
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
File: J9VOSniNaWei7vOmaSYiYm9U760.mft (raw, json)
Hash identifier: wHbAgN+P5Dc0Aei7C9y1NdalEykKIxiywaAsIPIS+S0=
Subject key identifier: AC:FE:7E:BD:5C:C0:2E:5F:C7:78:A1:24:0A:1C:CE:B0:20:7A:C7:F6
Authority key identifier: 27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
Certificate issuer: /CN=27d54e4a788d6967a2eef3a6692622626f54efad
Certificate serial: 0197CDCE39076518A6842D9D7F8A620AE46B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
Manifest number: 0AE9
Signing time: Thu 03 Jul 2025 01:02:13 +0000
Manifest this update: Thu 03 Jul 2025 01:02:13 +0000
Manifest next update: Fri 04 Jul 2025 01:02:13 +0000
Files and hashes: 1: BhvqAjp2FFsTdoGE_6UzPBUzgUU.roa (hash: Kaoj9hdcD1FNas61kk3Ce73rVwZ3HgxiSCiLpA2QHSE=)
2: J9VOSniNaWei7vOmaSYiYm9U760.crl (hash: Mmn+6z3WrmJ5NWA74bN6u5BVSaNZ/fr4ZduW3txu7/M=)
3: e-ijOhbtTVFVKNwA3A0KZtd9G28.roa (hash: 4dN/JLGpYdlMav39iELvw9iA3Kyyi/awTvBLXNA8PfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:ce:39:07:65:18:a6:84:2d:9d:7f:8a:62:0a:e4:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27d54e4a788d6967a2eef3a6692622626f54efad
Validity
Not Before: Jul 3 01:02:13 2025 GMT
Not After : Jul 4 01:02:13 2025 GMT
Subject: CN=acfe7ebd5cc02e5fc778a1240a1cceb0207ac7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d1:0a:d7:cd:6a:96:23:27:9c:7c:f9:79:82:
41:31:23:40:94:93:f8:b8:5a:78:b4:e6:96:d1:33:
a3:3f:5f:3a:6b:a2:85:e2:b2:f3:ee:d1:fc:36:3a:
1c:ce:1e:c7:09:67:4a:8c:b0:6d:39:da:60:5b:80:
44:67:b1:62:80:56:42:e4:d6:30:54:cb:63:13:c4:
da:0e:0e:51:ec:85:9c:15:72:1f:7d:d3:55:76:f1:
87:0d:67:61:ca:b7:f0:6c:16:13:19:88:e0:d0:31:
5e:42:06:a1:c1:71:08:3a:fa:49:fd:4d:8b:28:c1:
88:08:bf:fe:cd:10:fc:ac:69:f2:81:01:19:8f:d4:
9b:bb:56:64:d8:c2:95:fd:b5:dd:f0:62:62:28:b7:
c6:ae:52:83:64:ff:ff:59:f8:39:27:46:79:36:01:
24:83:63:f9:8d:89:4a:b8:dd:43:39:97:22:25:f0:
40:cb:f7:a8:05:01:e2:a5:20:f0:ff:e1:cf:0d:42:
ab:aa:6a:18:1a:0b:fa:28:33:9f:fb:04:2e:fc:f9:
c9:42:32:3a:24:45:78:23:05:98:e3:b1:8d:23:59:
28:17:97:b5:ee:16:1f:fa:19:10:b5:15:f6:af:5c:
b4:8e:22:4c:fd:d4:35:8f:cd:0c:c3:b7:c0:05:d6:
1b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FE:7E:BD:5C:C0:2E:5F:C7:78:A1:24:0A:1C:CE:B0:20:7A:C7:F6
X509v3 Authority Key Identifier:
keyid:27:D5:4E:4A:78:8D:69:67:A2:EE:F3:A6:69:26:22:62:6F:54:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9VOSniNaWei7vOmaSYiYm9U760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/832147-310e-4bb5-99da-e99a8dc30255/1/J9VOSniNaWei7vOmaSYiYm9U760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:68:0b:95:fc:a5:61:21:fc:42:a6:64:81:e7:24:64:ed:6d:
3b:a3:bd:51:cf:7b:16:4a:f9:d6:7b:ed:0c:32:2c:f0:02:79:
63:81:a1:c7:cb:b1:f1:d9:c3:29:f6:9d:ac:1f:c0:f6:58:50:
e7:68:68:1b:4e:81:cc:a9:44:17:12:4e:2c:0c:fa:11:51:a6:
ff:8a:fc:8e:1b:1a:34:5e:1a:41:4a:49:b3:34:0a:61:99:e4:
0d:a9:9b:58:7f:16:a0:af:dc:2b:ed:0b:f0:87:7d:e6:52:06:
76:30:ac:27:6f:6f:3f:26:18:15:ea:58:76:7b:24:01:e4:d9:
7d:55:dc:a0:53:11:ab:8a:ad:85:0c:39:b6:7a:8b:dc:22:8f:
1b:60:89:29:9c:1a:ae:95:99:21:52:07:66:fd:05:fd:1b:5a:
6d:9b:80:65:90:12:75:55:a1:b7:26:d9:92:7f:b8:08:72:2a:
ac:94:48:0e:13:3a:5f:93:26:a9:c3:02:67:bf:47:d9:ff:91:
8c:4d:b6:8c:11:7c:bb:83:b6:fd:34:74:4b:b9:14:4b:ae:cb:
e9:34:c4:9f:28:9e:18:91:4b:14:dd:43:ff:60:f9:02:0a:90:
11:98:78:6f:ab:6a:68:bc:70:d3:94:28:97:fa:c5:01:33:44:
37:30:55:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 04:21:36 2025 by rpki-client