Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
File: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft (raw, json)
Hash identifier: 7c0t30tJMhbG9s0tuKEUQMzNko4NBUDTlaolwzzrb6A=
Subject key identifier: CF:24:72:9F:C7:6A:9C:A8:05:DE:2C:B6:A7:3F:51:9C:9E:42:DA:34
Authority key identifier: 27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
Certificate issuer: /CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Certificate serial: 0199FBB375316589F7AD9354BFD3F102DBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
Manifest number: 0147
Signing time: Sun 19 Oct 2025 09:01:06 +0000
Manifest this update: Sun 19 Oct 2025 09:01:06 +0000
Manifest next update: Mon 20 Oct 2025 09:01:06 +0000
Files and hashes: 1: 3GJ0bOfekp5L6arp0MI-w_XPimQ.roa (hash: 0lzM9+wo3VrPT3aYhPai/br06U/H49IVoIizC5oG8Xc=)
2: J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl (hash: LG4nUf05n14za2sS10giPdxH3Gblx7K7rEtVu4fF+zM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:75:31:65:89:f7:ad:93:54:bf:d3:f1:02:db:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2750f3d7ed825617e26be09aeccc62dda4ea314f
Validity
Not Before: Oct 19 09:01:06 2025 GMT
Not After : Oct 20 09:01:06 2025 GMT
Subject: CN=cf24729fc76a9ca805de2cb6a73f519c9e42da34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8b:85:ba:ba:52:47:e8:1d:d1:cc:af:e7:67:
c4:fc:c3:99:d8:df:86:5d:7b:e4:fc:84:3c:11:10:
a0:a1:65:0e:63:db:a6:99:e1:bd:41:a0:a7:bc:34:
6a:bc:65:b4:f5:b7:38:6f:f2:c0:c5:de:65:59:0d:
a4:c2:13:d2:df:13:e4:bb:fb:8c:50:ae:a8:d9:36:
ca:e8:f9:f8:7e:c6:06:69:2b:7b:3a:eb:69:ec:41:
75:c7:ed:ce:d5:23:21:bb:d8:03:d3:9b:0b:bc:ee:
6a:28:cc:d9:40:b3:f0:43:1d:4c:e9:69:ad:65:85:
61:df:e4:6d:92:1e:dd:5a:56:1a:57:ca:a1:95:f6:
7f:02:5e:06:46:ca:47:e1:43:3d:cd:7a:2c:ee:6f:
da:bc:c7:8a:54:81:90:d8:7d:34:7b:e7:4c:63:ab:
6d:4a:db:ec:1c:ee:23:ce:4f:ee:83:19:92:47:6a:
81:51:8e:b1:8a:27:13:1b:26:00:8e:ad:16:e7:fb:
ef:53:67:ce:88:b3:4b:b6:a5:75:25:c8:96:15:f6:
da:5a:80:f2:fe:c2:a5:e7:b7:83:a5:3f:0a:05:84:
65:ff:a7:99:19:73:93:4f:f3:bb:1e:92:9b:a0:f4:
f2:ac:ac:03:06:d6:39:0c:ba:df:76:6b:c3:96:09:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:24:72:9F:C7:6A:9C:A8:05:DE:2C:B6:A7:3F:51:9C:9E:42:DA:34
X509v3 Authority Key Identifier:
keyid:27:50:F3:D7:ED:82:56:17:E2:6B:E0:9A:EC:CC:62:DD:A4:EA:31:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/857a2f-3288-467e-b043-2431e6ba6311/1/J1Dz1-2CVhfia-Ca7Mxi3aTqMU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:53:39:60:a8:02:f4:4f:44:86:63:10:a9:b9:4f:ae:88:72:
2f:d7:e4:d4:a9:25:6f:3d:01:65:76:08:a2:50:f3:de:ff:b8:
80:8d:71:42:6d:56:d0:b0:b8:52:4d:ad:e7:b7:a2:f7:ef:64:
af:e8:f0:dc:f0:1c:b5:47:10:82:14:f9:00:4d:d0:e7:d5:30:
33:ef:2b:a1:1c:71:2d:cd:88:ed:9d:53:0f:50:86:49:2f:b0:
4d:2f:57:f0:71:39:5e:1d:b5:8a:92:fd:2e:f3:c3:04:02:ec:
31:a5:de:7e:18:c5:e0:9f:e3:bc:f0:4f:60:46:66:48:7c:fd:
33:b6:d9:86:93:0c:cc:a5:e9:fc:3c:cb:29:f1:44:fe:c9:14:
e7:d5:79:2e:a7:81:2e:8b:96:10:b0:c3:4f:e3:99:ac:7d:1f:
2d:44:34:a1:4a:a9:02:ce:47:fd:17:ba:fd:b7:44:6f:ae:b8:
4d:e0:57:3c:c3:77:93:95:3b:19:b9:82:1b:89:33:8c:f9:73:
aa:61:e5:47:ce:ce:d4:67:ef:f2:fd:62:c8:bd:3a:de:97:e3:
08:e8:25:af:a7:6e:05:9e:f4:4e:b5:79:87:17:d3:1c:3c:48:
b7:d7:d8:0d:45:86:20:d1:76:09:ab:f1:3f:40:c8:6e:84:cf:
10:37:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:08 2025 by rpki-client