Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
File: J-lCeLPhkBhjrdYde98tJzzxNAw.mft (raw, json)
Hash identifier: 4GjxL1Msc/NBkyW+ZcZrfO3r3JCYN2VxK5nk1vpbRUE=
Subject key identifier: 25:56:9E:95:FF:B2:F8:6A:DD:A3:33:F0:37:8B:30:CB:BA:2D:85:48
Authority key identifier: 27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
Certificate issuer: /CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Certificate serial: 0198D660C69E71D52AB5D9E5AD994C545E47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:02:03 +0000
Manifest this update: Sat 23 Aug 2025 10:02:03 +0000
Manifest next update: Sun 24 Aug 2025 10:02:03 +0000
Files and hashes: 1: 7oIgDgDNpX6XAW4lQ5qq69olmro.roa (hash: 3Y/w0AZ9JHVMQciRUgte6R4EVpLThqmwyOoyqP/qwcw=)
2: J-lCeLPhkBhjrdYde98tJzzxNAw.crl (hash: IJSnvb88f03NhM5dpTQ9CGgR3sNPZTLS8W0Zvriebf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c6:9e:71:d5:2a:b5:d9:e5:ad:99:4c:54:5e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27e94278b3e1901863add61d7bdf2d273cf1340c
Validity
Not Before: Aug 23 10:02:03 2025 GMT
Not After : Aug 24 10:02:03 2025 GMT
Subject: CN=25569e95ffb2f86adda333f0378b30cbba2d8548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:de:62:36:f2:4a:6a:0b:8d:6d:1b:31:fd:
de:c8:17:8c:b6:e1:9c:bd:70:aa:99:4a:81:8f:f3:
e9:26:b2:f4:40:44:a5:a2:dc:83:79:b0:f3:f2:12:
ec:d5:a3:c5:d3:fd:08:92:1e:f4:a3:da:0f:87:28:
0e:f8:20:67:e2:12:3b:5a:a3:74:e1:03:12:f0:b4:
4c:95:5b:83:35:dd:68:c8:22:d4:2a:31:3b:34:86:
38:17:6c:29:d7:48:99:53:3c:bd:fa:f5:1c:ce:6a:
dc:3d:0c:61:11:8c:40:60:65:dd:1e:28:a8:f8:9c:
97:34:1b:ff:29:92:1c:b2:ab:a2:61:95:a6:72:d4:
15:6a:3f:ef:df:01:ee:38:74:cc:a8:66:6e:5b:24:
aa:43:4d:e0:82:8d:fe:f1:0c:ad:e6:61:c8:41:b1:
24:db:4e:71:9c:80:b4:37:29:de:10:02:75:fa:f4:
40:32:f8:6b:6b:52:12:49:fa:85:f5:a5:39:72:79:
49:fd:27:48:45:3a:5e:81:9c:13:2e:a0:6d:fb:41:
7d:e8:67:49:a2:b9:4f:f5:dd:56:d8:eb:cf:50:20:
fd:8b:bd:5b:2d:15:a7:ce:4b:89:d5:34:8d:80:0a:
ea:54:d9:0a:fa:4a:9b:aa:de:d6:49:05:72:ba:94:
23:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:56:9E:95:FF:B2:F8:6A:DD:A3:33:F0:37:8B:30:CB:BA:2D:85:48
X509v3 Authority Key Identifier:
keyid:27:E9:42:78:B3:E1:90:18:63:AD:D6:1D:7B:DF:2D:27:3C:F1:34:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-lCeLPhkBhjrdYde98tJzzxNAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bf41b4-1db9-4aa2-ad74-b7c99ddac703/1/J-lCeLPhkBhjrdYde98tJzzxNAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:56:0d:47:71:b4:e3:50:c7:09:c4:2a:df:71:42:5f:e1:4c:
22:f1:f9:25:b4:b8:76:9f:0f:fe:2f:ad:3f:4d:00:d4:dc:e8:
4e:c0:58:08:31:3d:a0:85:5d:51:36:44:d6:82:2b:1f:65:76:
3b:82:ec:65:c3:c7:f4:39:6b:b6:50:95:28:cc:84:1b:b1:e5:
aa:7e:f2:66:0b:6f:1d:36:d8:f0:dd:99:c1:77:9d:6e:b0:f1:
f4:b8:09:27:15:9a:e9:3d:0f:8f:bf:a6:59:91:e5:b8:86:06:
f7:0f:b1:a6:4c:37:7a:34:49:da:b8:58:4b:b5:08:9b:de:6a:
81:fd:8b:6e:a8:43:9a:4c:83:34:3a:42:a5:bd:e9:3d:52:d0:
4b:bc:53:bd:b4:61:1b:6c:6e:f8:52:f4:0b:bf:11:fc:20:3d:
1c:4c:16:61:2c:b4:13:94:f2:6a:70:32:f2:87:06:e3:6b:b2:
0e:38:ca:45:71:98:b9:65:b1:34:4d:d9:97:60:45:f5:72:4b:
47:9b:46:e4:bf:06:50:8f:2e:5f:d5:4e:ab:dc:1b:2f:2e:31:
e8:e3:76:4e:5c:0e:c0:a1:57:ff:ad:1b:4c:7f:5c:ba:7a:51:
7c:a9:27:79:ad:ec:8b:f4:90:53:b4:97:35:65:8c:ea:b1:16:
f9:49:5a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:21 2025 by rpki-client