Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
File: J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft (raw, json)
Hash identifier: 69sMyx5lSfBkYSFM8xxekT3CRGbRTM5lOFW8sXkI3WY=
Subject key identifier: 16:BD:0F:35:77:E1:4E:62:D1:BA:0E:C3:D2:50:0C:91:9F:2C:BB:BB
Authority key identifier: 27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
Certificate issuer: /CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Certificate serial: 0197B6D796C7DFE7FB8C6B02790CE4880A19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 14:01:11 +0000
Manifest this update: Sat 28 Jun 2025 14:01:11 +0000
Manifest next update: Sun 29 Jun 2025 14:01:11 +0000
Files and hashes: 1: J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl (hash: zD3un4t1Ag7HmQOaJYbSRN5tOJO0g31/3BUAO1Acy6w=)
2: hwA0UWKL_slMireOaLXKWCZKMxk.roa (hash: Cs+6QJ4Ir+A+/zhLEyGmKYQ1SWGWIXNvlkhllKogGis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:96:c7:df:e7:fb:8c:6b:02:79:0c:e4:88:0a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278901c061a355a3fdaace0c80b967ad1cd3717a
Validity
Not Before: Jun 28 14:01:11 2025 GMT
Not After : Jun 29 14:01:11 2025 GMT
Subject: CN=16bd0f3577e14e62d1ba0ec3d2500c919f2cbbbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:72:f5:5f:ef:de:3d:bb:fc:9c:b9:ac:84:
d8:24:8b:78:6e:ef:0a:d4:05:84:c3:88:a4:47:df:
b9:e3:0a:b0:45:df:43:21:34:c0:6e:a0:3f:f2:f9:
72:85:99:a1:70:9f:3a:5e:84:b3:99:99:6f:47:12:
cb:52:ff:38:a2:a5:14:f3:c5:ca:9c:f7:0f:a0:63:
53:a3:46:c5:7a:c9:fb:21:0f:d7:37:e9:1d:c4:85:
b9:aa:37:08:c0:91:f2:6e:bd:60:f4:de:96:76:96:
a8:42:59:f1:07:26:85:f1:db:fc:18:3c:fc:8a:f6:
0d:17:df:8d:4e:e8:4e:d0:c4:91:11:6f:59:35:0b:
44:3b:1d:cf:77:12:a0:83:14:1d:5d:19:f9:92:71:
05:7f:62:ae:7d:c1:5b:a1:d6:0f:07:3b:e6:72:79:
38:ae:20:f9:6f:5f:3a:9d:28:b6:0d:b8:8b:18:29:
da:fd:d3:61:8e:5f:7c:ee:67:c4:0a:44:69:95:d0:
d5:29:d2:38:2f:2b:f7:ad:d2:4f:8d:f4:e1:55:e8:
dd:43:df:0b:a5:ab:02:08:92:c5:d3:77:46:3c:75:
4d:9b:7d:f4:c4:d8:79:2d:92:73:11:fc:ba:5f:92:
16:0f:34:ad:ed:5e:fa:d4:4a:b5:60:1f:c9:51:b2:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BD:0F:35:77:E1:4E:62:D1:BA:0E:C3:D2:50:0C:91:9F:2C:BB:BB
X509v3 Authority Key Identifier:
keyid:27:89:01:C0:61:A3:55:A3:FD:AA:CE:0C:80:B9:67:AD:1C:D3:71:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J4kBwGGjVaP9qs4MgLlnrRzTcXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/902599-48d6-4a89-8724-9c7a7bcaaf36/1/J4kBwGGjVaP9qs4MgLlnrRzTcXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:13:3f:de:6d:28:f9:d3:fa:ec:3e:be:fa:31:f9:ec:d9:67:
68:b2:1d:52:8f:84:23:e5:a6:ee:ce:20:57:e0:6b:f0:4f:51:
17:6e:bb:23:a2:00:3a:09:07:4e:70:b3:cd:c6:b4:5d:fd:a6:
5d:93:8f:01:e3:b5:f3:62:f4:2b:73:03:e7:ec:93:7f:94:7e:
0c:2b:0c:2c:bb:74:f7:b1:4e:e5:41:6c:d1:5f:e8:eb:7c:72:
c8:5d:12:68:95:bc:9e:2f:73:aa:ba:6f:f1:89:4d:e2:8a:f7:
ba:c4:2d:0b:96:19:69:67:12:26:ec:14:af:ee:5e:38:27:47:
4b:76:b4:d3:6d:95:a1:3e:17:96:74:f8:49:9a:6a:f9:37:df:
58:91:68:a4:fb:aa:9c:e0:00:47:95:eb:ed:f8:bb:de:b2:af:
53:e4:c9:06:c3:9b:15:b4:ab:85:8d:06:3c:33:c1:2f:0e:87:
b7:8f:c3:cf:50:81:ec:2f:e5:dd:e2:62:e5:0b:3f:17:a8:a5:
09:90:7e:d4:aa:89:d8:69:3b:9b:fa:68:e9:d7:ec:0d:13:3d:
19:eb:49:c8:9b:de:a1:dc:7c:d7:31:39:aa:ab:4f:40:dc:7d:
ed:36:c6:e2:fc:44:e6:b9:04:31:1e:57:69:01:05:b6:94:df:
55:b2:c1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:21 2025 by rpki-client