Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
File: J9TWlrrbEJTKoV176Gw5pxLg7hI.mft (raw, json)
Hash identifier: gA5YPZBtXgVJyrs5YyE0IGz0fQQrYOg4k7KX+xZCMtI=
Subject key identifier: 5A:81:4E:E9:87:DF:B9:D6:35:70:00:B2:29:A7:DD:A3:DC:E6:60:B7
Authority key identifier: 27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
Certificate issuer: /CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Certificate serial: 0198D54EBA4DE5143BCE2957B5626CE08328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
Manifest number: 15D8
Signing time: Sat 23 Aug 2025 05:02:43 +0000
Manifest this update: Sat 23 Aug 2025 05:02:43 +0000
Manifest next update: Sun 24 Aug 2025 05:02:43 +0000
Files and hashes: 1: J9TWlrrbEJTKoV176Gw5pxLg7hI.crl (hash: k9jFfZy8YXgi0I3y9/Ivarg9//W9TOuBZbY9NcabpUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:ba:4d:e5:14:3b:ce:29:57:b5:62:6c:e0:83:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d4d696badb1094caa15d7be86c39a712e0ee12
Validity
Not Before: Aug 23 05:02:43 2025 GMT
Not After : Aug 24 05:02:43 2025 GMT
Subject: CN=5a814ee987dfb9d6357000b229a7dda3dce660b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:43:57:23:5d:60:31:34:ec:52:6a:70:98:b5:
b9:2f:ba:74:c2:b9:5a:36:11:e9:c5:d1:41:18:12:
3c:dd:72:9e:6d:7d:ad:62:3e:b1:eb:30:fb:be:8e:
25:a8:5c:5d:7a:73:09:db:34:75:33:39:10:63:1d:
7d:45:c9:6d:cb:a6:12:1d:f7:b4:72:8c:bc:e4:e8:
d9:44:b9:17:3b:b7:14:f0:47:ec:e7:7b:d2:20:df:
8f:51:e4:63:23:45:8c:32:00:00:2c:51:1a:3f:58:
4f:7e:ba:9e:59:e0:f6:ea:b8:1b:0d:53:2c:c2:e4:
f6:a3:00:86:79:af:00:05:86:ff:48:a2:55:8f:cb:
99:08:ec:39:96:a0:cc:7c:40:2a:9b:93:b9:1c:6b:
4d:81:47:e9:fe:d5:00:f9:d4:f7:46:97:fe:98:a1:
e7:67:9d:db:f2:35:93:22:bd:bd:a3:22:64:65:72:
fa:70:7a:23:58:1a:dd:89:09:3b:f7:c8:8e:5b:25:
c0:78:b1:3e:6c:62:25:cf:4a:ea:67:70:aa:09:e2:
62:d9:3f:6d:10:22:d0:37:2b:c6:92:e9:29:f7:61:
05:5f:9c:f1:2b:e5:48:20:fe:9e:db:4d:44:bf:75:
60:9c:9a:56:cc:ae:16:39:15:46:e5:92:bb:d7:e6:
21:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:81:4E:E9:87:DF:B9:D6:35:70:00:B2:29:A7:DD:A3:DC:E6:60:B7
X509v3 Authority Key Identifier:
keyid:27:D4:D6:96:BA:DB:10:94:CA:A1:5D:7B:E8:6C:39:A7:12:E0:EE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9TWlrrbEJTKoV176Gw5pxLg7hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d0ced8-f1b5-4cf5-b44d-e8a4ece93a35/1/J9TWlrrbEJTKoV176Gw5pxLg7hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:86:2a:3a:0c:78:26:30:d9:bb:e3:82:ae:fb:ca:bb:b7:85:
24:db:d1:56:97:87:12:48:13:ec:9e:db:e2:57:9b:df:20:c9:
1c:8c:c1:42:a8:3b:90:44:6d:72:bd:62:a1:e0:34:7d:ca:88:
66:c8:88:de:93:76:95:8c:ba:04:c2:11:98:70:63:8e:d0:28:
7c:cc:6e:c2:97:d1:89:40:7d:c4:6d:76:21:eb:81:b6:c4:c9:
91:18:34:10:28:5a:5b:99:73:ef:72:57:da:29:5c:97:03:f0:
9e:67:c4:cf:ff:47:54:dd:eb:f2:92:87:0c:2e:bf:12:e2:ea:
b8:10:ae:52:53:11:c4:cb:c6:bc:44:a3:48:f4:1e:df:ed:78:
5d:95:dd:af:c9:f0:1f:25:d5:5f:ed:14:e0:9e:55:3e:c0:4c:
42:24:f1:11:e0:34:6c:27:a5:d0:dc:6f:2b:fc:04:0b:ec:c9:
98:52:1b:e2:36:90:00:de:c2:af:dd:a7:bd:8b:6a:c7:60:53:
e3:58:13:55:3d:03:a9:f9:78:64:65:d0:19:e6:e6:b5:01:90:
98:cd:f8:88:6a:be:0f:8d:40:b8:0e:23:d3:d5:54:d0:8a:48:
89:82:8a:40:38:41:67:97:a0:dd:31:8f:7d:82:2e:46:6a:c1:
c3:77:67:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:08:08 2025 by rpki-client