
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
File: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft (raw, json)
Hash identifier: nyxXBl4AU7gkppk5v0KC9FBNH2GY5R/eLnUxns03XsM=
Subject key identifier: CF:D8:2B:3B:69:58:FF:83:34:56:BF:1B:47:AE:40:CF:32:08:C1:62
Authority key identifier: 27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
Certificate issuer: /CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Certificate serial: 0197B8C60D6A14B3B3E6A560790DAE65B16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
Manifest number: 15CB
Signing time: Sat 28 Jun 2025 23:01:16 +0000
Manifest this update: Sat 28 Jun 2025 23:01:16 +0000
Manifest next update: Sun 29 Jun 2025 23:01:16 +0000
Files and hashes: 1: 64rEanXhDA2OJWgNqMgPZ5FM7ec.roa (hash: 8qJk7sdPmgd5qyBKhZltol3z/GSxNSlFaZ8AUoHL904=)
2: J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl (hash: oBvTrn0XMc4s6weMF1ez+Leq18aDvhPVQVPXs+ryIbE=)
3: J_FW6C53GNA1eZgfBxqmfj1GnHk.roa (hash: 2FVTaWaI6Pa7rkvw9aYDp7sxlvCorspj3xme17atTXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:0d:6a:14:b3:b3:e6:a5:60:79:0d:ae:65:b1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d7304c1b59dc22731bb53eff5a84ed9a30614c
Validity
Not Before: Jun 28 23:01:16 2025 GMT
Not After : Jun 29 23:01:16 2025 GMT
Subject: CN=cfd82b3b6958ff833456bf1b47ae40cf3208c162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d0:48:34:39:47:c5:b3:d9:3f:20:37:2d:50:
76:48:5a:b5:6a:39:a7:46:79:78:52:44:24:23:d0:
90:95:16:62:96:d1:7f:38:dd:43:e7:02:eb:ad:11:
11:5c:fb:69:1e:4d:3f:95:de:c0:53:c7:a7:39:ce:
53:d0:92:09:25:c7:6a:19:f1:6d:93:7c:ae:d2:c2:
c6:e4:56:49:ec:43:b9:03:62:3a:91:37:04:1b:35:
84:81:60:1f:96:f8:dd:dd:3c:16:45:6f:d2:bb:35:
d4:16:52:24:59:81:d0:92:41:77:9a:c8:4d:cf:00:
ba:03:b4:d6:c5:46:9f:4b:b4:ed:eb:9c:81:4d:63:
7f:e1:b6:36:24:c5:f2:2e:95:bf:da:9f:a7:3b:a4:
a6:a2:70:4d:02:84:3b:d1:f7:e7:08:57:55:79:9f:
ee:79:9a:da:7a:df:76:9e:08:f0:a0:1e:00:74:ac:
b6:4d:c0:fd:c1:20:94:eb:5e:38:70:53:97:3f:ac:
ce:04:65:31:90:da:c1:27:39:51:27:09:84:dd:11:
47:7e:af:26:e6:a1:79:d5:f9:ac:39:1b:ff:86:64:
1a:52:17:c0:69:06:2a:72:77:36:8f:d0:a7:1a:c2:
8c:cb:61:3e:a6:66:90:ad:0d:83:df:f7:47:15:98:
64:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D8:2B:3B:69:58:FF:83:34:56:BF:1B:47:AE:40:CF:32:08:C1:62
X509v3 Authority Key Identifier:
keyid:27:D7:30:4C:1B:59:DC:22:73:1B:B5:3E:FF:5A:84:ED:9A:30:61:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/c13e12-e50d-4338-8a2f-fffb5a4e762a/1/J9cwTBtZ3CJzG7U-_1qE7ZowYUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b6:21:43:3c:a4:70:54:17:74:b3:23:75:d3:7e:12:6b:aa:
07:bf:ae:cf:35:c3:26:67:e1:b2:28:19:b2:62:aa:44:9b:d0:
7a:6f:c3:fb:49:73:77:1f:22:51:e4:13:ae:92:56:98:0b:ac:
b3:0f:13:a0:ab:50:50:f6:4f:66:41:ce:e0:9d:d6:f0:dd:67:
fd:2a:3a:17:fd:4a:3a:d1:69:c3:5c:c5:82:3c:fd:2f:58:fb:
fa:df:1e:9e:d7:e0:f8:44:a3:af:4b:b2:df:34:b9:19:24:3e:
89:b3:01:5e:72:c0:a5:fc:5b:9c:4e:9a:52:a0:55:6a:de:bf:
c4:6f:99:87:6f:f6:ec:95:9e:f5:d3:14:cc:4a:ec:9d:a6:c4:
e0:69:22:64:f9:2e:05:6d:38:dc:65:b4:a4:fa:24:e5:20:b4:
5a:64:d7:8e:1e:d2:10:5f:e0:44:67:a6:02:e3:84:0e:12:5d:
e6:64:de:ee:de:2b:1b:87:da:e4:7c:c4:36:e0:c0:f5:31:9f:
a3:16:32:e1:b6:19:85:53:4d:7e:da:8d:33:e7:3d:ff:49:0b:
15:27:4b:8d:10:1f:60:37:f8:9c:2e:a8:8a:fd:e9:54:12:a3:
0e:eb:a5:85:de:a5:78:12:f1:2b:3e:76:84:69:94:33:a4:ee:
f5:f4:79:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:33:24 2025 by rpki-client