:97:33:f9:6b:3e:67:9e:9e:4e:cc:71:68:a9:17:
71:72:18:75:b4:5a:79:db:c9:47:2a:59:7b:e6:ad:88:30:54:
24:b9:53:e8:30:cd:d3:29:21:3f:10:b8:1c:1d:73:e6:30:76:
06:e7:cd:4d:55:a6:a4:11:ba:7d:51:21:71:5f:0c:c7:15:68:
1f:79:1c:a8:99:40:3b:c8:0a:6b:75:8a:e9:22:6c:d9:7c:77:
9a:05:d1:3d:d1:dc:47:36:b8:e8:97:c4:f8:15:a4:e5:68:88:
c1:01:b8:7c:d4:5f:99:1d:94:bf:d7:30:41:b6:da:fa:df:82:
5d:fa:5d:96:e4:d2:b3:1b:d1:77:df:c2:e3:f3:15:8c:8d:ec:
0b:d5:4e:7d:1e:c7:8a:6e:71:99:df:f0:2e:f5:4a:d4:49:ea:
3e:ef:fb:60:43:f8:9c:f2:87:7d:d8:a6:8a:97:6e:a1:0e:cc:
8a:55:36:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:22 2025 by rpki-client