Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
File: J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft (raw, json)
Hash identifier: 2kVSlbbkSw0VirdgPYeiSc+kOwjvh8Tu5C1dAMtV8kc=
Subject key identifier: 3B:75:A6:0B:9F:7A:4A:E4:8A:29:06:BA:7D:37:2D:D8:4D:98:BB:32
Authority key identifier: 27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
Certificate issuer: /CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Certificate serial: 0198D4731B8024102EBDDE3C291D7DDC63EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
Manifest number: 14A9
Signing time: Sat 23 Aug 2025 01:02:50 +0000
Manifest this update: Sat 23 Aug 2025 01:02:50 +0000
Manifest next update: Sun 24 Aug 2025 01:02:50 +0000
Files and hashes: 1: 3WjmScxyPShGMsEmfTcZS4RZUd0.roa (hash: 5cWtsZDvpUp+XvqnrWOkzcAs96EsLhbvVP+8UGNRG5Q=)
2: Fi_TM4K4PYpSezLxC5qNEiPOZ3Q.roa (hash: DTiudzjdSu7JP8slciOiBe/Ykx5OQa6RusVSJBvKWj0=)
3: J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl (hash: 0cPvk2rSrBJtH+LGtQMgJittEJE1hfOR1+odLtT2CF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:1b:80:24:10:2e:bd:de:3c:29:1d:7d:dc:63:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=274d91cfa0a6db9bfd9154a441858e00e38bdbd6
Validity
Not Before: Aug 23 01:02:50 2025 GMT
Not After : Aug 24 01:02:50 2025 GMT
Subject: CN=3b75a60b9f7a4ae48a2906ba7d372dd84d98bb32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:e7:7c:c1:ac:35:9e:a7:6e:d2:89:a3:58:
b8:b1:6d:b2:9d:bd:33:3c:94:14:5e:70:d0:59:d5:
e0:eb:9d:65:a4:e3:8a:c2:f3:32:83:b9:8c:74:f4:
14:f9:39:62:c3:7d:46:3a:43:c8:48:8e:8e:4c:30:
03:77:c3:d3:2b:52:bc:6e:18:8d:a9:29:3e:07:77:
7f:d7:63:fe:a7:2b:0c:46:14:b1:70:eb:e6:2a:42:
7f:eb:81:fc:6e:9a:9d:03:81:21:13:ca:6d:9e:e5:
5b:9a:bf:06:17:60:de:90:fa:fa:af:e1:db:d4:58:
75:68:40:4c:fa:62:a0:cd:11:94:d7:59:a7:61:7e:
f7:25:46:1d:14:97:c1:1b:c6:c3:60:6c:44:e2:ff:
70:be:20:3f:dd:20:ca:af:d2:5b:b0:9b:ac:89:91:
c3:82:cb:5c:a5:54:1a:6c:3c:ee:79:8c:24:fd:b5:
90:17:cd:a2:f3:30:42:07:3f:0e:a0:7d:a4:be:01:
95:85:e5:d5:2e:9c:cb:95:4f:be:54:ff:7f:5b:9c:
4c:9f:0f:d3:40:b7:41:73:3b:f7:11:6f:a5:1d:d9:
41:db:3a:12:50:c9:a4:18:1a:22:be:56:02:5a:fb:
60:96:1f:56:34:f0:d9:ee:a2:c2:ce:f9:d5:9e:7d:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:75:A6:0B:9F:7A:4A:E4:8A:29:06:BA:7D:37:2D:D8:4D:98:BB:32
X509v3 Authority Key Identifier:
keyid:27:4D:91:CF:A0:A6:DB:9B:FD:91:54:A4:41:85:8E:00:E3:8B:DB:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J02Rz6Cm25v9kVSkQYWOAOOL29Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c51d58-e349-4231-864f-978234c3bb70/1/J02Rz6Cm25v9kVSkQYWOAOOL29Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5b:92:0c:b8:d8:84:09:8b:c0:85:62:52:3d:b2:4b:5a:21:
37:57:6b:af:ad:bd:9a:7e:1e:bd:59:bf:74:8e:c3:f5:d8:ea:
49:b0:02:6b:c6:83:87:be:4f:b9:d8:a8:f5:f4:9e:5a:3b:c8:
39:e3:a3:8e:42:27:52:09:b4:62:47:85:83:1c:cb:36:2c:be:
e4:e4:6b:81:b2:14:eb:8e:7d:42:e8:69:e4:0f:a0:43:c5:73:
38:ca:05:b4:93:04:80:93:62:31:1b:b6:7f:3f:72:e5:ce:19:
1e:1b:06:67:cb:3c:80:47:21:04:eb:f9:67:29:bb:92:e7:31:
dc:c5:dd:b2:0c:42:1e:79:c7:a3:ed:db:51:4f:4f:74:11:40:
d9:3a:16:3e:60:6d:a6:a8:ef:1e:36:6d:25:8a:f3:67:c9:cd:
e8:5e:95:34:84:8a:e8:a3:4a:b9:de:b2:31:cd:65:97:2f:8d:
0b:15:0f:18:92:68:2b:21:41:38:ec:5c:9b:2b:99:20:5a:62:
9d:6d:9e:d2:ee:dc:69:71:43:8b:8e:eb:2f:e7:05:c2:74:6d:
2d:00:08:e5:14:58:ff:a7:2d:fb:f3:58:b4:3d:31:af:3d:d6:
2b:d6:52:dc:32:61:2b:e2:5a:a0:1c:d7:5f:fb:b0:02:42:aa:
3c:f2:f9:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:23 2025 by rpki-client