Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
File: J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft (raw, json)
Hash identifier: GIHC+1MuMP4Huc10IAvfSCoxrf/tMceTpzJ+iW/2rLU=
Subject key identifier: 71:F4:A2:AF:F1:96:42:84:2A:74:4B:22:AE:2F:4A:D2:A5:6D:94:6C
Authority key identifier: 27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
Certificate issuer: /CN=277b3683307c6fcc32bed177232f1d474541fbae
Certificate serial: 0198D5BC0C21B8494FAB7E1475288616DB21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
Manifest number: 1218
Signing time: Sat 23 Aug 2025 07:02:07 +0000
Manifest this update: Sat 23 Aug 2025 07:02:07 +0000
Manifest next update: Sun 24 Aug 2025 07:02:07 +0000
Files and hashes: 1: J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl (hash: rn1Vhop97ge4ROLusJ7TXMIvMIDGYp8/5v3YrbSTlV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:0c:21:b8:49:4f:ab:7e:14:75:28:86:16:db:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=277b3683307c6fcc32bed177232f1d474541fbae
Validity
Not Before: Aug 23 07:02:07 2025 GMT
Not After : Aug 24 07:02:07 2025 GMT
Subject: CN=71f4a2aff19642842a744b22ae2f4ad2a56d946c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:4a:5c:5f:c9:ed:60:95:9b:9e:2a:bf:26:
d5:ba:4f:37:24:c7:c9:1f:29:b8:2c:b7:3f:16:5e:
7a:55:50:1b:80:8b:79:ad:19:e1:4d:1c:9e:02:93:
d2:23:b7:bc:ae:ee:32:5d:82:c3:a6:42:4e:f9:e4:
7e:01:f4:3f:16:a7:1d:e1:23:72:81:48:3c:be:70:
8b:ad:45:91:c9:dc:23:e6:b5:3e:96:6f:23:c6:6c:
e9:e0:ce:0e:60:2a:33:69:09:8f:aa:a2:70:4e:b2:
ea:00:54:ea:ec:06:78:35:e9:3a:fb:31:95:ef:6b:
60:0a:61:5e:94:c0:c4:e0:d9:46:f2:1e:93:78:70:
54:66:04:5d:e9:b4:59:19:4e:b3:1a:a6:0f:f7:49:
14:c9:ea:83:bb:82:11:2a:f6:41:d9:e4:f4:a0:2f:
b9:3a:72:98:ed:77:f1:fb:3e:45:7a:7e:04:0b:58:
b7:17:78:50:5d:29:69:a2:a6:4a:61:7e:a7:f7:2c:
dd:72:51:2a:98:95:f6:9f:35:23:d4:18:67:7b:c8:
fa:fd:a3:60:db:d0:6c:fe:ba:d4:91:f7:a1:ed:14:
a3:af:a7:cd:a4:b9:be:e3:4b:84:34:cf:a9:c7:92:
24:f0:de:38:6a:ba:7e:94:80:4c:80:a6:83:da:15:
97:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F4:A2:AF:F1:96:42:84:2A:74:4B:22:AE:2F:4A:D2:A5:6D:94:6C
X509v3 Authority Key Identifier:
keyid:27:7B:36:83:30:7C:6F:CC:32:BE:D1:77:23:2F:1D:47:45:41:FB:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J3s2gzB8b8wyvtF3Iy8dR0VB-64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/999d05-d9e0-4bae-9b39-ac522f95754f/1/J3s2gzB8b8wyvtF3Iy8dR0VB-64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:34:02:17:eb:24:c4:42:c8:cb:16:99:e2:ba:f5:25:fb:b9:
06:ea:00:3e:63:e3:ca:f8:ef:79:08:3c:ce:81:49:12:01:e9:
9d:65:35:b8:ec:9e:75:a1:d0:ba:bc:6d:a4:23:22:e4:7a:97:
f8:ed:45:c1:13:e0:f7:31:24:79:d9:5e:6c:cd:18:cb:da:94:
7c:90:d2:e0:15:6f:9e:ce:a6:05:ce:54:aa:93:0c:7a:2f:09:
20:ef:fc:5b:ef:12:db:f1:f0:c8:34:aa:2f:55:fb:31:2b:3d:
09:1b:b9:49:43:23:db:e5:88:8c:5f:c5:ea:4d:8f:66:0f:db:
8e:59:b3:51:a9:17:4f:45:c8:10:bd:ac:fb:e4:3a:5b:f2:e3:
11:36:93:98:c6:81:2f:af:b8:c8:4f:35:cf:14:96:1b:74:9c:
cf:53:ba:ab:a6:e3:3e:47:c0:cf:2d:6e:ed:28:2a:10:8e:b7:
22:29:ff:11:33:ff:b5:4a:31:ad:22:82:1a:50:e1:30:0d:f0:
46:de:cb:eb:e9:9c:c4:4d:44:6b:89:32:ec:56:32:f7:08:e4:
b5:ae:7d:5a:19:78:74:c9:69:17:1e:2d:b0:15:59:e9:9f:34:
e8:9d:59:4e:e6:73:f9:5a:6a:2c:da:cd:5b:aa:7b:16:b9:d4:
82:14:2d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:13:02 2025 by rpki-client