Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
File: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft (raw, json)
Hash identifier: c5fSGuTrYY1NVdGpt2Q8seSfORosZahtGs/kN81nv+k=
Subject key identifier: 87:02:35:E9:36:DB:D6:99:96:60:0F:07:CE:79:76:2E:5B:89:2E:C1
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 0198D705C0318D3E72161984C1102896614A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
Manifest number: 1357
Signing time: Sat 23 Aug 2025 13:02:14 +0000
Manifest this update: Sat 23 Aug 2025 13:02:14 +0000
Manifest next update: Sun 24 Aug 2025 13:02:14 +0000
Files and hashes: 1: J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl (hash: kpp6c0p0v5zDOQwnIl/TlZ780jHXCODfPBPqCy258KA=)
2: qT62sQgJ7wYZrGkOwUrBAOZW36U.roa (hash: LRDn9R97dLgxGAtTPJOW62pBW4f3rWtLvCdfekL/e2M=)
3: u-G-BjNkzDN41_akwDoArPHas8I.roa (hash: 3oV8r7qGwqy7avjI+jDPXV4J2Rs9RBfex18bpzCreTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:c0:31:8d:3e:72:16:19:84:c1:10:28:96:61:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Aug 23 13:02:14 2025 GMT
Not After : Aug 24 13:02:14 2025 GMT
Subject: CN=870235e936dbd69996600f07ce79762e5b892ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:30:d3:4a:bf:b2:aa:46:bc:7a:1e:c2:9d:
03:15:7e:e8:2d:6f:85:40:38:91:8a:ea:f7:a5:6f:
8d:e3:08:9d:bf:fe:42:c2:32:fd:d4:f8:44:dd:94:
1a:ae:bf:ca:2d:60:93:ba:2f:4e:d9:3b:db:38:f3:
23:fc:d8:86:60:26:3d:98:b2:eb:56:3b:e5:ed:b6:
31:7a:df:4b:32:a0:ff:56:ef:8e:dd:af:16:5f:b2:
e8:38:68:ee:56:30:58:74:c8:f1:17:20:4c:97:7a:
a1:f2:02:7c:02:15:5c:ae:62:8c:2b:c7:9e:2f:4b:
cd:5b:74:15:ea:db:e3:81:41:f5:c3:0c:e6:a9:52:
b5:ba:99:5a:9a:97:ce:4e:58:ea:e4:85:6e:29:54:
11:7c:a5:cb:08:e5:6b:2b:5d:a4:6e:b6:00:da:e0:
b6:f0:00:4e:c4:b6:c0:77:d8:c3:01:3f:e5:67:9e:
f8:80:12:29:fb:df:a6:0a:c3:9e:35:fc:77:a5:46:
f5:ad:30:a3:69:54:51:94:18:8a:90:28:05:d3:d9:
9a:68:5c:59:ba:97:7c:47:60:0a:52:06:15:8a:10:
9b:b0:f6:5a:37:6c:9d:1f:26:39:cb:62:82:af:43:
7e:96:e7:63:43:ad:5b:49:c6:59:33:b9:0c:a9:e1:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:02:35:E9:36:DB:D6:99:96:60:0F:07:CE:79:76:2E:5B:89:2E:C1
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:a0:b7:df:09:e1:be:22:9e:bc:2e:c1:03:b7:1c:79:16:be:
b4:b1:7a:e8:17:0b:60:e7:98:35:64:1f:1e:b4:90:54:70:29:
59:cc:b6:8b:e5:59:8b:b4:9f:97:12:c9:cd:ff:30:d8:a8:1e:
c2:f5:b7:da:15:a6:f2:11:0f:b2:3d:7f:8f:69:45:f6:7f:be:
32:fa:d1:6f:d3:60:d2:6f:f9:a9:d4:5b:17:62:ab:d2:46:da:
a3:94:86:80:84:a5:2b:3e:86:6c:c3:09:1d:53:c9:57:e2:3b:
9d:98:70:6e:64:50:31:b1:02:4b:84:66:57:1a:12:f7:20:15:
7e:4a:45:1f:98:c5:34:44:d9:b5:36:1c:6e:1d:96:c7:a9:5d:
33:b3:fb:eb:09:6d:63:8e:96:14:ba:fc:8f:18:d1:72:86:b0:
5a:f4:13:64:04:8a:c4:b0:35:f0:45:55:71:f3:39:75:61:73:
a2:81:54:24:f9:77:a7:29:4d:a4:25:b3:a1:73:3d:d1:f0:f0:
cd:4a:af:56:1e:c8:25:cf:92:ea:c2:d3:e1:34:79:db:61:bc:
95:0f:ad:0b:fe:8b:5e:d1:7e:4b:94:94:42:5e:7c:f2:76:3c:
ed:2a:bf:f2:70:9c:ed:46:e7:25:61:e2:80:8b:c4:e9:9b:9c:
73:af:55:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:31:37 2025 by rpki-client