Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
File: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft (raw, json)
Hash identifier: 7CnLXY4QsHjajz06OZ/6mnLdzG388fsXMk4pm5+VfeU=
Subject key identifier: CA:B0:8B:2B:32:61:D9:A1:B1:6B:09:B5:35:D2:1D:B6:57:45:62:E0
Authority key identifier: 27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
Certificate issuer: /CN=27e367d8decf7d626e54780f80e57360d2c078cd
Certificate serial: 0198D5F1C924F8305E9C78BAD92E09811729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
Manifest number: 0D35
Signing time: Sat 23 Aug 2025 08:00:49 +0000
Manifest this update: Sat 23 Aug 2025 08:00:49 +0000
Manifest next update: Sun 24 Aug 2025 08:00:49 +0000
Files and hashes: 1: J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl (hash: MqngFF3IVlfacxBKdFTaEqHGQcHYHqb8C76/8zdUhWA=)
2: kH84XjWCF3YsEupBc9_NB-UJ1LE.roa (hash: vFi6ltA+YLY/2jEI7t4T0lx3r1xW2YaGJ9YVTzgeHZA=)
3: m8b-nSkJNQaQc9Ko3VmUYZ_aR5k.roa (hash: x/jmnJNzCw/+lpmfHMz6HsStw+fWqWLA6QrXjLJpCDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c9:24:f8:30:5e:9c:78:ba:d9:2e:09:81:17:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e367d8decf7d626e54780f80e57360d2c078cd
Validity
Not Before: Aug 23 08:00:49 2025 GMT
Not After : Aug 24 08:00:49 2025 GMT
Subject: CN=cab08b2b3261d9a1b16b09b535d21db6574562e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:39:c5:dd:c7:44:e3:f6:bb:8d:89:e7:b1:19:
32:43:60:14:db:4d:a3:06:0d:9e:7f:39:b3:35:f2:
03:3d:fb:db:d3:53:91:a9:eb:7d:b6:28:51:e4:79:
04:84:5a:9f:e3:73:de:c0:24:29:90:df:6e:70:2f:
c9:dc:be:ba:92:c1:a1:be:d3:76:d1:cf:d1:72:43:
40:29:8f:17:e8:6d:0c:90:5d:00:39:01:23:ae:9d:
a6:27:a6:b1:ac:fd:11:ff:36:8a:1d:8a:37:87:ee:
cd:6a:27:89:33:13:01:6a:51:5b:c0:45:a7:27:ea:
f7:c8:c9:cf:83:d8:ae:58:16:dc:69:5d:4c:a1:a1:
3e:0b:7c:e8:fe:a0:ca:95:39:25:bc:c0:f1:c8:6c:
58:04:b8:b9:c8:71:a7:f3:20:f1:75:dd:83:37:c9:
43:e4:1a:99:41:92:09:4e:e0:8f:fa:84:a6:e1:2a:
37:63:fe:cf:e7:47:4c:55:0a:e3:f1:20:60:14:9b:
05:1d:20:a0:c5:a3:7a:3e:18:9c:a3:b8:19:1b:bc:
58:c1:b3:77:a8:bc:f6:e3:1a:38:74:75:de:96:2d:
45:c1:74:a7:00:f4:97:f6:e1:fe:49:2d:9f:06:3e:
2c:cd:29:ba:bd:59:97:95:a0:c8:1f:72:e4:5e:e3:
ff:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B0:8B:2B:32:61:D9:A1:B1:6B:09:B5:35:D2:1D:B6:57:45:62:E0
X509v3 Authority Key Identifier:
keyid:27:E3:67:D8:DE:CF:7D:62:6E:54:78:0F:80:E5:73:60:D2:C0:78:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5f0579-0efa-422b-aa68-a434fd088fd0/1/J-Nn2N7PfWJuVHgPgOVzYNLAeM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d3:c0:d2:4c:a9:fc:6b:94:28:23:42:cb:e1:70:50:a9:62:
1d:4e:ce:34:c7:39:84:86:a9:2c:18:cd:8a:94:47:fe:82:a3:
92:d5:e9:3c:25:df:9a:81:e9:0a:57:42:0b:30:88:50:ca:7e:
7c:b2:77:4e:8d:af:20:cc:d8:72:d4:e0:68:19:57:f6:01:f0:
bf:ed:45:9a:3b:51:d6:7a:0f:f9:35:e1:71:c3:25:7b:fd:ce:
51:87:07:62:39:ce:7f:75:4f:57:14:cf:e5:c0:20:ec:44:e3:
78:65:9e:fe:34:34:5b:67:4b:19:dc:74:00:fc:56:d7:be:29:
3e:2b:a3:d9:12:74:f2:2f:cd:2a:67:a0:58:d5:1e:12:2e:80:
1e:e4:1d:58:d1:bc:ba:aa:69:d1:2a:be:1d:37:b5:43:3b:fe:
0b:42:b4:d7:63:df:f2:d1:61:82:24:6d:f9:f8:07:ab:49:f0:
c2:2d:11:67:20:7e:39:0f:31:18:37:6a:ae:2b:6f:7c:6c:b7:
a9:4c:32:df:e4:61:29:a6:4a:c1:65:0c:55:52:40:a9:10:1f:
78:dc:79:57:8b:70:c2:f2:3f:82:0b:f7:cf:86:0d:49:0c:57:
bc:45:d5:4b:20:bc:b1:13:4c:b9:ec:24:17:f8:2e:c5:b0:05:
a9:1d:57:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:35:40 2025 by rpki-client