Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
File: J2PZz8gXMu0vpKZC7a4zTAApUPg.mft (raw, json)
Hash identifier: lFrYhbNLTPJGNVJc9v6gMF5ozoSHx90JE/fACOMsyOw=
Subject key identifier: DF:31:38:5E:7F:2C:CA:BA:C5:A2:7E:83:7A:17:3C:3E:4D:49:51:F7
Authority key identifier: 27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
Certificate issuer: /CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Certificate serial: 0197B77CD3A0A56D152E294496AE21EC2E07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
Manifest number: 4F
Signing time: Sat 28 Jun 2025 17:01:40 +0000
Manifest this update: Sat 28 Jun 2025 17:01:40 +0000
Manifest next update: Sun 29 Jun 2025 17:01:40 +0000
Files and hashes: 1: J2PZz8gXMu0vpKZC7a4zTAApUPg.crl (hash: WZ9kh20XXPVfEnC0D7kf97NHfrHWTRaUnmZzSTI0ooI=)
2: PXQZ8Kqy_mx9lBo5_cDxC51se1U.roa (hash: 9tHWBrF2ZmcSWuE44cZk0kByYXScp8kTGOAiMALH64w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d3:a0:a5:6d:15:2e:29:44:96:ae:21:ec:2e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2763d9cfc81732ed2fa4a642edae334c002950f8
Validity
Not Before: Jun 28 17:01:40 2025 GMT
Not After : Jun 29 17:01:40 2025 GMT
Subject: CN=df31385e7f2ccabac5a27e837a173c3e4d4951f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:d4:d1:93:cb:da:cb:60:71:7d:7f:b7:87:
c1:1b:91:90:a7:28:f9:34:a4:10:31:20:d2:02:00:
e7:79:b4:80:f4:f6:89:27:45:5e:6f:eb:64:16:d5:
41:86:f4:83:60:14:bc:3f:c8:65:35:44:d1:c3:90:
23:ea:5c:32:58:3e:c8:a4:2b:65:71:0f:a8:c0:1d:
27:8f:68:0b:15:06:59:99:a5:6f:5c:8a:c7:03:45:
ca:87:32:29:d4:c2:07:48:04:af:46:0f:5d:b2:fd:
4d:48:fa:7d:99:fc:c2:17:57:e3:b3:7b:6e:87:db:
ef:1d:a4:16:b9:5c:2c:11:c9:d2:0b:8a:57:db:b9:
ce:29:66:f5:1f:34:e5:35:1b:ef:c3:d8:b9:22:25:
d8:5d:d5:11:12:49:32:74:ad:de:ab:03:c2:52:ac:
b7:03:0c:ac:06:28:59:09:67:60:17:29:16:32:e7:
25:2f:61:7c:cc:e9:07:d1:c8:2a:51:52:36:76:55:
ef:66:81:a3:da:c4:21:59:35:77:08:75:36:95:ad:
e6:6c:9a:27:7b:9c:b3:10:9f:ea:d3:0a:02:19:63:
88:75:1d:3a:72:16:94:c3:2f:40:31:da:7d:ab:f2:
02:36:d0:37:5f:ff:2d:29:33:54:7a:b8:93:4f:fd:
4c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:31:38:5E:7F:2C:CA:BA:C5:A2:7E:83:7A:17:3C:3E:4D:49:51:F7
X509v3 Authority Key Identifier:
keyid:27:63:D9:CF:C8:17:32:ED:2F:A4:A6:42:ED:AE:33:4C:00:29:50:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J2PZz8gXMu0vpKZC7a4zTAApUPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7ac1c2-140f-4c1a-81cc-1d12280ba322/1/J2PZz8gXMu0vpKZC7a4zTAApUPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:d5:99:0e:6d:32:87:ce:7e:db:aa:b4:39:9e:20:0d:6b:df:
8d:dc:c2:21:f2:ed:18:16:f1:26:d6:1a:f8:1a:40:3a:eb:e6:
b2:0b:f7:40:a0:a6:44:13:ac:4a:b8:7f:d7:40:1b:07:ca:ea:
07:63:bb:ea:87:1c:97:58:59:42:74:44:7c:b2:b1:e0:3f:06:
2e:59:96:d8:36:cf:0a:88:18:13:0d:98:df:f8:96:c3:11:25:
fd:68:79:70:88:2d:22:ee:e7:6c:0c:f6:36:4c:8b:86:ae:a6:
f1:4f:d3:9c:31:1a:c6:7b:46:1d:51:a0:a2:88:02:43:6f:25:
90:52:53:a5:71:28:e7:98:18:7f:9e:93:54:13:8e:df:58:a6:
e8:27:09:63:c2:2e:bf:d5:3c:78:27:6d:eb:e7:94:36:75:eb:
72:c5:31:bf:81:db:84:a5:27:b5:76:9b:4b:fc:72:06:df:16:
f1:c1:19:15:b0:99:7d:ba:ea:06:59:79:7b:aa:37:56:8a:3a:
88:f5:d9:1f:c1:39:2c:a3:ea:38:e3:86:64:d0:43:f4:25:8b:
90:6f:92:f2:2c:c7:1d:c9:19:47:1c:f9:bd:47:89:c8:c9:53:
00:47:85:fa:1c:1d:1f:7c:3e:98:46:7a:ac:cc:b3:1e:12:47:
42:20:c3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:10 2025 by rpki-client